Messages are end-to-end encrypted with a Double Ratchet (Olm) — your private keys never leave this browser. Single-device only: logging in from a new browser creates a new identity, with no cross-device key sync.