End-to-End Encrypted Messaging

My Connect includes optional end-to-end encryption (E2EE) for private messages. When enabled, your messages are encrypted on your device before being sent, and can only be decrypted by the intended recipient. Not even Gender Journey can read your encrypted messages.

How E2EE Works

End-to-end encryption uses public-key cryptography:

1. When you enable E2EE, a pair of cryptographic keys is generated — a public key and a private key.
2. Your public key is shared with other users so they can encrypt messages to you.
3. Your private key stays on your device (encrypted) and is used to decrypt messages you receive.
4. When you send a message, it is encrypted with the recipient's public key. Only their private key can decrypt it.

Enabling E2EE

1. Go to Settings and select Privacy & Encryption.
2. Tap Enable End-to-End Encryption.
3. Your key pair is generated automatically.
4. Back up your keys — this is critical for recovering your messages on a new device.

Key Management

Backing Up Your Keys

After enabling E2EE, you should immediately back up your private key:

1. Go to Settings > Privacy & Encryption.
2. Tap Back Up Encryption Keys.
3. Choose to download a backup file or copy the backup codes.
4. Store the backup securely — a password manager is ideal.

Restoring Keys on a New Device

If you sign in on a new device:

1. Go to Settings > Privacy & Encryption.
2. Tap Restore Encryption Keys.
3. Upload your backup file or enter your backup codes.
4. Your message history will be decrypted and accessible.

Without your backup, messages encrypted with your old keys cannot be recovered.

Generating New Keys

If you believe your keys have been compromised, you can generate a new key pair from the encryption settings. Note that this means older messages encrypted with your previous keys will no longer be decryptable unless you have the old backup.

Multi-Device Sync

Your encrypted private key is stored (in encrypted form) in the database, allowing you to sync across multiple devices. Each device retrieves and decrypts your private key using your account credentials.

Disabling E2EE

You can disable E2EE in Settings > Privacy & Encryption. When disabled, new messages will be sent without end-to-end encryption. Previously encrypted messages remain encrypted and readable only if you still have your keys.