Built safe

• Passwords are stored only as strong hashes; we never see them.
• Two-factor authentication with any authenticator app, with backup codes, in Settings → My account.
• Sign in by QR code only ever hands a session to the device showing the code, and only after you approve it on a device that is already yours.
• Sessions rotate on every refresh and are revoked as a family if one leaks.

Every request to Blinki is checked by fixed rules and then by the model as a classifier before it is answered, and the answer is checked again as it is written. Anything sexual involving minors, help with seriously hurting people, and hate never get an answer. Refusals are logged for staff with a short excerpt.

Blinki uses your computer only when you switch it on for a chat, only inside a frame with a Stop button, and Esc stops it at once and takes the access back. It reads the app's buttons and fields, not pictures of your screen, and it never touches sign-in, password or security windows. Anything that sends, buys or deletes asks you first, and so does every command it wants to run. It reads and edits files only in the one folder you shared. In a shared chat, a teammate's edit waits for the owner's approval before it goes live.

When you ask Blinki to ssh into a machine, Blinki makes a key just for it and keeps the private half encrypted on our servers; you add the public half to the machine yourself, and Blinki never asks for a password. The machine's identity is pinned the first time, so a swapped machine is refused. Looking around never asks; changes ask first, and anything that could wipe the machine or lock you out always asks and never runs on its own. Private network addresses are off limits to everyone but Blinki staff.

Calls go directly between the people in them and are never recorded by us. Screen sharing shows exactly what you pick, nothing else.

Report a message, a person or a server from its menu in the app, or write to [email protected]. If someone is in immediate danger, contact your local emergency services first.