Protected authentication
Athena Vault uses Better Auth email/password authentication with secure session handling.
Back to LoginSecurity at Athena Vault
Your financial workspace,
protected by design.
We use layered authentication, owner-scoped authorization, and private deployment boundaries to help keep your financial workspace secure.
How it works
Built for private, accountable access.
Session security
Sessions are stored server-side, expire automatically, and can be revoked from Account settings.
Owner-scoped access
Every financial request is resolved through the authenticated user and their owner-scoped workspace.
Private data boundary
Financial data stays inside the private application and database boundary; it is not used for public sharing.
Current capabilities
Security features you can use today.
Password changesEnabled
Change your password from Account settings and sign out all sessions after the update.
Active sessionsEnabled
Review devices and revoke individual sessions or all sessions.
Password recoveryNot configured
Email recovery is not enabled until a private mail delivery service is configured.
Two-factor authenticationNot enabled
Authenticator-app protection is planned but is not active on this deployment.