At the moment DeltaChat only provides Security for the transport way(End2End), but the message stored on the device rely on device password and encryption.
We should also provide some protection on that part, maybe even remote deletion of messages.
And until we have such features we should remind our users to set at least a device password.
5 Likes
This is fine 
I think you should also add a response location message.
When DC is in a “lost device” state, it will automatically send location messages to preset contacts every certain time intervals.
It’s less about the phone than the data and chat history thats on it.
When we do anything with location like that, we also need to be careful that someone can’t just activate the lost mode remotely and track you.
2 Likes
1
internal track of time since last encryption. expire credentials after some period after prompting to reauthenticate. presupposes way to reauthenticate self
2
secret remote kill message
1 Like