Security
This page is the plain description of the controls that ship. Marketing lines do not add a control that the app does not have.
In the app
On this page
New accounts confirm an email code. The code expires, can be resent after a wait, and locks after too many wrong tries. Google can be linked to an existing email. An unverified or suspended account cannot sign in.
Forgot-password reset signs every device out. You can also sign out this device only, or every other device, from the account. Deleting the account clears the token balance.
Block and report are available from a chat. Admin can see an open report queue. You confirm before a block, and the chat leaves your list.
PINs for the app lock, the hidden list, and a single chat are hashes. Email can reset the app lock and the hidden PIN. One chat PIN can also be reset by email.
Keep going
Random chat
These pages are for random text chat. Private chat by username stays in the app.
The app
Friend chats and group messages are free. Locks, hidden chats, and the vault are for a phone that is not only yours. Optional random chat stays off until you turn it on.
Help
A few quick answers before your first chat. The app has its own screens after you claim an account.
There is no paid bounty program. The responsible disclosure page explains how to report a security issue.
Yes. The account lists devices. You can sign out one device, or every other device.
