Privacy and security

Only your devices

• A device can only use your Mac after you’ve paired it at the Mac: someone has to see the Mac’s screen to scan its code, and approve the device there.
• Your Mac and your device each keep the other’s key. A device the Mac doesn’t know is refused before it sees anything, and your device refuses a computer that isn’t your Mac.
• Qispi asks for Face ID (or your passcode) before connecting, so someone holding your iPad can’t reach your Mac. You can turn this off in Settings.
• A pairing link that opens Qispi from anywhere else than your own scan (a web page, a message) asks you first.

Encrypted

Everything between your device and your Mac is encrypted, with new keys for each session: the picture, your keys and clicks, the sound, the clipboard. Remote goes through Tailscale, which encrypts it a second time. Display only works over a cable.

On the Mac

• Qispi Host only accepts Remote connections that come through Tailscale, and Display connections over a cable.
• Passwords copied from a password manager stay on the Mac: they aren’t sent to your iPad’s clipboard.
• Paired Devices in Qispi Host’s menu lists every device, when it was paired, and which one is connected now. Forget… removes one.