End-to-end encryption
Your messages are sealed on your device before they leave it.
Last updated
How it works
Your phone makes its own key pair. Each chat gets a key of its own, sealed separately to every member. Messages are encrypted with it before they are sent, so our servers only ever carry text they cannot open.
Direct messages and groups both work this way. When someone joins or leaves a group, the group gets a new key, so a person who left cannot read what comes after.
What our servers can see
- Who is in a chat, and when messages are sent.
- How large a message or file is.
- Never the text of an encrypted message, and never your key.
- Encrypted messages only until your phones have them: then they are deleted from our servers.
Files In DMs and groups, the phone and this web client encrypt every file before upload; our storage holds only ciphertext. Files sent before that change stay readable by our storage until they are deleted. Flocks (webhook feeds) are not end-to-end encrypted.
The full flow
New group members
Someone added to a group sees messages from the moment they joined, not the history before it.