--- title: "Keeping the door shut · Privatta" description: "Lockouts after wrong guesses, trusted address ranges, hashed passwords, a signed installer and an open-source relay." url: "https://royalsoftworks.com/products/privatta/security/keeping-it-shut/" source: "https://royalsoftworks.com" format: "markdown" note: "Markdown rendering of the HTML page at `url`. Same content, same canonical URL." --- Security & privacy · 3 of 4 # Keeping the door shut. Lockouts after wrong guesses, trusted address ranges, hashed passwords, a signed installer and an open-source relay. ## Rate-limited, then locked Over the internet, 5 wrong security codes or passwords within 10 minutes lock the session until the host issues a fresh key and code. On the LAN, 20 failed sign-ins from one address in 15 minutes are refused until the window passes. ## Trusted address ranges Choose which address ranges this machine will fetch files from. Private (RFC 1918) ranges, loopback, Hamachi and Tailscale are built in; add ZeroTier or a company VPN by hand. On every tier. ## Hashed credentials Account passwords are stored only as scrypt hashes — never in plaintext, and never written to the access log. ## You can verify what you installed The Windows installer and portable build carry an Authenticode signature issued to Royal SoftWorks, so Windows names the publisher rather than reporting an unknown one and you can check the signature yourself before running it. That signature is also what lets an installed copy confirm the build replacing it came from us. ## An open-source, stateless relay The relay that introduces two peers holds one in-memory table of pending pairings and nothing else — no database, no disk write. It forgets a pairing the instant its two peers connect, relays only the connection handshake — never a file or a password — and it's open source, so you can audit it or run your own instead of the default. [Previous Proving who is on the other end.](https://royalsoftworks.com/products/privatta/security/proving-who/) [Next Every knock at the door, written down.](https://royalsoftworks.com/products/privatta/security/access-log/) [All of Privatta security](https://royalsoftworks.com/products/privatta/security/)