Security

Built so we never need to read your secrets

FlickFly keeps the vault on your devices and encrypts what you flick before it leaves. Here is how that works end to end.

Your vault stays on the phone
Credentials, notes, links, and documents live in on-device secure storage. Unlock with biometrics or your PIN — FlickFly does not host a readable cloud vault.
Pairing creates a private channel
When you pair phone ↔ browser (or phone ↔ phone), the devices agree on keys for that relationship. Only those paired peers can decrypt what you send.
Flicks are end-to-end encrypted
A secret is sealed on the sender before transfer. Our signaling relay may route or wake a device — it only ever sees ciphertext, not passwords or note text.
This browser shows only what you flick
The receive page is not your vault. It displays a short-lived copy you chose to send, then clears it so the screen does not keep secrets around.
Optional backups are encrypted first
If you back up to iCloud or Google Drive, FlickFly encrypts the vault with your PIN on the device before upload. Restore needs that same PIN.
We cannot recover your PIN
Save your recovery code when you set a PIN. It is the only way to reset a forgotten PIN — FlickFly staff cannot unlock your vault for you.