◈
Select a chat
Every message is end-to-end encrypted and forward-secret. The server only ever sees ciphertext.
End-to-end encrypted. Your keys never leave this device. Pick a handle to begin — a fresh cryptographic identity is generated right here in your browser.
Captured in-app and cryptographically sealed — the recipient can prove it's genuine and unaltered.
Every message is end-to-end encrypted and forward-secret. The server only ever sees ciphertext.
Enter a handle. We fetch their public key and set up an encrypted channel.
One of you creates the book and shows it; the other scans or imports it — in person. After that, every message is a one-time pad the server can never decrypt.
A private messenger with two encryption tiers. Keys are generated and stored on your device; the relay only ever forwards ciphertext.
Computational tier (default): ECDH P-256 + AES-256-GCM, HKDF ratchet for forward
secrecy — the same "no known attack" tier as Signal.
🛡 Unbreakable tier (opt-in, per contact): exchange a one-time-key book in person (QR or
file), then every message is a one-time pad + one-time MAC — information-theoretically
unbreakable given true randomness (no computer, classical or quantum, can read it). No other messenger
offers this. The Security panel tells you honestly which tier each chat is at and never overclaims.
Roadmap (from the qsecure core): a hardware RNG to make the book truly information-theoretic; ML-KEM for quantum-safe first contact; onion routing for metadata privacy; blind-token incognito mode; PUF hardware identity. These need hardware/infrastructure, not just the app.