Secure Encrypted
Messaging Service
End-to-end encrypted. Zero servers of trust. No recovery — by design. Built for everyone who values privacy. Bringing sovereignty and integrity back to private communication. Live now as a PWA — downloadable apps for Windows and Mac launch at the end of November 2026.
The Panthera Vision
Every mainstream messenger runs on someone else's servers, someone else's identity system, and someone else's idea of what "private" means. Panthera was built on a single conviction: your conversations belong to no one but the people in them.
No phone number or personal email requirement. Readable content and private keys stay on participant devices. The service carries encrypted content and minimal delivery metadata, not a readable conversation history.
- End-to-end encryptedX3DH first-contact key agreement with one-time prekeys, then a Double Ratchet that derives a fresh key for every message.
- Zero servers of trustThe service stores only ciphertext and routing data — keys it cannot use, content it cannot read.
- No recoveryPrivate keys stay wrapped on your device under an Argon2id-derived key. Lose the key, lose the data — by design, not accident.
- Sealed-sender deliveryAnonymous sealed envelopes hide the sender from stored rows; rotating delivery addresses keep your account identifier out of them too.
- Forward & post-compromise secrecyDouble Ratchet advances keys for each message. Forward secrecy protects earlier messages after old keys are deleted; post-compromise security depends on a fresh, uncompromised ratchet exchange. Padding reduces message-length leakage.
- Alias-only identityNo phone number, no email, no public username directory. Profiles are encrypted and readable only by contacts you approve.
Built for people, not products
Somewhere along the way, privacy became a feature instead of a right. Your messages are scanned, your habits profiled, your data sold to the highest bidder. Panthera S.E.M.S exists to end that. Private communication is not a luxury — it is the ground on which sovereignty, integrity and free thought stand. We do not track you, we do not profile you, and we have nothing to sell — because we collect nothing.
Families & friends
Private moments stay private — no scanning, no ads, no algorithm listening in.
Journalists & sources
Protect the people who trust you — sealed-sender delivery and no metadata trail to follow.
Lawyers & advisors
Client privilege that survives any seizure — when there is nothing stored, there is nothing to compel.
Everyone who values privacy
The right to be left alone — enforced by mathematics, not by promises.
What Panthera does
End-to-end messaging
Every text, image, voice note and file sealed before it leaves the device.
Encrypted attachments
One-time symmetric keys per file; server holds ciphertext only.
Fingerprint verification
Compare a shared safety number or QR code and watch for key changes before trusting a conversation.
Burn after reading
Recipient wipes the row on decrypt — one view, then gone.
Auto-lock
Auto-lock protects idle sessions. Supported devices allow biometric re-entry; a fresh app start still requires your password.
PWA installable
Runs offline-capable on iOS, Android and desktop. No app-store gatekeeper.
Sealed local cache
IndexedDB blobs sealed with in-memory KEK — a stolen dump reveals ciphertext.
Zero registration friction
Register with an alias and password. No phone number, personal email requirement or public account directory.
Double Ratchet + X3DH
X3DH establishes the session; Double Ratchet advances message keys and refreshes the shared secret through new DH exchanges. Established cryptography provides forward secrecy and post-compromise protection under its security assumptions.
- 01X3DH handshakeEd25519 identity + signed prekey + optional one-time prekey → 32-byte shared secret.
- 02Root key seedKDF(shared, DH) → root key + first chain key.
- 03Symmetric ratchetChain key → message key, then chain key → next chain key.
- 04DH ratchet flipNew X25519 pair on direction change. Root key rotates.
- 05Skipped keysOut-of-order messages cached (MAX_SKIP=1000) then discarded.
Go further inside Panthera
Four focused breakdowns — cryptographic strength, engineering internals, how Panthera stacks against every mainstream messenger, and where it's headed next. Each opens in its own encrypted channel.
How hard it is to break
Signal-class primitives. 256-bit keys. Forward & post-compromise secrecy.
Technical specification
Every library, every KDF tag, every storage layer — laid out honestly.
How Panthera compares
Panthera vs Signal, Session, Telegram, WhatsApp — capability by capability.
The Panthera way
Shipped and planned phases — identity, X3DH, Double Ratchet, native builds.
"A messenger protocol that treats its own operators as untrusted — and proves it with math, not marketing."