Security

Understand Osmynt's security features and learn how to keep your code secure.

🔒 Security Overview

Security Overview - Comprehensive security documentation

  • End-to-end encryption
  • Team security features
  • Device verification
  • Zero-knowledge architecture
  • Security best practices

🔐 Encryption

Encryption Details - Technical details about encryption

  • Encryption algorithms
  • Key management
  • Secure transmission
  • Data protection
  • Compliance standards

🛡️ Best Practices

Security Best Practices - Keep your code secure

  • Team management security
  • Device security
  • Code sharing security
  • Network security
  • Privacy protection

🔑 Key Security Features

End-to-End Encryption

  • AES-256-GCM encryption for all code
  • ECDH-P256 keys for secure key exchange
  • Perfect Forward Secrecy for session keys
  • Zero-knowledge architecture - we cannot read your code

Team Security

  • Invitation-only teams - Only invited members can join
  • Device verification - Only authorized devices can access
  • Role-based permissions - Control who can share and receive
  • Audit logging - Track all team activities

Device Security

  • Multi-device verification - Secure device registration
  • Device management - Maximum 2 devices per account
  • Secure synchronization - Encrypted data transfer
  • Offline security - Secure local storage in VS Code secrets

🚨 Security Considerations

What We Protect

  • Your code - End-to-end encrypted with AES-256-GCM
  • Team communications - Encrypted channels via ECDH-P256
  • Device data - Secure synchronization with device limits
  • User privacy - Zero-knowledge architecture

What We Don't Protect

  • VS Code extensions - Third-party extension security
  • System security - Your operating system security
  • Network security - Your network infrastructure
  • Physical security - Device physical access

🔧 Security Configuration

Recommended Settings

{
  "osmynt.security.encryption": true,
  "osmynt.security.requireAuth": true,
  "osmynt.security.deviceVerification": true,
  "osmynt.security.maxDevices": 2
}

Security Checklist

  • ✅ Enable encryption
  • ✅ Use strong authentication
  • ✅ Verify team members
  • ✅ Manage device access (max 2 devices)
  • ✅ Regular security updates
  • ✅ Monitor team activities

🆘 Security Issues

Report Security Vulnerabilities

Security Updates

  • Automatic updates: Security updates are applied automatically
  • Security notifications: We notify users of security issues
  • Update policy: We provide security updates for supported versions

🔗 Related Documentation


Have a security concern? Contact our security team →