Especially in the light of Zuckerberg's recent behaviour, please consider using Signal, it's actually good and a pretty easy replacement for Whatsapp

https://signal.org

Signal Messenger: Speak Freely

Say "hello" to a different messaging experience. An unexpected focus on privacy, combined with all of the features you expect.

Signal Messenger

@joelanman Signal is centralized. Centralized services are vulnerable to enshittification, as demonstrated by Reddit, Twitter, and Facebook.

The solution is to use a #federated platform like #XMPP instead.

The easiest way is to use it is to install Quicksy from the Play Store, App Store, or F-Droid - https://quicksy.im

For more curious users, here's a guide to XMPP, with client, server, and public channel recommendations.
https://contrapunctus.codeberg.page/the-quick-and-easy-guide-to-xmpp.html

Quicksy

A spin-off of the popular Jabber/XMPP client Conversations with automatic contact discovery. Sign up with your phone number and Quicksy will automatically—based on the phone numbers in your address book—suggest possible contacts to you.

Quicksy

@contrapunctus @joelanman This is the whole problem with #XMPP. You say "Signal is centralized. Centralized services are vulnerable to enshittification, as demonstrated by Reddit, Twitter, and Facebook." Don't necessarily disagree with that. But then you say, "The solution is to use a #federated platform like #XMPP instead. Ask your contacts to install Quicksy from the Play Store, App Store, or F-Droid." And my response would be, "I've never heard of Quicksy. How do I know it's free of malware? How do I know if I can even use it?"

But THEN you put the cherry on top: "Here's a user-oriented guide to XMPP, with client, server, and channel recommendations."

WTF??? I don't need a "user-oriented guide" to install #Signal. Client, server, and channel recommendations? Why the f... do I need those? You seem to think I want to have to read a bunch of crap and then try to figure out how how to make sense of it. And I don't. Very few people do. I want something I can just install and that is easy and intuitive to use. Private and secure is also great (and Signal gives you that, for now), but I don't want to have to learn a bunch of geek stuff when there are solutions I can just install and have up and running in two to five minutes.

And that is how probably 99% of people feel. I use Linux and I STILL don't want to have to mess around with any of the available XMPP servers. Until the #XMPP proponents understand that, they are just spitting into the wind (and coming off as a little preachy in the process).

@maple @joelanman

> "I've never heard of Quicksy. How do I know it's free of malware? How do I know if I can even use it?"

The people who say that to me usually get a brief explanation about freedom-respecting software, and why it's the only kind of software you can trust.

And people usually trust something when their technical friend (= me) recommends it. More so when it's the only way to reach said friend.

1/

@maple @joelanman You don't NEED a guide to start using #XMPP 🤦‍♀️

I recommended Quicksy for whoever wants to get started in under a minute.

The guide is for somewhat technical users who probably want to learn more, set up multiple clients, and join some public channels. (You know, like Mastodon starter packs? Ever heard of those? 🙄)

Get out of here with your willful misinterpretations.

2/

@contrapunctus @joelanman
I would just block and move on. You aren't going to convince someone who doesn't talk in good faith. They just want to argue.

Most people have never heard of signal either and have less reason to trust it.

@contrapunctus @joelanman You: "And people usually trust something when their technical friend (= me) recommends it. More so when it's the only way to reach said friend."

Yes, but:

1: Not everyone has a technical friend who wants to sign on to be their tech support, and

2. I once had a friend say that the only way he could be reached henceforth was via Telegram. How would you have reacted to that. I simply told him I don't use apps that require a phone number to sign up. Period, end of story.

(However when it comes to Signal, though it does require a phone number, it doesn't necessarily have to be YOUR phone number).

Anyway I was just reacting to what you wrote. If that upsets you, please feel free to mute or block me. I really don't want to argue with you but I do disagree with you to some extent (and agree to some things you have written also) and I do think it is unrealistic to expect anyone to use #xmpp if they don't have a technical friend such as you (or if they don't fully trust their friend - remember my friend who tried to get me to use Telegram, where would I be now if I had followed his urging?).

@maple

Who said anything about "tech support"? You said people won't trust an unknown app, and I gave multiple reasons why they might.

1/

@joelanman

@maple Since you mention that you don't like providing your phone number, you'll like the options that XMPP gives you.

