Security
How we handle your RCON password.
Six short points on how your server credentials, your staff and your account are protected.
- Encrypted before it is stored
- RCON and SFTP passwords are encrypted with AES-256-GCM before they reach our database.
- Never shown again
- Once saved, a password is never sent back to the browser, not even to the owner, and it is removed from console logs.
- Staff never need the password
- Moderators use their own accounts and run commands through GameSentry, with roles you control per server.
- Every action recorded
- Commands, bans and setting changes are written to an audit log that owners and admins can review.
- Steam sign in and two-factor
- We never hold a password for your account. You can add an authenticator app and sign out any device.
- Cloud hosting with daily backups
- GameSentry runs on dedicated cloud infrastructure and the database is backed up automatically every day.
Found a problem?
Email us with the details and steps to reproduce it. We read every report: [email protected]