Skip to main content

Why It Is Secure

We rely on WWPass client-side encryption technology, so the server never has access to your username or password. The credentials you enter are encrypted in the browser with a 256-bit AES key before being sent to the server.

On the Windows login screen, the data is retrieved in encrypted form and then decrypted directly on the Windows computer.

WWPass Winlogon does not collect personal data related to payments. We use the Stripe.com payment gateway, which handles all sensitive payment data and is PCI DSS compliant.

The WWPass Winlogon server stores only Stripe transaction IDs. Below are two database records related to a user.

  1. user profile (including encrypted credentials)

  {
    _id: ObjectId('6a04d0c31b90b0f509cdb321'),
    PUID: '2a70001899db099363d90b13da9c2b01',
    creds: '{"iv":"441073c403791465d6bcf9e40e6cb9cb","cdata":"74b7116ff76ecc7c7a5b2e8d03f1db20871bb1ece457ed37fc1e2458031d4706d651b039e33c0c59f1655719b713c485"}',
    subscription: 'personal',
    expires: '2027-05-13T19:28:17+00:00',
    payment_id: 'cs_test_b1S50ZTODfBNrA7YWd6YYL4P9ZYnPlBndX2ZaDgkjI5frUcwb9Bmg56k7J'
  },

  1. Payment details
  {
    _id: ObjectId('6a04d0c635083414a4021d15'),
    UserID: '2a70001899db099363d90b13da9c2b01',
    csID: 'cs_test_b1S50ZTODfBNrA7YWd6YYL4P9ZYnPlBndX2ZaDgkjI5frUcwb9Bmg56k7J',
    price: 'price_1TWJheQjMQhy8dH78EhZOBmc',
    date: '2026-05-13T19:28:06+00:00',
    payment_status: 'paid',
    status: 'complete',
  }