Security and trust
Built to be trustworthy
Here is what we do to protect your account and your payments, and how to stay safe with software from independent creators.
What we do
Passwords are hashed
We store a hash of your password, never the password itself.
Verified email
Accounts confirm their email with a code, and a verified email is needed to review or buy.
Protected sessions
Login sessions use cookies that scripts on the page cannot read, and that are sent over HTTPS in production.
Payments through Stripe
Card details are entered on Stripe Checkout and never touch Webdever or the creator.
Reviews from real users
Reviews need a login and a verified email, and the app owner cannot review their own app.
Honest numbers
Owner activity is not counted as audience activity, so stats are not inflated.
Staying safe with downloaded apps
Apps on Webdever are shared by independent creators. Treat them like any software you get from the internet.
- Read the description, reviews and creator profile first.
- Read the README before you run code.
- Do not run an app that asks for secrets it should not need.
- Use a demo or a test account before using real data.
Report a problem
If a listing looks misleading or an account looks compromised, contact us with a link and details. Read our Privacy Policy and Terms, and the guide on keeping your account secure.
Build, manage, and improve from one workspace.
Websites, apps, databases, and agent workflows—plus a marketplace to share what you build.