Skip to main content
LMSA protects your saved conversations with on-device encryption and optional biometric locking. This page explains what is protected, what is not, and how to enable biometric unlock.

​
Chat history encryption

Your saved chat history is automatically encrypted at rest on your device using AES-256. The encryption key is stored inside your phone’s hardware security chip (Android Keystore) and never leaves your device.
  • Saved chats: All chat history written to your device’s storage is encrypted.
  • Hardware-backed key: The decryption key lives in your phone’s secure hardware and cannot be extracted by other apps or software.
  • App-private: Other apps on your device cannot read your chat data.

​
What encryption does not cover

Encryption only protects data stored on your device. It does not apply to messages while they are traveling across a network, or to how a server handles them after receiving them:
  • Local server traffic (LM Studio / Ollama): Messages travel over your local network without encryption. Anyone on the same network could intercept them. See the Privacy Overview for guidance.
  • Cloud API traffic (OpenRouter, etc.): Messages are sent over HTTPS, but the provider receives and processes your prompts in plain text on their servers.
  • Exported files: Exporting your chat history produces an unencrypted JSON file. Keep exported files in a secure location.

​
Biometric unlock

You can secure LMSA by requiring biometric authentication (such as fingerprint or face unlock) to open the app. This ensures your private conversations remain protected even if someone else gets hold of your unlocked device.
1

Open Settings

Open the sidebar and tap Settings.
2

Go to Device and Privacy

Navigate to the Device and Privacy tab.
3

Enable Biometric Unlock

Toggle on Biometric Unlock.
  • Your device must have a biometric security method or locking mechanism already set up.
  • If biometric authentication fails, you can use your device PIN or password as a fallback.