Help Center
How can we help?
Browse topics below, or reach our team through live chat and support tickets from your dashboard.
Getting started
Registration, email verification and identity checks.
Deposits & withdrawals
Networks, confirmations, minimums and fees.
Trading
Order types, fills, rejections and fees.
Plans & copy trading
How subscriptions and copy settings work.
Security
2FA, sessions and protecting your account.
Learn
In-depth guides to markets and risk.
How we protect your account
- Passwords are hashed with Argon2id; we never store or see them in plain text.
- Two-factor authentication with time-based codes and single-use backup codes.
- Sessions use secure, HTTP-only cookies. You can end any session from Settings.
- Sensitive data such as 2FA secrets and ID numbers is encrypted at rest (AES-256-GCM).
- Withdrawals require step-up verification and are reviewed before processing.
- Balances can never go negative: every balance change runs in a database transaction with integrity constraints.
- Administrative actions on accounts and funds are recorded in an audit log.
- Rate limiting and request-origin checks protect against brute force and cross-site attacks.
How do I enable two-factor authentication?
Go to Settings → Security, choose Enable 2FA, scan the QR code with an authenticator app and confirm with a 6-digit code. Save your backup codes somewhere safe.
I lost my authenticator device.
Use one of your backup codes to sign in, then disable and re-enable 2FA with your new device. If you have no backup codes, contact support to begin account recovery.
Will HarborFinance ever ask for my password?
Never. We will not ask for your password, 2FA codes or backup codes by email, chat or phone.