Security FAQ

Go to the login page and click "Forgot Password". Enter your registered email address and a reset link will be sent to you. The link is valid for 24 hours.

2FA adds an extra layer of security by requiring a second verification step when logging in — typically a code sent to your phone or generated by an authenticator app. Enable it in Settings → Security.

Immediately change your password and enable 2FA if not already active. Check your active sessions in Security Settings and revoke any unfamiliar devices. Contact support if you need further assistance.

All data is encrypted at rest and in transit using industry-standard AES-256 encryption and TLS. Your content and personal information are stored in secure cloud infrastructure with regular backups.

Yes. Go to Settings → Security → Active Sessions to see all devices and browsers currently logged into your account. You can revoke access from any device remotely.

All your personal data and content are permanently deleted within 30 days of account deletion. Backups are also purged after this period. This action cannot be undone.

Go to Settings → Security → Active Sessions and click "Sign Out All Devices". This immediately invalidates all existing sessions across every device.

Yes. Payment processing is handled by Stripe, a PCI-DSS Level 1 certified provider. TotalApp never stores your full card details — only the last 4 digits and expiry date for reference.