Security Advice

This page offers practical advice to help you keep your Shrota account and personal information safe. If you are a security researcher looking to report a technical vulnerability, please see our Vulnerability Disclosure Policy instead.

1. Protecting Your Account

• Never share your password or login OTP with anyone, including anyone claiming to be from Shrota
• Use a strong, unique password and avoid reusing passwords from other services
• Log out of Shrota on shared or public devices

2. OTP Awareness

Shrota may send a one-time password (OTP) to verify your identity when you sign in or make changes to your account. This OTP is only ever meant to be entered by you, in the Shrota app or website — never share it over phone, SMS reply, email, or with anyone claiming to represent Shrota.

3. Recognizing Phishing & Scams

Be cautious of messages, emails, or calls that:

• Ask you to share your password or OTP
• Link to a website that looks like Shrota but has a different or misspelled domain
• Create urgency ("your account will be blocked") to pressure you into acting quickly
• Ask for payment or bank details outside the official app

4. Device & Network Security

• Keep the Shrota app updated to the latest version
• Avoid logging into your account over unsecured public Wi-Fi where possible
• Only download the Shrota app from the official Google Play Store or Apple App Store

5. What Shrota Will Never Ask You

Shrota will never ask you, over phone, email, or SMS, to:

• Share your password or OTP
• Make a payment to a personal bank account or UPI ID
• Install any remote-access or screen-sharing app

6. Reporting Suspicious Activity

If you notice unusual activity on your account, or receive a suspicious message claiming to be from Shrota, please contact us immediately at myshrota@gmail.com.

7. Contact Information