> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stork-sms.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & Authentication

> Multi-layered security architecture ensuring private and secure conversations

<img src="https://mintcdn.com/stork/RDkbv9DoTHfA0pMz/docs-images/Standard%20image%20(for%20all%20pages%20that%20don't%20have%20special%20image).avif?fit=max&auto=format&n=RDkbv9DoTHfA0pMz&q=85&s=a7a673768b894f4ee58f89bcf6a18cc8" alt="Stork SMS Security" style={{ width: '100%', height: 'auto', borderRadius: '8px', marginBottom: '2rem' }} width="1248" height="684" data-path="docs-images/Standard image (for all pages that don't have special image).avif" />

Security is at the core of Stork SMS. Our multi-layered security architecture ensures that your conversations remain private and accessible only to authorized participants.

## Core Security Principles

### 1. Zero-Knowledge Architecture

* We never see your unencrypted messages
* No access to private keys
* Minimal metadata collection
* Client-side encryption/decryption

### 2. Blockchain-Based Access Control

* NFT ownership determines chat access
* Immutable permission system
* No backdoors or admin overrides
* Transparent verification on-chain

### 3. End-to-End Encryption

* AES-256-GCM encryption
* Keys derived from participant wallets
* Forward secrecy (planned)
* No key escrow

## Security Sections

### [Wallet-Based Authentication](wallet-authentication.md)

Learn how we use cryptographic signatures for passwordless authentication.

### [NFT-Based Access Control](nft-access-control.md)

Understand how NFTs serve as unbreakable access tokens for conversations.

### [End-to-End Encryption](end-to-end-encryption.md)

Explore our encryption implementation and key management.

### [Security Measures](security-measures.md)

Review our comprehensive security implementations and best practices.

### [Privacy Features](privacy-features.md)

Discover how we protect your privacy and minimize data collection.

## Quick Security Facts

* **No Passwords**: Authentication via wallet signatures
* **No Phone Numbers**: Only wallet addresses used
* **No Central Database**: Messages encrypted before storage
* **No Admin Access**: Even we can't read your messages
* **Open Source**: Security through transparency ([GitHub](https://github.com/StorkSMS/Stork-SMS-Dapp))

## Security Guarantees

### What We Protect

✅ Message content (end-to-end encrypted)
✅ Chat access (NFT-gated)
✅ User identity (pseudonymous)
✅ Transaction integrity (blockchain-verified)

### What We Don't Store

❌ Unencrypted messages
❌ Private keys
❌ Personal information
❌ IP addresses (beyond rate limiting)
❌ Device fingerprints

## Reporting Security Issues

Found a vulnerability? Please report it to:

* Email: [info@stork-sms.net](mailto:info@stork-sms.net)
* Bug Bounty: Coming soon

We take security seriously and will respond to all reports within 48 hours.