Security

Found a problem? Tell me first.

If you found a way to read someone's messages, learn who talks to whom, unmask a Kryfo user or get past the app lock, please tell me privately before anyone else.

How to reach me

A short description, the version (Settings, About), the phone and Android version and the steps are enough. No polished write-up needed.

The developer's key

The chat with me is checked against this key, built into the app. The key is what counts: anyone can pick three words, nobody else has this key. The same key is in SECURITY.md and in the app, when you tap the chat's name.

2f3b ddfa dec1 e445 a44e 0b76 08b5 fcac
a5b8 4f00 b1ba 0341 c233 fc84 0ca8 7d3a

Three words: scare-raven-rare

What happens next

I won't take legal action against good-faith research that tests only its own identities and devices, reads or changes nobody else's data and does not degrade the servers for others. What is in scope is in SECURITY.md. What Kryfo protects against, and what it does not, is in the threat model.