Your account and data security is of paramount importance to the Legacy Keeper team. That is why we have implemented best practices to ensure minimal access by anyone to your Personally Identifiable Information (PII). Our team is available to discuss how keep Legacy Keeper Secure and minimize access to your PII and how that impacts the ability of fraudsters to access or leverage your data for malicious activities.

Contact Us

How Online Fraud Works

Detailing our approach to security is better explained with a clear understanding of the value of the data, why fraudsters want it and how they would leverage it.

Why Do Fraudsters Want Your Data?

Fraudsters want to steal your money, and they do that by accessing your financial accounts directly or aggregating PII to impersonate you to leverage your credit. According to recent data from YouGov Profiles, a quarter of American adults have experienced bank and credit account fraud (26%), making it the most prevalent type of fraud reported. This issue spans all age groups but is notably higher among older individuals. Specifically, 37% of those aged 65 and older have fallen victim, compared to 31% of those between 45 and 64, 23% of the 30-44 age group, and 15% of young adults aged 18-29.

In addition to directly accessing your accounts here are other approaches fraudsters use.

Identity theft and fraud

Identity theft occurs when a fraudster steals your personal information. Identity fraud happens when a fraudster uses that stolen personal information to commit another crime.

Credit card fraud

Credit card fraud happens when someone steals and uses your credit card or credit card information without your permission.

Debit card fraud

Debit card fraud happens when a fraudster makes an unauthorized transaction with your card or debit card information.

Real estate fraud

There are two main types of real estate fraud; title fraud and foreclosure fraud. This happens when fraudsters attempt to steal the title to your home to resell or refinance it.

How We Keep Legacy Keeper Secure

With experience in the cybersecurity space for financial institutions we are well equipped to implement preventative measures. Our goal is for you to feel safe centralizing key information and sharing that information with loved ones and key collaborators.

1. Protect Data Access

• Multi-factor Authentication: We have removed email addresses from the login process and instead depend on email access links and SMS verification codes to access your account.
• Password Encryptions: We do a password for additional functionality within the app, your password is encrypted and you are the only person that can access or manage it.
• Journal Pins: We give you the power to add an additional layer of security with journal pins that must be inputted to access individual Journals.
• Journal Data Encryption: Key Journal data like Journal values and Journal credentials require your password to be saved and accessed. No support or administrative users have the ability to access this data without your password (which is also encrypted).
• Collaboration Security Answer: You add collaborators after securly accessing your account. When adding a new collaborator you will create a security answer that they will need to input to view your Journals.

2. Secure Data Infrastructure

Legacy Keeper commits to providing and maintaining the tools that our users need to keep their data and processes safe. This includes account security, data encryption at rest and in transit, user authentication, rigorous application-level safeguards, consistent service uptime, pen testing, logging, backups, and DDoS protection. Legacy Keeper is compliant with the SOC 2 Type II standard for security, and we have implemented measures designed to meet the standards of applicable data privacy laws.

Amazon AWS oversees aspects such as the physical infrastructure, hardware, network, and the integrity of the server environment.

Secure file hosting

Secure file hosting ensures that all your uploaded files, such as images, documents, or other media, are stored safely. These files are also protected with privacy rules to prevent unauthorized access, making sure only you and permitted users can view or interact with them.

User authentication

User authentication mechanism facilitates the verification of your end-users identity according to the most up-to-date security standards.

Advanced DDoS protection

The Legacy Keeper platform uses Cloudflare and an in-house DDoS (Distributed Denial of Service) protection system to monitor, track, and block even the most granular attacks so that the application remains resistant to malicious disruption attempts.

HTTPS encryption

HTTPS encryption is employed to ensure all data transmitted is encrypted.

Article: What is the HTTPS protocol?

API authentication

Data API and Workflow API authentication, assures that any external requests to the application is both authenticated and authorized. By setting up secure tokens or specific authentication methods, we maintain control over who has the ability to access Legacy Keeper data and initiate workflows.

3. Minimize Personally Identifiable Information

A key requirement for fraudsters to utilize your data is to connect that data to your identity. Legacy Keeper minimizes the need to add PII to your account and allows you to encrypt important details about your journals which greatly reduces the usefulness of the data for fraudsters. Without the ability to connect key financial details to your identity there value of the data your store in Legacy Keeper is greatly diminished

4. Encrypt Important Data

Any data that is encrypted within the app is only viewable by users that are able to de-crypt the data themselves. This means that Legacy Keeper support is not able to access or change that information. When you save the following data using your password it is encrypted and not available to anyone without the same password you used to encrypted.

• Journal Values: Any values that you attribute to a Journal is encrypted.
• Journal Credentials: Any usernames or passwords that are associated with your journal that are saved within the credential section of your journal.