Security Policy

At Weblate, security is seriously to maintain an environment that values the privacy of our users.

Weblate development follows The Linux Foundation Core Infrastructure Initiative Best Practices.

Security FAQ

How do you store user passwords?

Weblate stores all user passwords hashed, currently using PBKDF2, HMAC and SHA-256 with 150000 iterations.

How to report a security issue?

Please see our documentation for instructions how to report security weaknesses in our platform.