Security and Crypto Storage on CoinJar
CoinJar has operated since 2013 with zero security breaches. Our multi-layered security, institutional-grade infrastructure protects your account, your data and your digital assets.
Private & encrypted crypto storage
CoinJar Crypto Storage
Customer assets are held in a dedicated, segregated environment. They are kept separate from CoinJar's own funds and from other CoinJar entities. You retain beneficial ownership of your cryptocurrency at all times, in line with our obligations under MiCAR.
Fraud protection
Your account is protected with strong encryption, automated threat detection and regular security reviews. Our systems monitor for unusual logins, account takeover attempts and suspicious transactions in real time. We can act before funds are at risk.
Crypto custody
Assets are secured with multi-party computation (MPC) technology through Fireblocks' wallet infrastructure, where Fireblocks acts as a technology provider only. No single party can move your assets on its own.
Established in 2013
CoinJar has operated since 2013 and serves more than 800,000 customers across Australia, the UK, Europe and the US. We're backed by leading investors, including Blackbird and Digital Currency Group (DCG).
Privacy
Your personal and financial information is stored and processed on secure cloud infrastructure, encrypted in transit and at rest, and classified according to sensitivity so access stays tightly controlled. We handle your data in line with the EU General Data Protection Regulation (GDPR) and only collect what we need to operate your account and meet our regulatory obligations. To see what we collect and how we use it, read our Privacy Policy.
Infrastructure
We host our digital infrastructure with Amazon Web Services. Our internal networks are encrypted, firewall-protected and isolated from the public internet, and we operate a zero-trust architecture. Every request is verified, with no implicit trust between systems.
Application and database servers run inside private networks, with staging and production environments kept fully separate. Public-facing traffic is handled by dedicated load balancers that accept only HTTPS requests. We run immutable operating systems and continuously monitor for threats using Amazon GuardDuty and our own intrusion detection systems, with real-time alerting.
Company security
All our internal services and databases are protected by cryptographically secure multi-factor authentication. These are device-bound methods such as hardware security keys and biometrics, not SMS or one-time codes that can be intercepted. Access is governed by single sign-on and zero trust principles, so every request is verified.
Engineers have no access to application credentials or production servers, and all deployments are performed independently by a dedicated deployment server. Every CoinJar employee passes a criminal background check before joining and takes part in ongoing security and anti-money laundering training.
Outages and issues
Our members can stay updated on any outages and issues by using our real-time Status page, which shows the current status of our wallets and services, details of any current incidents, and information about upcoming maintenance.
Bug bounty
CoinJar works with an active community of researchers through our Bug Bounty program to help us continually improve.
Protecting your CoinJar
Protecting your CoinJar
Use a strong, unique password
We recommend using a password manager like iCloud Keychain, Bitwarden or 1Password.