You can use Quicksy (which requires a phone number) and get easy onboarding and contact discovery. Or you can use one of the many public servers that don't even require an email to register (be sure to use a password manager!). Or you can host your own server.

Whatever you choose, you will be able speak to contacts on any XMPP service, and use any XMPP client.

2/

@joelanman

@contrapunctus @joelanman And there you go:

"You can use Quicksy (which requires a phone number) and get easy onboarding and contact discovery."

That's a hard no. If I have to give a phone number then there is no advantage over Signal.

"Or you can use one of the many public servers that don't even require an email to register (be sure to use a password manager!)."

A public server run by someone I don't know from Adam who may or may not be able to intercept my conversations, and that could go down without warning at any time (yes, so could Signal, but at least in that case the tech media will likely be all over it and tell you why it happened and if/when they'll be back). AND then I still have to deal with installing AND CONFIGURING an XMPP client, which most people would have no idea how to do.

" Or you can host your own server."

Again that's a hard no. At least for most people. Linux geeks may enjoy that sort of thing but almost every one else would get frustrated and give up, especially the minute they have to do anything involving certificates.

Look, I am not arguing that XMPP isn't better on a conceptual level, I am just saying that the people who love it can't seem to wrap their heads around the fact that it's too complicated and time consuming for ordinary users who DON'T have a techie friend they trust to do the setup for them.

@maple @joelanman You're mixing up your own preferences and priorities with those of most people.

Most people use a mobile device and have no issue providing their phone numbers. Quicksy is perfect for them. There's no "configuration" or "tech support" needed.

@contrapunctus @joelanman Okay ,well you got me there, far too many people are willing to give up their phone number or other personal details. But then I ask, so what advantage does xmpp give them? If they don't give a flying f... about their privacy then they can use Signal, or Whatsapp, or Telegram, or whatever their friends and family are using. The whole point of using xmpp is that it is more private and that it is not controlled by a big corporation, but the people who are willing to hand out their phone numbers to anyone who asks probably don't care about such things. And yes, I know you got 100 people onboarded (I assume using Quicksy) but my suspicion is if you had asked some of them them to use Signal or Telegram or Whatsapp they would have gone for that just as easily. It was the fact you were willing to personally help them get it set up that made all the difference. And if that was a one time thing, where you set it up but don't plan to be their ongoing tech support, them probably within five years at least half of them will have gone back to one of the larger platforms.

@maple @contrapunctus @joelanman

> but at least in that case the tech media will likely be all over it

That's wishful thinking. I recently reported both here on Mastodon and on Signal's public issue tracker that Signal servers can remotely disable privacy features in the client leading to revealing metadata to their servers. Reply by Signal was, that they want it like this. Reply from tech media was, that if Signal wants it like this, it must be good this way.

https://github.com/signalapp/Signal-Android/issues/13842

Signal silently falls back to "unsealed sender" messages if server returns 401 when trying to send "sealed sender" messages · Issue #13842 · signalapp/Signal-Android

Guidelines I have searched searched open and closed issues for duplicates I am submitting a bug report for existing functionality that does not work as intended This isn't a feature request or a di...

GitHub

@maple @contrapunctus @joelanman

Given that malware being built into Signal potentially causing real harm is also known for years and even was discussed within some tech circles, but not the mainstream tech media, it seems that Signal is above any critique and can just do whatever they want.

Fact is, we don't know what they do. We know they certainly do have backdoors in place and there are ways to remotely extract messages from Signal clients. Hopefully they're not used maliciously.

@pixelschubsi @maple @contrapunctus @joelanman
What "malware being built" has been known for years?
@richlv @maple @contrapunctus @joelanman A dynamic loader. It dynamically downloads dalvik bytecode from a Google-controlled server and executes it within the Signal process, thus getting access to Signal's private data storage and encryption keys. Both the loader code and the code downloaded are proprietary and have not undergone any third-party audits. And of course Google (or whoever gets access to their infrastructure) can deliver targeted versions of the bytecode for targeted attacks...
@maple
Just go to disroot.org create an account wait 2 days, choose whatever common xmpp client login and that's it. That's your guide
@contrapunctus @joelanman

@codeDude Disroot is lovely! I use it myself, and it gives you not just an XMPP service but also email, NextCloud, Akkoma, Lemmy, Forgejo, and loads more. And the team is the sweetest and most patient people on the net.

