Nostalgic outside, today's security inside
Only you and your contacts can read it
Your messages, your nick, your personal message and your picture are encrypted on your device before they leave it. This is how a message travels:
A message's journey
You write
“see you at 8 at the internet café”. For now it only exists on your screen.
see you at 8 at the internet café
It's sealed on your device
Before leaving, it's encrypted with keys only the conversation's devices hold.
9f2c·a71e·04bd·e93f·77c1·b0a8
It passes through the server
The server keeps it sealed until it's delivered, 30 days at most, then deletes it. It never has the keys.
9f2c·a71e·04bd·e93f·77c1·b0a8
Your contact opens it
Only their devices can open it. To the rest of the world it's still a seal.
see you at 8 at the internet café
What the server sees and what it doesn't
The server knows
- Which accounts talk to each other
- When each message is sent and its size
- Your @username and how you sign in (number or Microsoft)
The server never sees
- What you write
- Your nick, personal message and picture
- The files you send
- What you say on calls
We're upfront about what it does know, so you can decide with all the facts.
For the curious
MLS, the IETF standard
Conversations use MLS (RFC 9420), the open standard for encrypted group messaging, with the free OpenMLS implementation.
Post-quantum protection
The key exchange is hybrid: X-Wing combines ML-KEM-768, resistant to quantum computers, with X25519, the trusted classic.
Every device, approved by you
A new device gets in only if you approve it from another one (comparing six emoticons), with your passkey or with your recovery key.
Your profile is encrypted too
Your nick, personal message and picture are encrypted with a key only your accepted contacts share.
Start chatting encrypted