Security and access control
Hashed API keys, HMAC-signed webhooks, role-based access control, and per-store data isolation are built into Dasenter from the start.
Passwords are hashed, API keys are hashed and revocable (never stored or shown in plaintext after creation), and webhooks are HMAC-signed with replay protection.
Role-based access control lets an account owner grant staff access to specific stores rather than the whole account, and every store’s orders, products, customers, and inventory are isolated from every other store on the same account.
Account email addresses go through a real verification step before the dashboard is reachable, closing off unverified accounts from store data.