But it's not what I'd use for onboarding non-geeks to XMPP. Quicksy is way faster to register, and you get contact discovery. 🙂

@maple @joelanman

@maple @contrapunctus @joelanman I have lots of non-geeks in my XMPP contact list. I just help them to set it up. It works if you stop whining.

@uexo @contrapunctus @joelanman Not "whining" at all, what I am trying to get across is that if you go on Mastodon and or some other social platform and just try to tell people they should be using #xmpp you are going to get nowhere, and I'm sorry if that angers you but it's true. And whenever I say that the response is either "I have helped my friends/family set it up" (yeah, but you didn't make that offer for anyone who might have read your condescending post), or "just go install this piece of software" (that almost no one has ever heard of that that may not even be available for my platform). Neither of those would convince anyone outside of possibly your immediate circle of friends.

Just out of curiosity, where are the videos that show how to set up and use xmpp that are designed for a plain user that wants nothing to do with servers, configuration files, or any geeky stuff? Oh, and that does not just assume that the user is using a phone rather than a desktop computer)?

@maple Most users _are_ using phones rather than desktops. If you'd care to open the guide you'd see that I recommend Gajim on the desktop.

And I _have_ gotten very far doing what I've done. I organize local communities (for which I use XMPP), and I've onboarded almost a hundred non-geeks to XMPP. I have more experience in this matter than most. Speak for yourself.

@uexo @joelanman

@contrapunctus @uexo @joelanman A hundred people out of a population of how many within, say, ten miles of your local community? I mean, if you live in say Northern Minnesota and there are only a thousand people in your local area, that's quite an accomplishment. But if you live in say New York City or LA or Chicago, etc. then that is a VERY tiny percentage of users. But anyway what you do IRL has no bearing on what happens when you post on Mastodon or other social media. Until you post something saying "I am willing to help anyone that reads this to onboard with xmpp" or words to that effect, it's as I said before, you just come across as preachy. Yes, you can be a big influence on the people you have direct contact with (assuming they want your help) but that's not the people reason random post online trying to encourage or shame them into using xmpp.
@maple Signal is just plug-and-play, compared to something like XMPP, and I think they do it really well, so that just about anyone can sign up to use it. I really wish other platforms became as user-friendly.

@maple @contrapunctus @joelanman
I understand where you are coming from, but:

1. People install untrustworthy apps all the time. In fact, by far most malware infections on Android are not caused by security issues in the operating system (even though most people run terribly outdated versions with known vulnerabilities), but by users installing untrustworthy apps from third-party sources (not Play Store).
2. Signal for Android is known to include malware for almost a decade now.

@pixelschubsi @contrapunctus @joelanman You have made several allegations with no real proof but that's kind of irrelevant to the point I was trying to make anyway, which is that VERY few people are going to bother with #xmpp because it is too difficult and complicated for the TYPICAL user to install and configure. I am not talking about the Linux or server experts who love setting up this sort of thing, and I am not talking about the people who have a friend/relative/neighbor that's really hot on xmpp and has convinced them to try it and is willing to install and support it for them (and potentially their friends and family with whom they communicate regularly).

Is xmpp more private and secure? Unquestionably. Is it free from the control of major corporations? Mostly (but remember that Google used to use it in Google Talk and Google Voice). Is it easy for non-technical people to set up and configure? Some may think it is but they are living in fantasyland, or maybe they are promoting a solution that requires a phone number, which then makes any claims of being more private fly right out the window and into a different galaxy. If you have to give a phone number you lose the main advantage over Signal, et. al.

Until the xmpp proponents take the difficulty of onboarding seriously (and stop pretending it's easy, or that everyone has a technically-inclined person in their life that seriously cares about this sort of thing), xmpp is basically going nowhere.

By the way, yesterday someone mention #Gajim. Gajim is a fine program, probably one of the best xmpp clients I've seen, but it has one fatal flaw: It refuses to implement some xmpp features if talking to a server that doesn't have a valid, up to date certificate (a self-signed certificate won't do). Which, if you are trying to set up a small server for friends and family, is an additional layer of complication that will stop some folks in their tracks. So stop pretending xmpp is easy - maybe it is if you are the type who sets up servers as a hobby or for work, but it is not for most people, and most people just don't care THAT much about privacy (unfortunately).

