MeshLink
Security Center
MeshLink uses standard browser cryptography only. No home-made encryption.
What protects you
- ✓ End-to-end encryption (ECDH P-256 → AES-256-GCM)
- ✓ Local identity created on your device
- ✓ Private key is non-extractable and never leaves the device
- ✓ Local message storage in your browser
- ✓ No mandatory cloud
- ✓ Relays cannot read plaintext
- ✓ You control contacts: verify, block or remove
Verify identity
Open Contacts → Verify on both phones and compare the 20-digit safety number in person. If it matches, no one swapped keys during pairing.
Honest limits
- Not 100% secure and not anonymous: relays can see who a packet is from and to, and when.
- Anyone with access to your unlocked phone can read your chats.
- Clearing browser data deletes your identity and messages.