Regarding miHoYo account security

There are several posts on r/Genshin_Impact of people reporting stolen/hacked accounts due to miHoYo's terrible security practices. I would like to reinforce that genshin.chiya.dev is not a fake or scam website and that it follows the best security practices regarding account security.

• All passwords are hashed using PBKDF2-HMAC-SHA256 Source
• Passwords are never stored in plaintext Source
• All requests are sent on HTTPS with HSTS enabled (.dev domain)

Of course, there is no guarantee that the web server is actually running the source code published to this repository. Therefore you should NEVER reuse the same password on multiple websites, and especially your miHoYo password on this website.

At the moment, the account system for genshin.chiya.dev is only required to enable synchronization across devices. It is completely optional and the website functions without it.