Security and trust
How we look afteryour account and data.
What protects your sign-in, what is end-to-end encrypted and what isn't, how our team gets access, how to take your data with you, and how to report a security problem. This page lists only what Hubs does today.
Hubs doesn't hold any security certifications yet, so none are listed here.
Security and safetyYour account
Passkey sign-in
Two-step verification
Slow mode in General10 s
Audit log Rae set a 1 hour timeout Jordan changed link rules
Your sign-in, your choice.
Every account has a password, and you can add a passkey or an authenticator app on top.
- Passwords, hashedWe keep only a salted scrypt hash of your password, never the password itself.
- PasskeysSign in with your device's fingerprint, face or PIN instead of a password.
- Two-step verificationAdd an authenticator app, with recovery codes in case you lose your phone.
What only you can open.
End-to-end encrypted means only the people in the conversation hold the keys, so our servers can't read or hear it. Here is exactly what that covers today, and what it doesn't.
- Messages and files: protected, not end to endMessages, posts, files and ordinary DMs travel over HTTPS and are stored on our servers so they sync across your devices. Our systems can read them, which is how search, moderation and the features a hub turns on work.
- DM calls: end to endCalls in a DM or group DM are end-to-end encrypted. Our servers pass the call key along sealed for each device and cannot open it. Compare the 12-digit code and check who is listed. Recording, captions and AI recaps are off in these calls.
- Hub voice rooms and meetingsEncrypted between your device and our call servers, but not end to end, so a host can record or caption a call when the hub allows it and everyone is told.
- Private conversations: not switched on yetEnd-to-end encrypted DMs, built on the open MLS standard (RFC 9420), are built but switched off. They stay off until an independent security review is finished, and this page will say when that changes.
How our team gets access.
Staff tools are locked behind a role, a second factor and a written record. Nothing end-to-end encrypted can be opened by our team at all.
- A small team, with extra checksOnly people given a Hubs staff role can open staff tools, and only after confirming it's them with a passkey or an authenticator app on that session.
- Every change written downEach staff action needs a written reason and goes into a log that can't be edited. Changes inside a hub also show in that hub's own audit log.
- Only when neededOur team looks at account information only to run the service, keep it secure, answer a support request, review a report or meet a legal obligation.
A record of every change.
Staff actions leave a record, and organizations decide how long their team's messages stay.
- Hub audit logOwners and admins see who changed what, and when, in Manage under Safety.
- Organization audit logAn organization's owner, managers and security admins read the log in the console, and can export it as a spreadsheet.
- Retention and legal holdFor organizations that turn them on: keep team messages for a set time, and hold them when a legal matter needs it.
Your data goes where you say.
You can take a copy of your data or delete your account yourself, without writing to anyone.
- Export your accountDownload your profile, your messages and your uploads from Settings. You confirm with your password first.
- Delete your accountDelete it from Settings. You type your handle to confirm, and the copy on your device is cleared too.
- Backups that expireOur backups are encrypted and kept for up to about six months. Something you delete can stay in a backup until it expires, and backups are used only to recover the service.
- Export an organizationThe organization's owner can export its data from the console. Each export is kept for 7 days.
Encrypted on the way.
Everything between your device and Hubs travels over encrypted connections.
- HTTPS everywhereEvery page, upload and request uses HTTPS, and browsers are told to always use it.
- Calls, encrypted on the wayVoice, video and screen share are always encrypted between your device and our call servers.
- Strict page rulesA content security policy limits which scripts can run, and no other site can show Hubs inside its own page.
When something is reported.
Reports reach the people who can act on them, and the person who reported stays private.
- Hub moderators firstMost reports go to the hub's own moderators. By default they see what was reported, not who reported it.
- Child safety comes to usA report about a child's safety hides the message at once and goes straight to our team.
- Scams, everywhere at onceReport a scam in one tap. Our team can block a bad link and clear it from every conversation.
- AppealsIf a decision goes against you, you can appeal it.
Report a security problem
If you think you found a vulnerability in Hubs, please tell us privately first, so we can fix it before anyone else learns about it.
- What to send
- What you found, the steps to see it again, what someone could do with it, and the addresses or app version you used. Screenshots or a short video help. Please don't put other people's information in the report.
- When we answer
- We confirm we got your report within 3 business days, tell you how serious we think it is within 10 business days, and update you at least every 14 days until it is fixed. We tell you when the fix is out and, if you like, thank you by name.
- Safe harbor
- If you act in good faith and follow this page, we won't take legal action against you or ask anyone else to, and we won't close your account for the research. Good faith means: use your own accounts or test accounts, look at no more data than you need to show the problem and delete it afterwards, don't disrupt Hubs or other people, and give us a reasonable time to fix it before you share it.
- Please don't
- Run denial-of-service or load tests, send spam, trick or pressure people or our team, try to get into physical places, or test other companies' services we use. Reports about those don't qualify.
- Rewards
- We don't pay for reports at the moment, but we're grateful for every one and credit reporters who want it.
See you in Hubs.
Start in your browser, or get the app for Mac or Windows. You sign in with the same account either way.