Where secrets are stored
What is kept in the system store on the phone, what is kept on the computer, and how to revoke a sign-in.
Coden has no accounts. The secrets it needs (sign-in to GitHub, pairing with a Server, provider keys) stay on your devices. Here is where and how.
On the phone
- The GitHub sign-in in the system store (Keychain on iPhone, Keystore on Android).
- Pairing and saved connections are encrypted with a key kept by the system. They are not readable on the phone's disk.
- On iPhone the key survives a reinstall, so pairing stays.
On the computer
- The agent sign-in is kept only in the device directory, not in every project. The files are readable only by your user.
- Other tools (Claude CLI, Codex, Gemini) keep their own sign-in, in the system store or in their own file.
How to revoke a sign-in
- GitHub: Sign out of GitHub in Settings. For a full revocation, remove the app from your GitHub account settings.
- Connection to a Server: Forget the connection. Pairing again then needs a new code.
- Agent: sign out with its provider and delete its sign-in on the computer.
Stuck somewhere other than what is here? Write to support@coden-app.com.