Security

Your files.
Your laptops.
Your say.

How PCTwin will keep your move private, in plain words. Technical details sit under each part.

Only your two laptops take part.

Your files travel directly from your old laptop to your new one, scrambled so no one else on the network can read them. They do not pass through our servers or the internet.

More details

The 6-digit code feeds a well-known pairing method (a PAKE, such as SPAKE2) that turns a short code into a long secret key only the two laptops know. Someone who records the pairing cannot use the recording to work out the key. The link uses modern encryption that also detects tampering (such as ChaCha20-Poly1305 or AES-GCM), with fresh keys for every move, wiped when the move ends. PCTwin listens for a connection only while pairing and closes everything after the move.

You unlock your own files.

Pairing ends with you picking, on your old laptop, the number your new laptop shows. A wrong pick cancels pairing. Without the right pick, nothing can be read, even by someone who saw the code.

More details

The code changes every minute. One wrong try cancels it and shows a new one. After five wrong tries, pairing stops and the old laptop tells you that someone on this network tried wrong codes. If anyone tried to sit between the two laptops, the numbers would not match.

Your old laptop is only read.

PCTwin copies from your old laptop. It never deletes, moves or changes anything there. The laptop you are leaving stays exactly as it was.

Apps come from trusted sources.

PCTwin installs apps fresh from their official sources and checks them before installing. Nothing it receives runs on its own.

More details

Before an app installs, PCTwin checks that it comes from a trusted catalog or publisher, checks its signature where there is one, and checks its fingerprint (hash). Received files land only in folders you approved, so a file cannot slip into system folders.

Proven methods, open code.

We use well-known, tested security methods and maintained libraries. We do not invent our own. The code that moves your files is open for anyone to inspect.

More details

The engine is written in Rust, which prevents a whole family of memory bugs. The connection code will be fuzz tested with millions of broken and hostile messages before release. The code is published under the Apache 2.0 licence.

The waitlist keeps little.

We ask for your email, and a few optional answers. We do not use tracking cookies, and we never sell your details.

More details

The signup form uses Cloudflare Turnstile to check that you are a person. Cloudflare also hosts this website and stores the list. Our emails are sent from our own mail server, run by our hosting company EuroVPS. Our privacy notice has the details.

Found a security problem?

Please email security@getpctwin.com. Do not post it in public. We will reply and keep you updated until it is fixed.