Okta protects your information with rigorous security measures and controls. Okta-mastered user passwords are stored as one-way hash values using bCrypt to prevent decryption of stored credentials. Okta's Secure Web Authentication (SWA) browser plugin uses strong (256-bit AES) encryption for username and password credentials allowing Okta to log users into those apps and websites seamlessly. These controls are audited and attested to in our SOC2 report. For more information see: https://trust.okta.com/security