Security
Plainly: what we do to keep your work safe, and what we ask of you.
Your account
- No passwords. You sign in with a link we email you. It works once and expires in 15 minutes, so there is no password of yours for anyone to steal or guess.
- Each computer gets its own key. When you run
librarymode connect, that computer receives a private key of its own, stored only on that machine. You can see every connected computer in Settings and disconnect any of them instantly. We store only a scrambled fingerprint of each key, never the key itself.
Your projects
- Private by default. A new project can be seen only by you. It becomes visible to others only when you click Share it publicly, and you can undo that at any time.
- Versions can't be rewritten. Once saved, a version is permanent: the service refuses any attempt to alter or delete earlier versions, even from your own connected computer. "Going back" always creates a new version.
- Secrets are skipped. Files that usually contain keys and passwords (such as
.env) are left out of saves automatically. Please keep it that way. - Everything travels encrypted between your computer, your browser and our servers (HTTPS).
- Backed up nightly to a separate storage provider, so a failure of one machine doesn't lose your work.
Payments
Handled entirely by Stripe. Your card number never reaches our servers.
What we ask of you
- Protect your email account — it's the key to your Library Mode account.
- Disconnect a computer from Settings if you sell it, lose it, or lend it.
- Don't put keys or passwords into project files. If one slips in, save a version without it and tell us — we'll help you make sure it's gone.
Found a problem?
If you think you've found a security weakness, please email hello@librarymo.de with "security" in the subject before telling anyone else. We'll reply within two working days, fix real problems quickly, and thank you publicly if you'd like.