Security & App Lock

You don't need to understand cryptography to be safe in DNA Connect — security is on by default, everywhere, and cannot be switched off. Here is what protects you, in plain language.

Encryption is automatic

Every message is locked on your device before it goes anywhere, and only the person (or group) you sent it to can unlock it. There are no modes to enable and no keys to compare. The encryption used is new-generation, quantum-resistant cryptography — designed to hold up even against the quantum computers expected in the future.

Your data is encrypted at rest, too

Your message history and contacts live in encrypted storage on your device — someone who copies the app's files off your phone still cannot read your conversations. Your contact list and optional message backup on the network are encrypted the same way, with your keys. Your public profile (name, avatar, addresses) is different by design: it is meant to be findable, so it is signed against tampering rather than hidden.

App Lock

Add a second wall in Settings → App Lock:

  • PIN — the app asks for your PIN when opened
  • Biometrics — use your fingerprint or face where your device supports it (a PIN is always set first, as backup)

With App Lock on, someone borrowing your unlocked phone still cannot open DNA Connect.

You control who reaches you

Strangers need your approval to become contacts, and anyone can be blocked at any time. See Contacts & Groups.

What no app can protect you from

Honesty matters more than marketing. No messenger — including this one — can protect you if:

  • Someone has your 24 words. The Recovery Phrase is your account. Guard it like cash — here's how.
  • Someone controls your unlocked device. Use App Lock and your phone's own screen lock together.
  • The person you message shares it. Encryption protects the journey, not what the recipient does afterwards — anyone can screenshot a conversation. Trust the people you talk to.

Common questions

Can CPUNK read my messages, even in an emergency?

No. This is not a policy promise — it is how the system is built. Messages are unlocked only on your and your friend's devices; there is no master key, and what the network briefly holds for delivery or backup is encrypted — there is nothing readable to hand over.

Why is there no "verify safety number" step?

DNA Connect ties encryption to your registered identity automatically, so there is nothing manual left for you to check. Security that depends on users doing homework is security most people don't have.

Is the code audited or public?

The code is open source — anyone can inspect it at gitlab.cpunk.io/cpunk/dna. Openness means claims like the ones on this page can be checked by anyone, not taken on faith.