Security

How does security of MeraQuant work?

You can maximum confidence about your security while trading using the MeraQuant platform. MeraQuant is a non-custodial platform. You can use your MeraQuant account to trigger and orchestrate actions on your connected exchange accounts. But, you cannot withdraw funds either directly from MeraQuant or via MeraQuant.

How does MeraQuant connect to your exchange accounts?

MeraQuant connects to your exchange accounts using API keys. We offer two important points of security around API connections. Depending on the exchange, they are implemented in the MeraQuant platform:

API security

When you create an API key with your exchange, you have to specify an IP whitelist. The IP whitelist can be used to restrict the API key to certain IP addresses. You can use this tool to specifically authorize official MeraQuant IP addresses — and block any others. Your created API key can't be added to any other account on MeraQuant — which means they cannot be used to initiate trades with your exchange account if the request doesn't come from your MeraQuant account.

Transactional access only

Our system tells your exchange account to start and close deals. It has zero access to withdraw or transfer cryptocurrencies. Your login information for your exchange is never revealed to our system. No backdoor or cache can be exploited because the API deliberately does not have the functionality to request any of your personal information from the exchange.

How does MeraQuant secure user data?

On top of using the three key secure connection protocols explained above, MeraQuant secures user data with tools from security services provider Cloudflare, including:

  • Web Application Firewall

  • DDOS attack protection

  • SSL/TLS encryption between visitors and origin servers

What can you do to keep your data safe?

  1. When working with an exchange:

    • Secure your exchange account with two-factor authentication (2FA);

    • Save 2FA backup keys in a safe place;

    • Use a strong and unique password/email for your exchange account;

    • Don't store secure API keys in a shared or accessible document;

    • Don't send your API keys via a message to yourself or anyone;

    • Use separate API keys for different services;

    • Connect exchange via Fast Connect if possible;

    • Always be wary of phishing emails and ensure the authenticity of the sender — especially check those from your exchange providers;

  2. Official MeraQuant web and email addresses you can interact with:

    (... are a payment processing service; you will receive messages from this servicewhen you pay for a subscription to the MeraQuant platform using сryptocurrency)

  3. When creating an account on MeraQuant:

    • Ensure the address is either https://meraquant.com in your browser address bar;

    • Use an email address you are checking regularly (not a “spam address”);

    • Use a strong and unique password different from your email address;

    • Verify your email address (you will receive a link once you are registered);

  4. When using MeraQuant:

    • Hide your balance when you are sharing screenshots or your interface is viewable by others;

    • Log out from MeraQuant if you are giving access to your device to anyone else;

    • Secure your device with a password or PIN, and don't leave it unlocked;

Stopping use of a specific exchange account

In case you want to stop using a specific exchange account with MeraQuant and select another one, there's a few things you need to be aware of and to check:

  • Any trading history from within MeraQuant for this account will be deleted;

  • Any active deals or orders created within MeraQuant for this exchange account will be automate canceled;

Important: Please remember to log in to your exchange's website and delete the API key, otherwise it will remain active and could become a security risk.