Your safety
How we protect your account, your password and your email.
Your password stays secret
We never store your password. We keep only a scrypt hash of it, with its own random salt for every account. Nobody can read your password from it, and nobody at Jawna can see it, not even our team.
If you sign in with Google, Apple, Discord or another service, your password for that service never reaches Jawna.
Sign-in codes
Email sign-in codes work for 10 minutes and 5 tries. We keep only a hash of each code. Sign-in tries are limited, to stop people guessing.
Jawna never asks you to send your password or sign-in code to anyone.
Your email is private
Other members never see your email. In your own Sign-in methods page it is partly hidden. Our team's tools show it partly hidden too; the owner can show one full email only when needed for support, and each time is logged.
New sign-in alerts
When your account signs in on a new phone or browser, your other signed-in devices show a notice when Jawna opens: "Was this you?". If your account has a confirmed email, we also try to email you.
Not you? Tap Not me: sign out other devices, or go to You > Settings > Sign out other devices. Then change your password if you have one.
Safe connection
Jawna works only over HTTPS. Your sign-in cookie can't be read by page scripts (HttpOnly) and is sent only over secure connections.
Your data is not for sale
We don't sell your data, and Jawna has no ads.
You can download your data (Settings > Download my data) or delete your account (Settings > Delete account) at any time. Read more in our privacy policy.
Report and block
See something wrong? Use Report on a profile, post or message. Use Block to stop someone contacting you. Our team reviews reports.
Contact us
Questions, or found a security problem? Email support@jawna.app. Security researchers: see security.txt.