Security

Last updated June 2026

TOKYEE is built so that private conversations stay private. Here is an overview of the measures that protect your sessions.

HTTPS everywhereEncrypted WebRTCHashed passwordsSelf-destructing rooms

Encrypted connections

All traffic to and from the app is served over HTTPS. Real-time audio and video use WebRTC, which encrypts media end-to-end between participants with DTLS-SRTP.

Because media is peer-to-peer, your camera and microphone streams are not stored on our servers.

Password-protected rooms

Every room is protected by a password generated when the room is created. Passwords are never stored in plain text — they are hashed before being saved.

Joining a room issues a short-lived access token that authorises you only for that specific room.

Ephemeral by design

Rooms automatically self-destruct when they expire or when the owner ends them. At that point all related data — participants, shared files, and presence — is wiped.

Chat messages are relayed in real time and are never written to a database.

Limited access

A room has a fixed capacity, and only people with the room ID and password can join. The room owner can destroy the room instantly at any time.

Responsible disclosure

If you believe you have found a security issue, please contact the TOKYEE team so we can investigate and address it quickly. We appreciate responsible disclosure.

Your conversations never outlive their moment.

Back to home