Frequently asked questions
The essentials about LOOKLOCK: privacy, encryption, the invite-only club and nodes.
What is LOOKLOCK?
LOOKLOCK is a private messaging club with end-to-end (zero-knowledge) encryption. You only get in by a member's invitation. No ads, no tracking, no phone number.
Can LOOKLOCK read my messages?
No. Messages are encrypted and decrypted on your own device. The servers only see sealed envelopes they cannot open: that's the zero-knowledge model.
Do I need to give my phone number?
No. LOOKLOCK does not require your phone number to work. Your public identity is a code, not your phone.
How do I get in? What is the invitation code?
You need a member to sponsor you with an 8-character invitation code. Each member has 5 codes to give access to whoever they choose.
Are messages stored on a central server?
No. With federation, the encrypted message is deposited in the mailbox of a node (which users themselves can run) and the central only acts as a directory. You can also enable ephemeral messages that self-destruct.
What encryption does it use?
ECIES encryption: ECDH key exchange over the P-256 curve, the AES key derived via HKDF-SHA256 with the ephemeral key bound as AAD, and AES-GCM symmetric encryption. The private key never leaves your device.
What is a node and can I run my own?
A node is a mailbox that stores encrypted messages and files. Anyone can run one on a Linux VPS or even a Raspberry Pi at home: it's a single Python file, no dependencies.
What happens if I lose my phone?
Your private key lives on the device. You can export a backup of your keys to migrate phones. Without that backup, you recover the account but not the old history: that's the price of nobody else holding your keys.
Is it free?
Yes, personal use is free. The project is sustained by business plans and by those who contribute nodes to the network.
How is it different from WhatsApp, Signal or Telegram?
LOOKLOCK asks for no phone number, does not centralize messages or their metadata (node federation), is invite-only, and lets you self-host your own mailbox. See the comparison for details.
Is it available for iPhone?
For now there is an Android app. The iOS version is planned (coming soon).
Is there a separate app for businesses?
No. It's the same app and the same download for everyone. Professional features (company-logo branding, centralized administration, auditing…) are enabled by your account type. Privacy and encryption are identical for personal and professional use.
¿Por qué no me suena/avisa cuando llega un mensaje con la app cerrada?
El aviso en segundo plano es OPT-IN: la primera vez la app te propone activarlo (o desde el menú → "Notificaciones en segundo plano"). Una vez activo, suena aunque la app esté cerrada y se reinicia al encender el móvil. IMPORTANTE: en muchos móviles Android (Xiaomi, Huawei, Oppo, Samsung, Realme…) el sistema mata las apps en segundo plano para ahorrar batería. Para que los avisos sean fiables debes, en los Ajustes de tu móvil: 1) permitir el AUTOARRANQUE de LOOKLOCK, y 2) quitar la OPTIMIZACIÓN DE BATERÍA para LOOKLOCK (ponerla como "sin restricciones"). Mientras el servicio está activo verás una notificación permanente de "LOOKLOCK activo": es lo que Android exige para poder avisarte sin depender de Google.
¿Puedo bloquear a alguien?
Sí. Abre la conversación y, en el menú del chat (⋮), pulsa "Bloquear usuario"; también puedes hacerlo desde el chat de la web (botón 🚫 en la cabecera). Mientras el bloqueo esté activo ninguno de los dos podrá enviaros mensajes, y verás la marca "Bloqueado" en la lista. Es reversible en cualquier momento con "Desbloquear usuario". El bloqueo se aplica en el servidor, así que también corta la entrega por los nodos.