Skip to content

Never share your identity file.

Your .orbitr-identity file is the key to your entire identity. Sharing it is as dangerous as sharing your password — and no legitimate person or service will ever ask you for it.

What Your Identity File Contains

Understanding what's inside helps you understand why it must stay private.

Your .orbitr-identity file contains your private key — the secret that proves you are you. It's locked with your password, but anyone who has both your identity file and your password has complete control over your identity.

They can sign in as you, send messages as you, join servers as you, and act as you — with no way for anyone, not even a server owner, to tell the difference.

Identity file + Password = Full access to your identity

Why You Should Never Share It

The consequences are severe and often irreversible.

Full impersonation

Anyone with your identity file and password can become you. They can log into any server you use and act with your full identity.

Messages sent as you

An attacker can send messages, join conversations, and interact with people — all appearing to come from you.

Undetectable

The attacker uses the exact same key as you. No one — not even the server — can tell the difference between you and the attacker.

Race to recover

If someone has your identity file and password, they can reset your security keys before you do — locking you out of your own identity. Speed matters.

Your Recovery Files Are Just As Sensitive

The recovery phrase and recovery key you downloaded deserve the same secrecy.

Your 12-word recovery phrase — saved as a .txt file when you set it up — unlocks your identity file without your password. Anyone who has it can take over your identity even if your password never leaks.

The same goes for your backup recovery key: it can restore your entire identity backup on its own.

Treat both files exactly like your identity file: never send them to anyone, never attach them to a message, never upload them anywhere. Orbitr blocks attaching them in chat — but only you can keep them off other platforms.

How Scammers Might Try to Trick You

Recognize these patterns. Every single one is a scam.

"Send me your identity file to verify who you are"

A server admin or moderator asks for your identity file to "verify" who you are. Orbitr confirms who you are automatically behind the scenes — no one ever needs your identity file.

"I need your identity file to add you to a server"

Someone claims they need your identity file to invite you. Joining a server only requires an invite link, QR code, or Pulsar code. Your identity file is never part of the process.

"Support needs your identity file to fix your account"

There is no "Orbitr support team" that needs your identity file. Your identity is yours alone — no one can or should "fix" it for you.

"I'll keep your identity file safe for you"

No one should hold your identity file. Use your own cloud storage, a USB drive, or the desktop app's auto-backup feature. Never trust a third party with this file.

Sharing your identity file is as dangerous as sharing your password. Never do it.

No legitimate person or service will ever ask for your identity file.

The Right Way to Join a Server

Your identity file is never needed for joining. Here's how it actually works.

1

Receive an invite

Someone sends you an invite link, a QR code, or a Pulsar code. These are the only legitimate ways to join a server.

2

Click, scan, or enter the code

Your app opens the invite and begins the join process. You choose whether to accept.

✓

Orbitr signs you in automatically

Your app proves to the server that you're you, all behind the scenes. Your .orbitr-identity file is never shared, uploaded, or sent anywhere.

What to Do If You Already Shared It

Act immediately. The attacker can do these same steps — speed matters.

If someone has your identity file and knows your password, they can already use your identity. They could also reset your security keys before you do, locking you out. Act fast.

1

Reset your security keys immediately

Go to Settings → Security → Reset Security Keys. This makes every old copy of your identity file stop working — including the one in the wrong hands.

2

Change your password

This makes sure no one can open any new copies of your .orbitr-identity file with your old password.

3

Re-export and store safely

Export a new identity file with your new password. Do this last so the new file contains your new keys and new password. Store it in a secure location — cloud storage, USB drive, or the desktop app's auto-backup.

Your identity. Your responsibility.

Orbitr puts you in control of your identity. That power comes with one simple rule: sharing your identity file is as dangerous as sharing your password — never do it.

Full Security Overview Download Orbitr