Security
What we protect.
And what we don't.
Lost laptops
Encrypted at rest
Hidden volumes
Plausible deniability
Surveillance
Auto-encrypted
Tracking pixels
No remote content loaded
Token theft
Credentials in the vault, not the keychain
How encryption finds the recipient
No key server. No central directory. The protocol piggybacks on regular email.
When you write to a Gratin user for the first time, your client embeds your public key alongside the message — an Autocrypt-style header. Their client picks it up automatically (trust on first use) and uses it to encrypt the reply. On subsequent messages, both clients exchange a one-time nonce inside the encrypted body to upgrade the relationship to Paired — at which point downgrade attacks become detectable. No Chicon-run server is involved.
Viruses on your computer
If your friend's computer gets hacked
Government-level hacking
Anyone who already has your password
Password protection
Argon2id
Vault encryption
AES · ChaCha20
Future-proof
X25519
Verified updates
ed25519