@maple @contrapunctus @joelanman

1. Everyone is signing up and using means of communication for someone. You rarely open an account with an instant messenger without having an idea what to do with that later. Therefore I'd argue that being invited to a messaging app (let's for now ignore how exactly the invite looks like) is the main way for people to use that app.

@maple @contrapunctus @joelanman

2. I bet you use e-mail, but how did you start using e-mail? Did someone introduce you to it, guiding you through setting up an account with their favorite provider at the time? Or did you maybe follow some guide online to do so? Or have you been involved in the early days and set up a server yourself (maybe using a guide as well)? In any case the procedure was probably similar to setting up an XMPP account. And everyone has e-mail, so everyone could have XMPP.

@maple @contrapunctus @joelanman

3. I think you haven't really followed how much XMPP people have in fact thought about how to make onboarding easier. Quicksy is just one example (being based on phone numbers and your phone book like WhatsApp). Snikket provides means to invite using a single link (or QR) that when opened on a phone, would redirect you to the Snikket app in the respective app store which after installation will automatically set up an account and start a chat with the inviter.

@maple @contrapunctus @joelanman

4. You seem to see XMPP as an app or service. It's not. It's a protocol, a technology that apps and services can use. WhatsApp is using XMPP. Zoom is using XMPP. Fortnite is using XMPP. And a bunch of others. More than half of the world population is using XMPP regularly. So the protocol can't be the issue. And if you pick the right FOSS apps for the use (e.g. Quicksy, Snikket), they're just as fine as the commercial ones.

@pixelschubsi @[email protected] @joelanman At risk of beating a dead horse here, I will just say that there are two flaws in your arguments about #XMPP. One is you assume that an EASY solution doesn't need to be compatible with desktop computers. Yet that is where such a solution is most needed, since it's often older people (who have difficulty reading small text on a phone screen, or just can't figure out how to use their phone for anything beyond phone calls) that use the #Signal desktop application.

Second, when you talk about servers, what is really needed is an XMPP server that you can install and then it will offer a WEB-BASED interface for setup, maybe with a setup wizard to make it even easier for those who know nothing about XMPP. It should NOT just assume that you want to interact with other XMPP servers (some people just want to run a private system for friends and family). And (this is important) it needs to automate the process of getting and renewing any necessary certificates (from Let's Encrypt or wherever)., That is the part that stumps may would-be users. AND IT SHOULD NOT REQUIRE A PHONE NUMBER FROM USERS!!!!! And it should not assume you are a Linux nerd, or really know much of anything about computers.

By the way the reason the certificate thing is important is because many XMPP clients either will not work at all, or will not give you full functionality if there is no certificate (a self-signed one apparently won't do). For example Gajim, which is arguably among the easiest of XMPP clients to use, will let you do basic instant messaging but it won't let you send photos or files if there is not a valid certificate. WHY???

I don't want you to think I am promoting Signal. I HATE the fact they ask for a phone number, although at least you don't necessarily have to use your cell phone number. In fact I would probably be a lot more positive about XMPP if the servers were easier to set up (AND DID NOT USE A PHONE NUMBER!!!!! AND HANDLED THE CERTIFICATES AUTOMATICALLY!!!!!) and the clients had an option to use a self-signed certificate on the server. But still, I at least have a nodding familiarity with Linux. Most users (particularly Windows and MacOS users) would be in way over their heads trying to set up an XMPP server. And if you mention that fucking Quicksy again I will block you, I am not and NEVER will be interested in anything that requires a PHONE NUMBER. Having a phone number should NOT be a requirement for internet communications, and it throws all the privacy and security advantages of XMPP right out the window for the sake of convenience.

P.S. Also forgot to mention, I started watching a video about Snikket, first things it said was you need a domain name (regular users probably don't have those) and a VPS (and its associated monthly fee). Again, WTF!!! Why should I pay a monthly fee when I can use Signal for free and don't need to deal with all that nerdy stuff? The entire video runs over 17 minutes and almost none of it is anything a normal user would easily understand. And that's supposed to be the EASY way to install an XMPP server? If that is easy I would REALLY hate to see the hard way. Now I will grant that was just one video, and there may be an easier way to set it up (preferably self hosted so you don't need a VPS, especially for a friends/family only system), but I don't think you can ever get around the fact that it (at present) requires that you be a bit of a Linux nerd to get it going.

