Skip to content

Security

phucmpham edited this page Mar 16, 2026 · 1 revision

Security

  • Credentials stored at ~/.zalo-agent-cli/credentials/ with 0600 permissions (owner-only)
  • Proxy config stored separately from credentials
  • Proxy passwords never shown in output — always masked
  • QR HTTP server binds to 127.0.0.1 only
  • Exported credential files created with 0600 permissions

Storage Layout

~/.zalo-agent-cli/
├── accounts.json              # Account registry
├── credentials/
│   ├── cred_<ownId1>.json     # Per-account credentials (0600)
│   └── cred_<ownId2>.json
└── qr.png                     # Last generated QR

Clone this wiki locally