Security at IPTVbp

IPTVbp is hosted IPTV billing software, so we look after the servers, the updates and the security of the platform for you. This page lists what protects your account, your panel and payment credentials and your customers' data today.

Signing in

  • Two-factor sign-in with an authenticator app, with one-time backup codes in case the phone is lost.
  • Passkeys, so you can sign in without typing a password.
  • Your login history and active sessions in the portal, and you can sign out other sessions.
  • Passwords are stored only as bcrypt hashes, and session tokens are hashed at rest.
  • Sign-in attempts are rate-limited to slow down password guessing.

Panel and payment credentials

  • The API keys and logins of your IPTV panels and payment gateways are stored encrypted (AES-256-GCM).
  • Payments go to your own payment accounts; card details go to the payment provider and are never stored by IPTVbp.
  • A line is created only once the payment is confirmed — by the payment provider, or by you for payment methods you confirm by hand.

Your store and your customers

  • Each store sees only its own customers, orders and money. No store can see another store's data.
  • Staff accounts get their own roles, and privileged actions are written to an audit log.
  • Bot protection on sign-up and sign-in forms.

The platform

  • All traffic is served over HTTPS with HSTS.
  • Pages are sent with a strict Content Security Policy, so injected scripts do not run.
  • The database and cache run on a private network behind a firewall, not on the public internet.
  • Data is backed up automatically.

Privacy

  • Analytics load only after a visitor accepts cookies; reject and no third-party analytics run.
  • Requests to see or delete personal data (GDPR) are handled through [email protected].

Report a problem

Found a security problem? Tell us through the contact page and leave out any customer data. More: the privacy policy, about IPTVbp and system status.