Encryption

Last updated September 20, 2026

Messages are encrypted on your device before they leave it, using the proprietary LeoG protocol for transport. Only you and the recipient can read them in normal operation — the server only ever sees ciphertext and metadata.

How it works

1. Your device generates a keypair when your account is set up
2. A copy of your private key is backed up to the server so a new device can pick up where you left off — the server copy is envelope-encrypted, so a database leak alone does not expose it
3. You type a message; your device encrypts it for the recipient
4. The encrypted message is sent through the server
5. The recipient device decrypts it with their private key

What this means

• Nobody can passively read your messages — not us, not anyone with only database access
• Group messages are encrypted for every member
• If you lose your keys, old messages may become unreadable
• Resetting your keys makes old messages unreadable but new ones work fine

What is NOT encrypted

Official DogeGage announcements are public by design and carry a verified badge. We also store metadata needed to run the service: who you message, timestamps, and message counts — never content.

Staying safe

• Use a strong, unique DogeGage sign-in and keep your recovery phrase somewhere safe
• Never share your private key or paste it into any website
• Double-check you are talking to the right person before sharing anything sensitive

Found a security issue? Email [email protected]. Do not post it publicly.