Security

Zinc sync is designed for local networks. This page documents assumptions and good defaults.

Threat model (high level)

  • Sync traffic is expected to stay on your local network.
  • Pairing should explicitly authorize devices.
  • Keys/secrets should never be logged or exported accidentally.

Recommendations

  • Use a trusted Wi‑Fi network for pairing.
  • Keep your desktop firewall enabled, but allow Zinc on local networks.
  • Enable device lock screens on both desktop and mobile.