Switchboard has no passwords. Anyone who can reach its ports (8130 to 8132) can read your chats, type into their terminals and start new chats on your computers. That is on purpose: it is meant for your own home network or your own Tailscale network. Never forward its ports to the internet.

Linking a computer uses a one-time code that expires after 10 minutes. A computer added over ssh gets a key that can only run the Switchboard helper, not a shell.

Please do not open a public issue for a security problem. Use GitHub's private report instead: the Security tab of the repository, then Report a vulnerability. Include what you found, how to reproduce it, and which version you ran (About in the app shows it, and Copy version info copies it).

You should hear back within a week. Fixes ship in the next release, and the release notes credit you unless you would rather they didn't. Only the latest release gets security fixes.

Only the latest release gets security fixes.