Questions & answers

WithinCells

Why shouldn’t transfer QR codes be sent as screenshots?

Answer

A screenshot duplicates the QR code and may store it in photo backups, chats, previews or notifications. Even if the content can only be decrypted by the paired target device, every copy increases the surface for attacks and mistakes. A target that is compromised later, or an error in device pairing, could then encounter permanently stored copies.

WithinCells is intended for direct, short-lived transfer. The code should be shown on the sending device and scanned immediately by the intended target. The app has expiry and replay protection, but this does not replace careful handling. The clipboard is only a marked fallback, because other apps or operating system functions can read or log it. Security comes from the entire process, not from the word “encrypted” alone.

As of 3 September 2026

Further reading

Related topic: WithinCells

Any more questions?

Ask us directly.

Briefly tell us what it is about. We reply within one working day.

Ask a question