Security
From signing in to every deposit and withdrawal, protection is part of the design — not an add-on.
Access to your account is protected by multiple layers on our servers.
New accounts must confirm their email address with a single-use link before they can sign in.
Passwords are stored only as strong one-way hashes (scrypt) — never in readable form.
Repeated failed sign-in attempts temporarily lock the account.
Signing in is designed to be simple for you and difficult for anyone else.
Sessions use random tokens in httpOnly cookies; only a hash of each token is stored.
Password reset links are single-use and expire after 30 minutes.
Changing your password ends every other active session.
Exprodus is a managed (custodial) platform. Deposited assets are held in platform-managed wallets.
Each user receives platform-managed deposit addresses that are never reassigned to anyone else.
Your balance is calculated from an append-only ledger of credits and holds, not an editable number.
You don't need to store private keys or recovery phrases — access is through your account.
Funds move only after a review by our team.
Deposits are verified on the blockchain by our team before they're credited.
Withdrawal amounts are held immediately, then approved and sent by our team.
Withdrawal addresses are format- and checksum-validated for the selected network.
We collect what's needed to run your account and meet legal obligations — and we're clear about it.
Connections between your device and our services use TLS.
Personal data is used to provide and secure the service, as set out in our Privacy Policy.
We will never ask for your password or account links by email, phone or chat.
Every important action is recorded and visible.
Deposits, withdrawals and administrative actions are recorded and can't be edited or deleted.
In-app and email notifications for deposits, withdrawals and account changes.
Keep figures private on screen with a single tap.
Security principles
Administrative actions are restricted to authorised staff and checked on our servers.
No single control is relied on to keep accounts and assets safe.
Every balance change is reviewed, recorded and traceable.
We explain how custody works, including what we don't do yet.
We welcome responsible disclosure. Please report security issues privately so we can investigate and fix them before they're made public.
Create your account in minutes. Explore at your own pace.