Protected authentication
Athena Vault uses Better Auth email/password authentication with secure session handling.
Back to LoginSecurity at Athena Vault
Your financial workspace,
protected by design.
We use layered authentication, owner-scoped authorization, and private deployment boundaries to help keep your financial workspace secure.
How it works
Built for private, accountable access.
Session security
Sessions are stored server-side, expire automatically, and can be revoked from Account settings.
Owner-scoped access
Every financial request is resolved through the authenticated user and their owner-scoped workspace.
Private data boundary
Financial data stays inside the private application and database boundary; it is not used for public sharing.
Current capabilities
Security features you can use today.
Password changesEnabled
Change your password from Account settings and sign out all sessions after the update.
Active sessionsEnabled
Review devices and revoke individual sessions or all sessions.
Password recoveryNot configured
Email recovery is not enabled until a private mail delivery service is configured.
Password protectionEnabled
New passwords follow the workspace policy and are checked against known breached-password data without sending the password itself.
Content securityEnabled
Production responses use a fresh security nonce to help prevent unauthorized scripts from running.
Two-factor authenticationAvailable
Add an authenticator app from Account settings to require a second check after your password.