Security
Where the protection of your conversations stands today, without exaggeration.
Already in place
- On Android, one-to-one and group chats are end-to-end encrypted with the Signal protocol.
- Photos, videos and documents in those chats are encrypted on your phone before they are sent.
- Your private keys never leave your device. The server only keeps public keys.
- A safety number lets you check that you are talking to the right person.
- A computer is linked by scanning a code: your phone hands it your keys without the server being able to read them.
- Call audio and video are encrypted between devices.
Not yet
- End-to-end encryption is not yet available on iPhone.
- The server sees who writes to whom and when, reactions and read receipts.
- It also sees the type and size of encrypted attachments.
- A group where a member has no keys yet stays unencrypted, and the app says so.
- Changing phones loses the encrypted history.
- No independent security audit has been carried out yet.
How it works
Keys on your phone
When you install the app, your phone creates your keys. The private part stays in the device’s protected storage.
A safety number
Compare this number with your contact: if it matches on both sides, nobody has slipped in between you.
A linked computer
The computer shows a code. Your phone scans it and sends your keys in a block the server cannot open.
Report a security issue
Write to [email protected] describing the issue and how to reproduce it.
To learn which data Gundo processes, read the privacy.
Gundo is coming soon.
Android first, then Windows, macOS and Linux.
- AndroidComing soon
- WindowsAfter Android
- macOSAfter Android
- LinuxAfter Android
Gundo comes to Android first. Download links will appear here on release day.