Package-level declarations

Keystore-backed encrypted storage for every account's secrets (passwords, tokens, homeserver URLs) and small metadata (protocol, display name).

Redacts tokens, passwords, and phone numbers from log strings before they are written.

Strips unsafe HTML/script content from incoming message text before it is rendered, and flags links using dangerous URI schemes.