Osmyntv1.3.8
Security
Understand Osmynt's security features and learn how to keep your code secure.
🔒 Security Overview
Security Overview - Comprehensive security documentation
- End-to-end encryption
- Team security features
- Device verification
- Zero-knowledge architecture
- Security best practices
🔐 Encryption
Encryption Details - Technical details about encryption
- Encryption algorithms
- Key management
- Secure transmission
- Data protection
- Compliance standards
🛡️ Best Practices
Security Best Practices - Keep your code secure
- Team management security
- Device security
- Code sharing security
- Network security
- Privacy protection
🔑 Key Security Features
End-to-End Encryption
- AES-256-GCM encryption for all code
- ECDH-P256 keys for secure key exchange
- Perfect Forward Secrecy for session keys
- Zero-knowledge architecture - we cannot read your code
Team Security
- Invitation-only teams - Only invited members can join
- Device verification - Only authorized devices can access
- Role-based permissions - Control who can share and receive
- Audit logging - Track all team activities
Device Security
- Multi-device verification - Secure device registration
- Device management - Maximum 2 devices per account
- Secure synchronization - Encrypted data transfer
- Offline security - Secure local storage in VS Code secrets
🚨 Security Considerations
What We Protect
- ✅ Your code - End-to-end encrypted with AES-256-GCM
- ✅ Team communications - Encrypted channels via ECDH-P256
- ✅ Device data - Secure synchronization with device limits
- ✅ User privacy - Zero-knowledge architecture
What We Don't Protect
- ❌ VS Code extensions - Third-party extension security
- ❌ System security - Your operating system security
- ❌ Network security - Your network infrastructure
- ❌ Physical security - Device physical access
🔧 Security Configuration
Recommended Settings
{
"osmynt.security.encryption": true,
"osmynt.security.requireAuth": true,
"osmynt.security.deviceVerification": true,
"osmynt.security.maxDevices": 2
}
Security Checklist
- ✅ Enable encryption
- ✅ Use strong authentication
- ✅ Verify team members
- ✅ Manage device access (max 2 devices)
- ✅ Regular security updates
- ✅ Monitor team activities
🆘 Security Issues
Report Security Vulnerabilities
- Email: security@osmynt.dev
- PGP Key: Download our PGP key
- Responsible disclosure: We follow responsible disclosure practices
Security Updates
- Automatic updates: Security updates are applied automatically
- Security notifications: We notify users of security issues
- Update policy: We provide security updates for supported versions
🔗 Related Documentation
- Getting Started - Secure installation
- Features - Secure code sharing
- Troubleshooting - Security troubleshooting
- Support - Security support
Have a security concern? Contact our security team →