Looks cool. Supports TOTP 2FA, HSTS, nosniff, CSP, x-frame-options, xss-protection A+ ssllabs rating A securityheaders rating Some issues: Some user enumer

Looks cool. Supports TOTP 2FA, HSTS, nosniff, CSP, x-frame-options, xss-protection A+ ssllabs rating A securityheaders rating Some issues: Some user enumeration issues. I emailed security@privacy.com but it doesn't exist...resent to questions@ I don't like how they ask for your bank's login username and password. I don't feel comfortable giving them that. There must be another way. Should confirm email address before you can login