Local Keys

Local keys are stored on your device to decrypt room messages. For rooms with Extra Lock, a second key (Extra Key) is required — stored in a key file you download and manage yourself.

What are local keys?

  • Standard rooms: One key is stored on the device (IndexedDB). It lets you decrypt messages for that room.
  • Extra Lock rooms: Two keys are required — one on the device (Local Key), one in a key file you download (Extra Key). Both are needed to decrypt.

How to delete local keys

  • When leaving a room: The Leave modal offers "Delete this room's local key". Choose it to remove the key from this device.
  • Auto-delete: Enable "Auto-delete local key when I leave this room" in the Leave modal. The key is then deleted automatically when you leave.
  • Local Keys page: Manage local keys to delete keys by fingerprint (no room names are shown).

Important

An Extra Key only works while the room exists. When a room is destroyed or expires, that key cannot be used to access or recover anything — past messages are not stored or retrievable. Deleting your local key only affects what you can decrypt on this device; it does not bring back or expose past conversations.

Extra Key file

For Extra Lock rooms, the creator shares the room link like any other room. When a participant joins, they are prompted to download and connect the Extra Key (and passphrase) on that device. Store the key file securely; you will need it to unlock the room on a new device or after clearing the browser.

Mobile: Extra keys are not available on mobile. Mobile software restrictions prevent apps from reliably maintaining persisted key files, so Extra Lock rooms are supported on desktop only.

What is Extra Lock?

Extra Lock adds a per-device requirement: in addition to the room key, each device must have the Extra Key file (and passphrase). The creator shares the room link as usual; when a participant joins, they are prompted to download and connect the Extra Key on that device. Both the local key and the Extra Key (with passphrase) are needed to decrypt messages.