See how MineHarbor separates public information from private account data and protects authentication, wallet activity, support messages and withdrawals.
MineHarbor support will never ask for your Google password, two-factor secret, wallet private key or SSH private key.
Account access
Authentication without storing your Google password
MineHarbor uses Google OAuth for sign-in. Authentication is completed through Google, so MineHarbor does not receive or store the user’s Google password. Server-side sessions control access to private Dashboard, wallet, transaction and settings pages.
Recognizable sign-in flowBegin authentication only from MineHarbor’s official domain and verify the Google consent screen.
Two-factor optionUsers can enable a time-based second factor for additional protection.
Session separationPublic discovery pages never expose private account balances or activity.
Financial actions
Withdrawals use review and visible records
Mining-wallet withdrawals are created as pending requests. Users can review the destination and displayed fee before submission. Manager review separates request creation from payout confirmation, and a completed transaction can include a blockchain hash for independent verification.
Destination validationThe interface checks supported Bitcoin address formats before accepting a request.
Review stateA pending withdrawal is not presented as completed before the payout is confirmed.
Rejection handlingA rejected amount is returned according to the recorded withdrawal flow.
Support and uploads
Support conversations remain account-bound
Support chat history is tied to the authenticated user. Supported screenshot uploads are validated, resized and stored behind protected routes. Video and unsupported file formats are not accepted, and retained images are removed according to the configured cleanup period.
Limited formatsSupport accepts JPG, PNG and WebP screenshots within the displayed size limit.
Protected viewingAn image URL is checked against the signed-in user before content is returned.
Secret hygieneUsers should cover private keys, recovery phrases, passwords and personal data before sending screenshots.
Common questions
Clear answers before you sign in.
Review the fundamentals publicly, then use your protected account when you are ready to act.
Does MineHarbor know my Google password?+
No. Google handles the OAuth authentication process; MineHarbor does not receive or store the Google password.
Should I send a wallet private key to support?+
Never. MineHarbor support does not need wallet private keys, recovery phrases, Google passwords or two-factor secrets.
Can anyone open my support screenshots?+
Support image routes require an authenticated session and verify that the image belongs to that user’s conversation.
