Every message passes through 7 layers of encryption. The cipher combination changes every second based on your shared secret. Even if one layer is somehow broken, six more protect your data.
Sign up with just a username. No phone number. No email. No tracking. Your display name is all anyone sees.
Messages are encrypted on your device before sending. The server never sees your plaintext. Only you and the recipient can read them.
Verify your contacts with 60-digit safety numbers — like Signal. Know for certain that nobody is intercepting your messages.
Photos, videos, audio, documents — all encrypted with the same 7-layer system. Real-time progress shows each layer completing.
The ultimate panic button. Set a deactivation PIN — if entered, ALL your data is permanently destroyed. Your account ceases to exist. No trace.
Add friends securely with QR codes that change every 60 seconds. HMAC-signed so they can't be forged or replayed.
Lock the app with fingerprint or face recognition. Real WebAuthn cryptographic verification — not just a screen overlay.
Encrypted group chats with automatic key rotation when members leave. Share stories that disappear after 24 hours.
4 rounds of penetration testing by independent security agents. 55+ vulnerabilities found and fixed. Here's what's protected:
All user input escaped. Nicknames sanitized. No injection possible.
Link previews blocked from internal networks. DNS rebinding mitigated.
Brute force blocked. Upload limits. Message throttling. Connection timeouts.
JWT with pinned algorithms. Bcrypt password hashing. Reserved username blocking.
Uploads require authentication. Random filenames. MIME validation. Size limits.
Channel membership checks on every operation. No cross-channel data leaks.
Auth database encrypted with AES-256-GCM. SSL keys restricted to owner only.
All keys, caches, cookies, and service workers wiped on logout. No residual data.