Support · Verification
Verify who you are talking to.
Encryption seals the pipe. Verification proves who stands at the other end. One ceremony, once per contact — then the transparency log watches for changes.
01 / THE CEREMONY — THIRTY SECONDS
Run the ceremony once, per contact.
-
Open the chat, tap your contact
The contact view carries their verification surface — the safety number derived from both identity keys (ML-DSA-87 signed).
-
Compare the safety number out-of-band
In person, over a voice call you already trust, or across any channel an attacker in this one does not control. Both screens must show the same number.
-
Mark the contact verified
From then on, a key change on their side surfaces as a visible event in the conversation — never a silent swap.
02 / BETWEEN CEREMONIES
Let the log watch while you are not looking.
Every identity key lives in the key transparency log: an append-only record signed with ML-DSA-87, cross-checked by a 2-of-3 multi-witness quorum (verify-only today — operator equivocation is detected, not prevented) plus three external Ed25519 auditor slots that ship dormant, holding placeholder keys until auditors are onboarded. A server that showed you one key and your contact another would be caught by the log's own math.
03 / THE EDGE CASES
Ask the three that go wrong.
The safety numbers do not match. What do I do?
Stop sending. A mismatch means the session is not keyed to the person you verified — a new device, a rotation, or interception. Re-run the ceremony over a channel you trust; if it still fails, write to security@qeryx.com.
Do I have to verify every contact?
Every conversation is sealed end-to-end whether or not you verify. The ceremony adds the proof of who — for the contacts where that proof matters to you, do it once and let the log do the rest.
Can the server swap keys without anyone noticing?
A swap is detectable by design: the transparency log is append-only and auditor-cosigned, and verified contacts surface key changes in the conversation. Detection is the honest claim — the log proves misbehavior, it does not make it impossible.