Skip to content

Security

Sparsh edited this page Apr 12, 2026 · 1 revision

Alfa Security Model

Authentication

  • Local password protection for settings, sensitive actions, and uninstall flows
  • Device pairing with cryptographically generated codes
  • Server authentication via tokens and HTTPS

Anti-tampering

  • Multi-process watchdog model
  • Core engine restart if termination is detected
  • Debugger detection and self-defense hooks planned

Data protections

  • Strong password hashing using Argon2 or bcrypt semantics
  • Salted, memory-hard storage for local credentials
  • Signed payloads for IPC and remote commands

Clone this wiki locally