Big update just landed on CoinBelieve. We're launching our Zero-Knowledge End-to-End Encrypted (E2EE) Messenger, plus new Smart Login controls, tighter time sync, and a round of speed and mobile fixes.
Here's everything that's new:
🔐 New: Zero-Knowledge E2EE Messenger
Trade ideas, market research and private chats shouldn't sit on someone else's server in plain text. So we built a messenger where only you and the person you're talking to can read the messages.
- Encrypted on your device: Messages are encrypted and decrypted locally using
AES-256-GCMwithECDHkey exchange. - We can't read your chats: Our servers only relay encrypted data. We never hold your private keys.
- One-scan device sync: Link your desktop and phone with a one-time QR handshake. Your chat history syncs across devices and your keys never get uploaded to the cloud.
- Burn-on-read messages: Send something sensitive and it deletes itself after it's viewed.
- Verified receipts: Delivery and read receipts are cryptographically verified and stay in sync across your authorized devices.
"Zero-Knowledge means real ownership. Your chats stay between you and your recipient, nobody else."
| Security Dimension | 🛡️ CoinBelieve E2EE | ☁️ Standard Cloud Messengers |
|---|---|---|
| Encryption Standard |
AES-256-GCM + ECDH Encrypted locally on hardware |
TLS in-transit only Stored readable on servers |
| Private Key Custody |
Zero-Knowledge Keys never touch our network |
Centralized Hosted by service provider |
| Snooping & Subpoena Risk |
Mathematically Impossible Zero access to plain text |
High Vulnerability Accessible to audits & scrapers |
| Multi-Device Pairing |
Encrypted QR Handshake Device-to-device direct sync |
Centralized cloud copies Mirrored through cloud databases |
| Burn-on-Read Message Deletion |
True Client-Side Wipe Purged from local memory & cache |
Soft delete flag Often kept in server backups |
| Session Governance |
Granular Duration + Killswitch 1h/12h/24h/7d/1y + 1-click revoke |
Indefinite cookies Vulnerable to session hijacking |
⚡ Smart Login: New Controls
Smart Login got a lot of feedback from you, so we shipped the upgrades people asked for most.
1. Choose how long a computer stays signed in
When you approve a desktop login from your phone, you now pick the session length:
1 Hour: Best for public or shared computers. Signs out automatically.12 Hours / 24 Hours: Good for a full trading day or office hours.7 Days: The balanced option for your home PC or laptop.1 Year: Stay signed in on your own personal computer.
2. Device limits & emergency lockdown
- 3-device limit: Each account can have up to 3 trusted devices, so old sessions don't pile up.
- "Revoke All Devices" button: Lost your phone or think a laptop is compromised? One tap in your security center ends every active session and removes all trusted keys instantly.
3. QR scanning that just works
- Any scanner, any browser: We rebuilt the mobile scan flow. Your native camera, Google Lens, or an in-app browser now connects right away, with no origin or browser mismatch errors.
🌐 Under the Hood: Speed & Reliability
-
Universal UTC time sync:
Logins, session timeouts, verification links and message timestamps all run on UTC now. No more timezone or clock-drift issues, even when you're traveling. -
Smoother mobile experience:
Security modals, device lists and toolbars now adapt better to touch screens and different viewport sizes. Clipped edges and touch lag on phones, tablets and mobile browsers are fixed. -
Smarter edge protection:
We tuned our firewall and origin rules so real mobile users and camera scanners get through without friction, while scrapers and brute-force attempts get blocked harder. Bonus: lower latency for everyone.
Ready to try it? Open your dashboard to start using the E2EE Messenger and set your session lengths in Security Settings.
— The CoinBelieve Engineering & Security Team