@maple
I understand you'd like to have a solution that also works on the desktop and I agree. However you have to realize that many popular messaging systems have a mobile app as a prerequisite, so it's hard to argue that XMPP systems doing the same is a major issue.

When it comes to settings up your own server, I like things to be simple as well, and hack Snikket server is >90% web based setup. [...]

@maple [...]
There is just some things - https://snikket.org/service/quickstart/ - that need to be done before getting access to the web setup, like starting the web server and making it available. Snikket also will automatically get your LetsEncrypt certificate and so on.

But here is also where you got me 100% confused: You watched a video on how to setup a Snikket server and complain that you need a server for it? Well, what else does a server run on if not a server?
[...]

Snikket quick-start guide

Hi, welcome! This is a guide to help you set up your own Snikket service. Once it is set up, you will be able to invite others to join you using the Snikket app and chat over your own private messaging server! Not sure what this is all about, or self-hosting is not your kind of fun? Good news: we also provide hosted Snikket instances! You can start a Snikket instance for your group in just a few clicks with no technical expertise necessary. Requirements To follow this guide you will need:

Snikket Chat
@maple [...]
If you don't want to run a server on you own and also don't want to pay someone to run it for you - https://snikket.org/hosting/ -, you need to use the server of someone else. With Snikket that means, you need to find someone that invites you to their server. If someone was to send you an invite to their Snikket, there is literally nothing you need to setup, so you probably won't find a tutorial video on how to do that.
Snikket Hosting

Snikket is a fully open-source personal messaging server that allows groups of people such as family, friends, clubs and small organisations to have their own private communication space. You can use our simple dashboard to launch Snikket instances for you in just a few minutes. It’s a great option if you’re just looking for a more privacy-friendly alternative to mainstream messengers such as Facebook, WhatsApp or Telegram, without any technical knowledge required.

Snikket Chat

@pixelschubsi I think you are misunderstanding what I am saying. *I* understand that #Skikket is a server and needs to be set up, but what I keep hammering on is that a typical user won't have the foggiest clue how to do that with any of the current #xmpp server programs. A typical user wants to install an app and get on with their life, and yes many of them will just blindly enter their phone number when requested, but not all will. And again, I agree that if someone else wants to set up a server and be your tech support it can be a breeze for you, although if they are not all that Linux savvy they may not care much for the current server choices.

The only time I ever had an xmpp server that was reasonably easy to install and use was #OpenFire, and that was only because it was installed using a script that actually set up several programs at the same time. But that was MANY years ago (probably more than 15, maybe 20 years) and was before certificates became a thing on xmpp servers. But as I recall it had a decent web interface (or maybe that was pa\rt of that package of programs), anyway I only ran that package for maybe two or three years and then that project died. But even that would be more than a typical user wants to deal with (and yes I had a nodding acquaintance with Linux even back then, but I don't know a whole lot more about it today than I did back then, it mostly frustrates the hell out of me whenever I encounter some problem).

Almost nobody running a xmpp server wants to invite anyone and everyone to use it, but even if those open servers exist, few people have heard of them and in a group of friends or family someone would surely object that they know nothing about that server, it could go down without warning at any time or the operators could be intercepting messages, etc. #Signal, at least, is big enough that it's probably not going to fall of the face of the earth without warning (and if it does the tech press will be telling you why and if it's likely to come back) and it does have a privacy policy. So running your own server is preferable and my point all along is that they need to make that MUCH easier for non-nerds. If the server uses text-based or yaml configuration files you are lost already. Users want web-based configuration (think something like Home Assistant, which I do not use but I have noticed it is getting very popular, which never would have happened if they did not have that superb web interface).

Snikket may in fact be most of the way there, but as far as I know it is not cross platform, and it could definitely stand to have a better introductory video than that one I was watching. BUT you could have the easiest server in the world to install and it's not going to motivate a user that wants to be up and running in two or three minutes, using a platform their friends and family have at least heard of. And yes I know, those are the kind that will happily give up their phone number, and it burns me to no end that people don't care about that, but they don't. And then if you have xmpp servers that also require that, you have really just taken away any reason someone should prefer xmpp over Signal.

