Privacy & Security

Your screen.
Your business.

Beam is built so that what you see, type and share stays between your own devices. Not even we can look in.

Encrypted from end to end.

Everything is locked on one device and unlocked only on the other. If a connection ever passes through our servers, all they carry is scrambled data they can't read.

Only your devices get in.

Each device has its own unique key that never leaves it. A device joins your account only after proving it really holds that key.

You decide who's in.

Your Mac only accepts connections when you allow it. See who's connected, end any session, and remove a lost device from your account instantly.

MacBook ProViewing
Old iPadRemoved
Your choice

Prefer your own servers?

Run the whole Beam service yourself. It's one small program, and your devices never need to talk to us at all.

Self-hosting
Under the hood

For the curious.

The cryptography and design behind Beam.

SessionsQUIC + TLS 1.3
NetworkWireGuard
Device keysECDSA P-256, per device
Network keysCurve25519
Path probesX25519 + ChaCha20-Poly1305
Relay accessShort-lived signed tokens
Sign-inOAuth 2.0 with PKCE
Stored tokensHashed
What Beam Cloud can and can't see
  • Can see: which of your devices exist, when they're online, and how much data a relayed connection carried.
  • Can't see: your screen, keystrokes, audio, clipboard, files or network traffic. Those are encrypted between your devices.
  • The relay only forwards packets between devices on the same account.