We work on Fluxer's security every day. This page explains how we protect Fluxer and your data, where the limits are today, and where to find the full details.
How is Fluxer tested for security?
Select people with security experience have tested Fluxer privately since its private alpha in July 2023. Since the public beta in January 2026, many more security researchers have tested it and reported vulnerabilities through our responsible vulnerability disclosure program, and their reports keep making Fluxer more secure.
Fluxer is open source under the AGPL, so anyone can read its source code on GitHub and check for themselves how it works and how it handles your data.
Who builds Fluxer?
Fluxer's founder, Hampus Kraft, leads its development, builds its backend and has reported vulnerabilities through Discord's bug bounty program. A person who understands the code is responsible for every change, so Fluxer isn't vibe-coded.
Who at Fluxer can see my messages?
Nobody at Fluxer reads your messages or other stored content, except in the few cases our privacy policy lists, such as a report. Only some roles on our team can open that content, they do it through our admin tools, and every access is recorded in an audit log.
Is my data encrypted on Fluxer?
Your data is encrypted in transit and at rest, including in our backups, as section 9 of our privacy policy says. Nothing on Fluxer is end-to-end encrypted yet, and our encryption roadmap says when that's planned for calls, DMs and group DMs.
How do I keep my Fluxer account safe?
Turn on two-factor authentication with an authenticator app, a passkey or a security key, and keep your backup codes somewhere safe, like a password manager. You can see every device where you're signed in and sign out the ones you don't recognize.
How do I know my Fluxer download is genuine?
Download Fluxer only from our download page or our other official sources. Our Windows releases are signed by Fluxer Platform AB, the macOS app is notarized by Apple, and you can check each download against its SHA-256 checksum before you install it.
How do I report a security vulnerability?
Email security@fluxer.com and follow our security policy, which says what to include, what's in scope and how we protect research done in good faith. You can encrypt your report with our OpenPGP key if you want, and we read plain email reports the same way.