Stand· civic

Message settings

These apply only to your encrypted messaging. For account-wide settings, see Settings.

Scaffold — libsignal wiring pending

Defaults for new conversations

New DMs inherit these. You can override per conversation.

Disappearing messages
Messages auto-delete on both devices after this timer. Reduces the risk if a phone is lost or seized. Off means messages stay until you delete them.
Send read receipts
Let the other person see when you've read their message. Off by default — read-receipt timing is behavioral metadata.
Show typing indicators
Let the other person see "…" while you're typing. Off by default — typing timestamps can reveal when you were online and to whom.
Show message content in push notifications
When off, notifications only say "New message." When on, they include the sender and first line. Off by default — your lock screen and Apple/Google see the preview otherwise.

Duress password (optional)

⚠ DISABLED IN SCAFFOLD — This feature is not wired yet. Do not rely on it for safety. When built, the duress password will look successful to a coercer but silently wipe message keys.

If someone forces you to unlock this account, entering the duress password looks successful to them, but silently wipes message keys and logs out of encryption. Use only if you understand the tradeoff — see legal posture.

Honest note. This does not protect against an attacker who already has your device and your real password, or who is watching the screen during unlock. It is one layer, not a silver bullet.

Linked devices

Messages fan out to every linked device. Each added device is one more surface that could be seized. Unlink anything you don't actively use.

How multi-device works on Stand. New devices get forward history via your encrypted backup, but cannot automatically recover messages sent before they were linked (that would weaken forward secrecy). This is a deliberate tradeoff — we think it's the right one, but you should know.

Panic wipe

Immediately delete all local message keys, cached messages, and session tokens from this device. Your history on other linked devices is not touched by this button — unlink them first if needed.

Press and hold. Release to cancel. After wipe you'll need to re-enter your recovery phrase to restore from encrypted backup, if you made one.