Understand encryption and recovery

What end-to-end encryption means

Messages and attachments are encrypted for the approved devices of the people in a conversation. Nuntaro's delivery services handle encrypted data, but do not receive the device keys needed to read the message contents.

Device approval is part of that protection. Signing in on a new device does not silently make it trusted for encrypted messages.

Encryption protects message content, not every piece of service information. For example, security events may be shown to you—or, during a recovery request, to another participant—so that a request can be checked before it is approved.

Adding a new device

If you still have an approved device, use it to approve the new one. Approval lets the new device receive future encrypted messages. It does not automatically copy older messages or attachments.

When device-to-device history transfer is available, your old approved device can send selected history it still has directly to the new device. You compare a one-time security code on both devices before approving. The history archive is encrypted for the new device, so the relay cannot read it.

If your own devices cannot provide all of the missing history, a newly approved device can also ask the participants in an individual conversation for copies their devices still retain. This participant-assisted option is available for a limited recovery window after approval—currently 30 days—and each conversation is requested separately.

Choose the safest available recovery method

Use these options in order. Each solves a different problem.

1. Transfer from your own approved device

   Approve the new device from one you already trust. Then use Transfer history to move the full eligible conversation view that the old device still retains, including your own sent messages and available attachments.

2. Ask a conversation participant

   On a newly approved or securely reset device, open the conversation and choose Recover conversation history. You can send a private, temporary request for the history another participant's device still retains.

3. Use your saved recovery code

   A recovery code created on an approved device can authorize a secure-messaging reset if your approved devices are unavailable. The code is consumed, old secure-messaging devices are revoked, and old history is not restored.

4. Recover without a device or code

   As a last resort, re-enter your account password and verify your established recovery email. Nuntaro applies the security delay shown in the app—normally three days—and warns existing approved devices, which can stop an unauthorized request. Completion creates a new secure-messaging identity and revokes the old devices. It does not restore their encrypted history.

Why Nuntaro asks about history

A replacement or newly approved device may be able to read new messages while older encrypted messages remain unavailable. When Nuntaro can establish that earlier conversation content may be missing on this device, it may offer a history-recovery question.

You can also open the conversation-title menu and choose Recover conversation history. This provides a way to check or continue recovery even when the automatic question is not visible.

The question is a privacy and consent step. It does not mean that Nuntaro can read the missing content, and it is not an error. You can choose Not now and continue using the conversation for new messages.

Ask a participant for available history

If the option is available, you can send a temporary request for one conversation. The other participant sees who is requesting, replacement-device information, the requested period, and what their device can offer before choosing Share available history or Deny.

When approved, their device prepares an archive encrypted to your approved device. Nuntaro relays that encrypted archive without receiving the keys needed to read it.

The participant can supply messages they authored and retained copies of messages you authored. In a group conversation, one participant cannot supply protected content authored by somebody else. This means participant-assisted recovery may restore some of your own sent messages, but device-to-device transfer remains the most complete option when you still have your old device.

History recovery can be incomplete. Deleted items, gaps, unavailable attachments, and messages that no participant's device still retains cannot be restored. Nuntaro therefore offers to recover available history, not to restore every old message.