In my mind before you go promoting xmpp as an alternative to Signal you need to have a server that preferably is cross-platform, but at the very least is drop-dead easy to set up (you should be able to show how to set it up and add users in a video of 3 minutes or less, 5 tops), and it should not require the user to know anything about certificates. It should not require a domain if you just want to use it locally, or tell you how to use it with a free service such as freedns.afraid.org or DuckDNS or something like that. It should not tell you that you need to use any paid service (Signal is free!). It should not assume you need any kind of group chat (maybe you just want one-to-one messaging) but it should let you send images and files to another user. It should not assume you want to federate with any other xmpp server (in case you are running a private friends/family server). In other words it needs to be as easy to work with as something like Home Assistant.

And for the people that absolutely will not set up their own server (and don't have a tech-savvy relative) then there needs to be a service they can use THAT DOES NOT REQUIRE A PHONE NUMBER (otherwise why not just use Signal?) and that has the ability to scale and that has a decent privacy policy (and it will still need to reach critical mass before people will use it). And of course that all costs money (again, Signal is free!). We actually used to have something more or less like that in the form of Google Talk but they shut that around 2016 if I recall correctly.

Anyway those are the hurdles the xmpp proponents need to think about and overcome if they really want to "sell" anyone outside their immediate friends/family circles on using xmpp. Speaking from experience, we used to have an xmpp server set up in our friends/family group (using Prosody after that OpenFire setup went away, only because we found some good instructions in some guy's blog that are now no longer online) but as with many things it became harder and harder to deal with and the when the xmpp clients started demanding valid certificates just to send photos and files that just killed it, and everyone went to just using email and then later to Signal. So that is not something I personally would ever want to get back into unless I was pretty certain the process of setting up and running a server had become MUCH easier.

@maple @pixelschubsi @joelanman you use conversations as server and for older people gajim is best. No fuss. You have to anyway set up account once. And they can use WhatsApp also. It's not totally off the books right. Setup server is hard enough for most of young people as well

@methuselah @pixelschubsi @joelanman Sure, conversations is an option IF you and your friends/family are highly motivated to use #xmpp, and you all agree that a platform most of you have probably never heard of is a better choice than the big slick one that everyone's heard of. And I actually could envision scenarios where that would be the case (a family or group of friends that do not want to associate a phone number with their accounts, for example) but basically you're being asked to trust the operators of a platform you have never heard of. Is that any worse than trusting the larger, shinier platform? Maybe not, but still I think conversations would be a hard sell in many friend/family groups, simply because most people are unfamiliar with xmpp and xmpp clients.

I also note that in a footnote on their page they say, "To create an account your client needs to support inband registration. Depending on the client, you will either be asked for the desired address (e.g., [email protected]), or separately for the user name (e.g., alice) and domain part (conversations.im). A login password must also be specified. If anything else can be configured, the default settings should usually be fine." And a lot of people would say, "Your client? WHAT client? What's a xmpp client? How do I know if it supports inband registration? Does that mean setup will be complicated?" They may also ask things like "Can I trust that my messages are not intercepted and/or stored?" and "Is this service likely to go belly up with no warning in the middle of the night?" I am not saying conversations is a bad choice, it actually might realistically be one of the best choices for many users, but there might be a high hurdle to convincing them of that. And also there are users would would prefer to use a totally free service (as far as I can tell, use of the conversations server is free but their official clients are not), remember Signal is totally free.

Even with those objections, I think the xmpp proponents might be much further ahead to suggest something like that (and maybe make a list of FREE clients that will work with it) than just telling people they should try xmpp and offer no further guidance).

I looked in my password manager and I actually had created an account there at one time, but for whatever reason never actually used it. I don't remember now if it was because I could not get it to work with my xmpp client or what; I must have created it some time back and my memory is not that good.

@maple @methuselah @joelanman
I'm not sure what guides you read, but it seems the problem with them is that they're too open and offer options that make things more complicated.

A guide could be as easy as: [...]

@maple @methuselah @joelanman
Q1: Do you want to be reached by your and reach others by their phone number?
Yes > Install Quicksy on your phone. Follow on screen guidance. Done.
No > Q2

Q2: What device are you using?
Android > Install Conversation.
iPhone/iPad > Install Monal.
Computer > Install Gajim.
Open Conv/Monal/Gajim. Select create account. Enter your desired nickname followed by "@conversations.im". Enter a password, note it down and store it. Follow on screen guidance. Done.

@maple @methuselah @joelanman
This probably covers 99.9% of users' needs, but because the 0.1% are the tech people that write those guides, they're overly complicated to cover that tech person's personal needs.