Advanced notes on message verification, secure hashing, key transparency, and the engineering decisions behind Lupyd's security guarantees.
A timeline of WhatsApp's security incidents as of November 2026: NSO Group's Pegasus, Paragon's Graphite, the 2025 zero-click chain, fake apps, scraped phone numbers and regulatory fines. Encryption held; attacks hit phones, numbers and metadata.
Every notable Microsoft Teams security event from 2020 to November 2026: Microsoft's own breaches by Storm-0558 and Midnight Blizzard, phishing and fake IT helpdesk attacks over external Teams chats, and the Teams vulnerabilities researchers found. What was exposed, and what end-to-end encryption would and wouldn't have changed.
Browsers can store end-to-end encryption keys in IndexedDB, OPFS or localStorage, but none of them keeps keys away from script on the same origin. What non-extractable WebCrypto keys protect, why WASM crypto libraries need raw key bytes, and where Lupyd's web client keeps its keys.
End-to-end encryption doesn't protect messages already on an unlocked phone. What a thief can read depends on the phone's state and the OS's storage encryption; what you can control is removing the device so it gets no new messages, and in MLS groups can't decrypt anything after the removal is committed.
Most account takeovers don't involve clever hacking: just a stolen password. Two-factor authentication (2FA) is the single most effective step your firm can take against this. This plain-language guide explains 2FA, which method to choose, and gives you a checklist to roll it out across your firm.
An overview of the Firefly chat suite: open-source tools, private channels, and easy-to-run clients for privacy-conscious teams.