# Everything Layergram protects. And everything it can't protect.

> Local architecture, identity, post-quantum hybrid protocol, Forward Secrecy, backup and limits.

Canonical HTML: https://layergram.app/security/

Language: en

Last updated: 2026-08-28

The only technical page of the site

Primitives, formats, migration, threats, and platform boundaries, gathered in one verifiable place.

**For older version users only.** This guide is exclusively for those who used Layergram before August 25, 2026, in versions prior to 2.0.0 (27).

## Local architecture

Layergram does not use its own accounts, central directories, or servers to deliver messages. Identity, encryption, decryption and history remain on the device.

## Identity and verification

People exchange full identities and verify contact. No Layergram server decides which key belongs to whom.

## LMF v3 hybrid

Identity and conversation starters combine `X25519` e `ML-KEM-768`. The declared security depends on the correct implementation of both components and the complete model.

## Ratchet and Forward Secrecy

The state evolves over time to limit how much a subsequent compromise can reveal about the previous history. Warranties depend on the mode and condition of the devices.

## Transport formats

Direct payload, link and cover message are different containers. The link identifies Layergram; cover text can reduce visual evidence but is not invisible to every analysis.

## Migration v2 → v3

The new public identity must be redistributed and verified for all users who were already using Layergram before August 25, 2026, in versions prior to 2.0.0 (27). No silent migration magically preserves trust and previous sessions.

## Storage and app lock

Data and state remain local and protected by the app template. An unlocked, compromised, or watched device remains a risk, as with any other secure app.

## Screen protection

Android can block captures via system defenses. iOS, macOS and Windows have different capabilities and limitations. An external camera remains out of reach, but the Premium Keyboard, with random key distribution enabled, can make typing patterns more difficult to recognize.

## Premium Backups

The backup uses a separate 24-word phrase, distinct from the 24-word phrase used for the identity. Depending on the platform you can use iCloud, Google Drive, OneDrive or Dropbox; the provider stores encrypted data and its own metadata.

## Threat model

Layergram does not protect an already compromised endpoint, recipient behavior, external notifications, uncontrolled clipboards, cameras, or transport metadata.

LMF v3 combines classical and post-quantum primitives, progressively updates the conversation state and declares boundaries that remain outside its control.

Start free

## Protect your first message

Start free. Choose one person. Invite them in a few steps.