Security

Every Astro account is protected by email and password authentication. We strongly recommend enabling two-factor authentication (2FA) via an authenticator app or SMS for an additional layer of security. Biometric login (Face ID, Touch ID, or fingerprint) is available on supported mobile devices.

You can review and manage active sessions from Account → Devices. If you see an unrecognized device or location, terminate the session immediately and change your password.

All data transmitted between your device and Astro servers is encrypted using TLS 1.2 or higher. Sensitive data stored on our systems — including account credentials, identity documents, and financial records — is encrypted at rest using AES-256 or equivalent standards.

If you import an external wallet, private keys and seed phrases are encrypted locally on your device. Astro never stores your unencrypted private keys on our servers.

Our systems continuously monitor for suspicious activity including unusual login patterns, rapid fund transfers, and account takeover attempts. We may temporarily restrict account activity and contact you to verify transactions that appear inconsistent with your normal behavior.

Deposits and withdrawals may require additional verification steps. Large or first-time transfers to external accounts may be subject to a holding period in accordance with regulatory requirements.

Astro employees and support agents will never ask for your password, full Social Security number via unsolicited contact, one-time passcodes, or your wallet seed phrase / private key. If someone claiming to represent Astro requests this information, it is a scam — report it immediately.

We will only contact you through official channels: in-app notifications, email from @astroinvestment.capital domains, or verified support within the platform. Always navigate to Astro directly rather than clicking links in unsolicited emails.

• Use a unique, strong password not shared with other services.
• Enable two-factor authentication and keep your recovery codes in a safe place.
• Do not share your login credentials or 2FA codes with anyone.
• Review your linked devices and payment methods regularly.
• Keep your mobile operating system and the Astro app up to date.
• Avoid accessing your account on public or shared Wi-Fi networks.
• Store wallet seed phrases offline — never in email, cloud storage, or screenshots.

Astro Investment Capital Ltd. is a member of the Financial Industry Regulatory Authority (FINRA) and the Securities Investor Protection Corporation (SIPC). SIPC protects securities customers of its members up to $500,000 (including $250,000 for claims for cash). SIPC does not protect against market losses or losses from unauthorized trading if you shared your credentials.

For full regulatory disclosures, see our Disclosures page.

If you suspect unauthorized access to your account, notice suspicious activity, or believe you have been targeted by a phishing attempt, contact us immediately:

Security Team: support@astroinvestment.capital
Available 24/7 for urgent account security matters.

For lost or stolen devices, sign in from another device and revoke the compromised session under Account → Devices, then reset your password and 2FA.