Authentication hardened
Access without routine identity collection
Your account is more than a doorway.
It is your entrance to a smaller community built
around controlled access, deliberate trust and private
communication.
-
01
Enumeration-resistant responses
Failed authentication does not reveal
whether the username or password was
incorrect.
-
02
Argon2 password protection
Passwords are processed with a
memory-hard password hashing function. The
original value is never stored.
-
03
Token hashes at rest
The database retains hashes of active
session tokens rather than the raw tokens
placed in secure production cookies.
-
04
Reduced authentication metadata
Authentication session records avoid
persistent IP, user-agent and browser
fingerprint fields. Repeated attempts are
rate-limited.
Privacy is not secrecy for the guilty. It is space
for ordinary people to think, speak and connect
without mass observation becoming the default.
Protect your device and credentials. PrivateChat
cannot defend a browser or operating system that is
already compromised, and no web service can promise
absolute anonymity.