Security and FAQ
Frequently asked questions
Does CM Chat use end-to-end encryption?
No. Data is encrypted in transit and encrypted when stored, but the CM Chat servers process message content so that search and admin tools work. See the Security overview.
Can my admin read my direct messages?
Not through the admin console. Admins can delete messages and see the audit log. See Direct and group messages.
Can I sign up myself?
No. You need an invitation from a workspace admin. See Accepting an invitation.
Do I need two-step verification?
Not unless your workspace owner requires it. The 8-digit code we email you is enough to sign in. A passkey or authenticator app is an optional extra, and you need one to confirm admin actions if you are an admin. See Setting up two-step verification.
What is a passkey?
A passkey replaces a password, using your fingerprint, face or device PIN. See Signing in.
I lost my phone.
If you never set up a passkey or authenticator app, just sign in with your email code. If you did, use a recovery code, or ask an owner to reset your two-step verification. See Lost your phone?.
I did not get my sign-in code.
Check spam and use the address your admin invited. Codes work for a short time, and you can only ask for a limited number at once. Wait a few minutes before asking again.
My invitation link does not work.
It lasts 7 days and works once. Ask your admin to resend it.
Why can't I sign in when I travel?
Workspaces allow only chosen countries, United States by default. Ask an admin to add the country.
Why does a file download say expired?
Download links last about 10 minutes. Reload and click the file again. See Files and images.
Why can't search find part of a word?
Search matches whole words. See Search.
Do I get notifications when the app is closed?
Yes. In a browser, turn on desktop notifications. In the Android app, pair your phone once to get alerts when the app is closed. See Notifications.
Is there a mobile app?
You can install CM Chat from your browser on iPhone and Android. There is also an Android app that you install from a file, and a Windows desktop app. See Getting started, The Android app and The Windows desktop app.
Are there calls and video?
Voice and video calls are rolling out. See Calls and huddles.
Can I move over from Slack?
Yes. A workspace owner can import channels, history, threads and reactions from a Slack export. Direct messages and files are not imported. See Importing from Slack.
What happens when a channel is deleted permanently?
Its data is made unreadable and then removed. See Admin: Channels.
Who do I contact?
Email hello@cmchat.app.