Let us assume I added a second device and a hacker (via malware etc.) has stolen the backup from Delta Chat to add a third device (without the user knowing). Is there a way to shut the third device (and possibly also the second) to access to the future Delta Chat messages the user writes? I assume…

As r10s has already said, this requires either a centralized server or a binding to personal data such as a mobile phone number. I can only propose a modest solution to reduce the likelihood of compromise, namely creating a master key during profile creation. After that, if an attacker attempts to c…

Perhaps it would make sense to rename this feature to “Add Additional Device” to raise awareness that it can be misused. Many users may believe that DC only allows two devices. The new name would clarify that the profile can run on any number of devices simultaneously, making it especially importan…

I agree being aware of multiple devices is a good add-on already. What about two keys, e.g. the normal key (which is also in the backup) and a recovery key (which can be generated securely from a seed of clear text words). The recovery key is only displayed initially to the user (“please store it …

I think the simplest solution would be to implement a password prompt in DC-Desktop before adding an additional device and to encrypt backups in all versions. The latter could be done like in Threema for Android. Users would have to choose a password before each backup, which would then be used to c…

Thanks for the feedback. It does though not address the scenario that a malware or another mean (see above) extract it from the device.

Due to password protection, someone who has brief access to the device cannot install the profile on an additional one. If an attacker steals a backup, the profile cannot be set up on any other device without the password. In addition, security awareness is always necessary. However, users must kno…

I see yes a password would for sure also help. It does not address all scenarios, but some of them. Yes security awareness is needed, but malware and other malicious acts can happen. It would be then good to know what options one has or how one should work in the first place (e.g. having multiple a…

See [image] Remote wipe from a lost device Feature Proposal Delta Chat already Disappearing Messages feature and settings to configure deletion of messages from the device and from the server after selected time period. These features however do not help if d…

I’m not an expert at all in DeltaChat, but if with DeltaChat I use a normal e-mail server there is a possible way to disable all “devices”, it is to change the password. Then I can update the password on the devices I want to keep-on using, and they should regain the ability to work. Am I wrong? So…

On Delta Chat, your identity is tied to your public key cryptographical key pair, not to any single relay you use to send and receive messages per se. I.e., the hash fingerprint is the identifier, not the email address. This means even if you lock out a malicious device from a single mailbox, they …

Remove "second devices" possibly added by unwanted party

Feature Proposal

ian May 30, 2026, 7:22pm 19

@1b24nbcjuh921dmdj4xx that’s exactly what the following request is about: