Privacy and security

What is public#

What the network can still see:

• Your address and public key.
• Who you message, and when.
• That a payment moved and how much, but not who received it.
• Each attachment's kind (photo, video, audio, document) and size, and the length of each message.

What is guaranteed#

• Only your signature can send a message as you. A relayer can't forge, change or replay it.
• Only the recipient can claim a private payment. Nobody else can move it, including the relayer.
• Sends are protected by a reentrancy guard and can be paused by the owner in an emergency.

Known limitations#

• Group messages are delivered to the first other member only (see Chats and groups).
• Deleting a message removes it from your chats, but on-chain history can never be erased. What stays is unreadable.
• Your private key is kept in this browser's storage. Logging out removes it; on a shared computer, always log out.
• clearStorage() resets your storage counter without removing files, so the 1 GB limit can be reset by the user.
• Anyone can call Paymaster.relay() with their own signed requests and claim up to maxReimbursementPerTx each time. Keep the Paymaster balance and the cap small.