Create your workspace
Codes are HMAC-hashed at rest and compared with a timing-safe check, never stored in plain text
The verification codes you receive are never saved as plain, readable text in the database.
Instead, WebOptiva stores a scrambled version of each code and compares it using a method designed to resist timing-based guessing attacks.
In plain terms: even if someone got access to the database, they couldn't read your actual codes.