Keeping your private key safe

The one line in your configuration that is a credential rather than a setting.

Most of a configuration is harmless — addresses, a hostname, a port. One line is not. PrivateKey proves your device is allowed on that network. It is not a password you can change casually: it is half of a key pair the server already knows.

Treat it as you would a password

• Do not send it to anyone, us included. There is no situation in which Lux-World PC needs your private key, and we will never ask for it.
• Do not paste it into a support message, a forum post, a screenshot or a bug report. That is the single most common way a working configuration leaks.
• Do not reuse one configuration across devices. Ask for one per device: if a device is lost, the administrator can revoke that device alone.

Redact it before you write to us

The useful parts are the error, the endpoint, and what changed. The private key never is. Replace it before sending:

[Interface]
PrivateKey = REDACTED
Address = 10.0.0.2/32

Redacting takes five seconds; undoing an exposure takes a new key pair and someone else’s time.

If you think it has leaked

Ask whoever administers the server to remove that public key and issue a new configuration. Nothing else undoes it — not a new device passcode, not reinstalling the app, not deleting the message. The key is already elsewhere.