Verified alerts and changed identities

Every alert carries a trust label so you know whether to act on it.

The labels

• Verified: signed with the key you have on file for that person.
• Identity changed: signed with a different key than before. This usually means they set up their account again on a new phone, and it is also what impersonation looks like. Confirm with them somewhere other than this app before acting.
• Unverified: Chillswitch could not confirm the alert came from them. Treat it with caution.

When a contact's key changes

A note appears beside their name: "[Name] is signing with a new key." After you have confirmed it is really them, tap I checked: this is them. Doing this is part of replacing your own keys too. See replace your recovery code or keys.

All-clears are signed too

When someone checks in after an alert, the all-clear is signed and verified. If an alert ends without a trusted check-in, the app tells you to check on the person another way.