diff --git a/applet/src/main/java/com/dangerousthings/aliro/AliroApplet.java b/applet/src/main/java/com/dangerousthings/aliro/AliroApplet.java
index b241830..a8028f4 100644
--- a/applet/src/main/java/com/dangerousthings/aliro/AliroApplet.java
+++ b/applet/src/main/java/com/dangerousthings/aliro/AliroApplet.java
@@ -46,7 +46,7 @@ public class AliroApplet extends Applet {
     // AUTH session scratch). The diagnostic keypair is allocated separately
     // from the protocol's ephemeral keypair, so calling diag mid-transaction
     // cannot clobber an in-flight AUTH0/AUTH1.
-    private static final boolean DIAGNOSTICS_ENABLED = true;
+    private static final boolean DIAGNOSTICS_ENABLED = false;
 
     private static final byte INS_DIAG_HMAC       = (byte) 0xD0;
     private static final byte INS_DIAG_ECDH       = (byte) 0xD1;