Security built into every layer

ChatDix ships with authentication, bot protection, and audit tools growing teams need before putting chat on a production website.

Google Sign-In (OAuth)

Secure registration and login with PKCE — no password required for Google users.

Two-factor authentication

TOTP authenticator apps with QR setup, confirmation flow, and backup recovery codes.

Cloudflare Turnstile

Bot protection on login and registration forms to prevent automated abuse.

Disposable email blocking

Over 8,800 throwaway email domains blocked at signup and team invite.

Login history audit

Every sign-in logged with device, browser, IP address, approximate location, and timestamp.

Workspace isolation

Multi-tenant architecture — each customer workspace is fully separated at the database level.

Sanctum API tokens

Secure session-based API authentication for the agent app and widget endpoints.

Password security

Bcrypt hashing, strength meter on change, and OTP-based password reset flow.

Maintenance mode

Platform operator can disable login/registration with a custom message during updates.

Data & privacy

Chat data, visitor sessions, and contact records are stored within your workspace. Read our Privacy Policy for full details on data collection and retention.