Help & Support
What do you need help with?
Choose a topic for a quick next step. Help is public; you do not need to sign in.
Android Notification Protection
It is available only in supported Aegis Android builds on Android 7.0 (API 24) or later; it is not available in iOS or Expo Go, and not every distributed Android version includes it. It starts Off. In the app, choose Enable, then separately grant Android Notification Access in Settings.
Before granting access: Android Notification Access may expose messages, one-time codes, banking alerts, and other private notifications. With both choices enabled, Aegis checks limited text from new notifications on this device for a few possible scam patterns. Raw notification content is not sent to Aegis or stored. Only broad signal categories, counts, and times are held in memory for up to 24 hours; they clear when you turn screening off, sign out, or Android stops the app process.
This local screen is different from a manual Scam Protection check: notification content is not submitted to Aegis for cloud analysis. A possible signal needs your review; no signal does not confirm a notification is safe. Turn screening off in Aegis to clear its summary. Revoke Android Notification Access separately in device Settings. Detection is limited and can miss scams.
Browser Protection
The extension is distributed through the Chrome Web Store for Chrome. Edge and Brave may support Chrome Web Store installs, but Aegis does not publish separate listings for them; compatibility depends on each browser's support for the required extension APIs.
It checks public website URLs and sends the URL being checked to Aegis. It does not collect passwords, one-time codes, payment details, cookies, form values, full page HTML, or unrelated browsing history. A check is evidence about a page at that time, not full browsing coverage or a guarantee that a site is safe.
Connecting an account is optional. By default, connected checks save eligible warnings and threats to Activity; you can opt to save all analyzed sites, and saved low-risk activity expires after 30 days. Trusted Sites are stored only in this browser: they do not skip scans or mean a site is safe, but can suppress the full-page warning. Temporary continue exceptions expire after 30 minutes and are cleared if risk changes.
Check a link, message, or screenshot
Choose a link, message, or screenshot, review the item, then tap Analyze. Fast link checks use available structure and reputation signals; Full checks add deeper analysis. Both are point-in-time checks, not a guarantee that an item is safe.
Guest checks are not saved to Activity. Signed-in checks appear there when saving is available; Free accounts can see up to 10 recent reports. Open a report for its evidence and next steps. High risk, Review, and Low risk are indicators, not guarantees. If a provider is unavailable or a check is incomplete, Aegis has no clean result. Never submit passwords or sign-in codes.
Open Scam ProtectionOffer Reality Check
Offer Reality Check is a manual flow. Paste selected offer text or upload a screenshot, confirm consent for each check, then choose Analyze this offer. Aegis analyzes only what you submit; it does not inspect the page or your browsing session.
The result separates claims, visible evidence, pressure tactics, uncertainty, and a practical next step. No outside sources are checked, so Aegis cannot prove a discount or promise false and does not label a seller fraudulent. Recognized personal details are redacted from text before analysis. Crop or blur private details from screenshots. Offer submissions are not saved to Activity.
Identity Protection
Add and verify an email identity to use available exposure checks. Review each finding and use its available action; a known exposure remains relevant until its state is updated.
Monitoring being enabled is not the same as a successful recent check. If provider data is unavailable or no check has succeeded, Aegis shows an unknown state rather than Protected.
Identity alerts call out newly reported exposure or repeated monitoring problems; they are evidence to review, not proof of account compromise. Find them in Security Inbox, then open Identity for exposure details. Email alert preferences are managed separately in Identity.
Open Identity ProtectionSecurity Inbox and alerts
Open Security Inbox to review saved security alerts and account updates. Unread means you have not marked an update read; it does not say whether an exposure is resolved. Marking an alert read only changes its read status.
Use an alert's related Identity link to review exposure details and available actions. Email alert preferences are separate: eligible Individual users can opt in to transactional email, while the in-app Inbox remains available for existing account alerts.
Private Password Check
Enter a password only in the dedicated Private Password Check screen. The full password stays in your browser; Aegis does not receive or store it, and the check result is not saved. A partial hash is used for the Have I Been Pwned Pwned Passwords check.
Open Private Password CheckAccount and plan
Sign in to review the server-confirmed plan and account settings. Android recognizes an existing Individual subscription; subscription purchases and billing management use the supported web flow.
If a payment is processing or a plan cannot be confirmed, the displayed state may remain pending or unavailable until the billing provider confirms it.
In the Android app, open Account → Sign-in and security to see connected methods. Change password appears only for password-enabled accounts and requires the current password; Google-only accounts continue signing in with Google. Android sign-out confirms first and turns off local Notification Protection before signing out.
Open AccountPrivacy, data, and account deletion
Review Aegis data handling or request account deletion using the public instructions. Deletion requests are verified and are not completed immediately.
In the Android app, open Account → Support and legal for the Privacy Policy, Terms, and deletion request. A verified request is targeted for processing within 30 days; limited records may be retained when legally or operationally required.