Secure the device first
Keep your browser and operating system current, use a screen lock, and avoid handling sensitive conversations on a device other people can access. Encryption cannot protect information from malware or someone using an unlocked device.
- Use a browser profile that only you can open.
- Be cautious with browser extensions that can read page content.
- Sign out and close the browser when using a shared device.
Protect your browser identity
Chat256 uses persistent browser identity and session material in supported flows. Treat the browser profile as part of your account security. Before clearing site data, changing devices, or resetting a browser profile, read the current identity and recovery guidance so you understand what may be lost.
Treat invitations as access
A private invitation link or QR code is intended for the people you invite. Send it only through a channel appropriate to the conversation and avoid posting it publicly. For sensitive discussions, verify the recipient through a separate trusted channel instead of relying only on a display name.
Secure account access
When account login is enabled, use a unique password and enter it only on the genuine Chat256 site. Do not share passwords, one-time verification codes, or recovery material in a chat, support request, or public post.
Handle recovery material carefully
If you use a recovery feature, keep its recovery information somewhere private and protected outside the conversation. Anyone who obtains recovery material may be able to affect access to the associated identity. Follow the recovery instructions shown by the live service, and never send the material to another person.
Know what these steps cannot do
Privacy protections do not make a user anonymous. Network connections and operational systems may still process metadata such as connection timing and IP information. A recipient can also copy, photograph, or share content they can see. Review the security overview and privacy design notes for the current boundaries.
If you suspect someone else has access
Stop sharing sensitive information until you have secured the device and account. Use session or recovery controls only when they are available in your current interface. Contact support through the published Chat256 support page if you need help; do not include passwords or recovery secrets in the request.