Secure Architecture
Security is at the heart of Wapi's architecture. Here's how your data is protected:
SSL/TLS Encryption
All communications between your site, the SaaS, and the GPT are encrypted via HTTPS.
Hashed Tokens
Your API tokens are hashed in the database. Even in case of a leak, they are unusable.
EU Hosting
All data is hosted in Europe, in compliance with GDPR.
Protected Actions
Sensitive actions (deletion, system updates) are disabled by default.
Two-Factor Authentication (2FA)
Protect your SaaS account with two-factor authentication:
- Go to Profile > Security
- Enable two-factor authentication
- Scan the QR code with Google Authenticator or Authy
- Save your recovery codes
Important
Keep your recovery codes in a safe place. They are your only way to access your account if you lose your phone.
Best Practices
For your SaaS account
| Practice | Why |
|---|---|
| Unique password | Never reuse your passwords |
| 2FA enabled | Protection against password theft |
| Secure email | Also protect your recovery email |
| Regular sessions | Log out from unused devices |
For your API tokens
| Practice | Why |
|---|---|
| One token per site | Isolate access |
| Periodic regeneration | Limit the impact of a leak |
| Never share | The token gives full access |
| Monitor logs | Detect suspicious activities |
For WordPress
| Practice | Why |
|---|---|
| WordPress up to date | Security patches |
| HTTPS required | Prerequisite for Wapi |
| Minimal permissions | Only enable what's necessary |
| Regular backups | In case of problem |
Security logs
The Wapi plugin logs all executed actions:
Show security logs from the last 7 daysWhat actions were executed yesterday?Recorded information
- Date and time of the action
- Type of action executed
- Origin IP
- Result (success/failure)
- Modification details
Log example
2024-12-24 10:30:15
SUCCESS
create_post
IP: 88.xxx.xxx.xxx
2024-12-24 10:28:42
SUCCESS
list_posts
IP: 88.xxx.xxx.xxx
In case of problem
Compromised token
If you think your token has been compromised:
- In WordPress, go to Wapi > Settings
- Click on Reconnect to generate a new token
- Check logs for suspicious actions
- Contact support if needed
Suspicious activity
If you detect unusual activity:
- Temporarily disable the plugin
- Check security logs
- Reconnect to regenerate the token
- Contact [email protected]
Security Support
For any urgent security questions, contact us at [email protected]