machines.cash protects sensitive user data with strong client side encryption. All user text fields are encrypted on your device before they are sent anywhere.
We use AES 256 GCM with random initialization vectors. This ensures every encrypted field is unique and cannot be correlated. Only ciphertext is sent to our API and database. This means our servers never see or store your plain text information.
Even if someone accessed the database, they would only see encrypted blobs with no ability to decrypt them without your keys. This is the highest standard for end to end protection of user data.