Your keys
Encryption in development Private spaces use the MLS standard (RFC 9420) so that only members’ devices hold the keys. It has not been independently reviewed or professionally audited yet (awaiting independent review). Until it is, treat it as a design, not a guarantee.
Your private spaces are locked and unlocked on your own devices, with the ways you choose below. We relay locked messages; we are not meant to be able to open them.
Keep more than one way in. If you lose all of these, nobody, including us, can recover your private spaces.
Set up your keys
Choose a backup passphrase. It unlocks your keys on any device. Write it down somewhere safe; we cannot reset it.
Off by default. When it is on, anything that runs on this website in this browser could use your keys while you are away.
Ways to unlock
- None yet.
Wallets are no longer a way to lock or unlock your keys: on NeverLogOff your wallet opens only on Your wallet (/me/wallet), for four things, and this is not one of them. Use a passkey or your passphrase.
Backup passphrase
A passphrase works on any device. Use at least four words nobody could guess.
Your devices
- No devices yet.
Add this device
On a device that is already unlocked, open Your keys and choose Approve a device. Then compare the two codes.
Pairing code
Approve a device
Does the new device show this code?
Private spaces
- You are not in any private space yet.
Verify members
Compare these codes with each person, in person or on a call. If they match, nobody (including us) has slipped in a different key.
What changed in this space
- Private spaces are meant to be end-to-end encrypted (MLS, RFC 9420; encryption in development, awaiting independent review). Only members’ devices are meant to hold the keys.
- Every change to who can read a space is shown to its members, for example “Alice added Bob’s new phone”.
- Whether new members can read older posts is set by the space owner. Changing it only affects people who join later.
- If you leave or are removed, you keep what you already opened on your devices. We cannot take that back. You cannot read anything posted after that.
- Deleting a post removes it from our storage. Members may still have copies on their own devices.
- You can report a post. You choose which parts of that one post to open for us (for example only the picture), and nothing else.
- We still see who is in which space, when posts are made and how big they are, and we could refuse to deliver messages.
- Assistants and agents cannot unlock your keys on their own. Unlocking always needs you: your passkey or your passphrase.
End-to-end encrypted · in development Built so that only members’ devices hold the keys. Not yet independently reviewed or audited.
Private, not end-to-end Encrypted on our servers with a key we hold. Never listed or searchable, but we could technically read it. Only for very large spaces, and only if the owner chooses it.
Legacy (unsafe) Made with an earlier design that a review found unsafe. Please re-create this space; it accepts no new posts.