LitoraYour key is made on your device. We never see it.
The private key is generated in your browser and never sent to us, so nobody — including Litora — can produce it again.
What that means for you
We never had the key, so we cannot hand it over, leak it, or rebuild your configuration — which is why it is shown once.
It is also why a configuration posted in a public channel is worth so little: that is one key shared by everyone who saw it — cut off once, dead for all. Yours is made on your own device, for your own account.
Key generation needs X25519 in Web Crypto — a browser without it is told so plainly, never dropped to something weaker.
What we do not claim
Two of our four connection types are proxies, not tunnels. They use a per-device secret we issue and delete with the session — weaker than WireGuard's key, and we say so.