Authenticator MFA
Users can enable time-based one-time passcodes with popular authenticator apps.
Family Budget uses layered controls to protect account access, isolate household records, and reduce common web application risks.
Users can enable time-based one-time passcodes with popular authenticator apps.
Passwords are stored with strong password hashing rather than plain text.
Database reads and writes use parameterized queries to reduce injection risk.
Financial records are queried by household so family data stays separated.
Admin, member, viewer, and super-admin roles control what users can manage.
CSRF protection is used on forms, and sensitive private folders include access controls for shared hosting.