A conversation starts with consent
Requests stay pending until accepted. Compare the shared safety number or scan its QR code before trusting a contact. Key-change warnings stay explicit; accepted contacts are remembered on your device.
Latest Updates
More control. The same private core.
From accepting a contact to locking your screen, privacy follows the whole conversation — not just the message.
Your profile, shared on your terms
Encrypted profile pictures, display names and status are shared only with approved contacts. Account discovery is blinded, with no public profile directory. Verification remains a separate safety check.
Fast re-entry. Password first.
On supported devices, Face ID or a fingerprint can reopen an auto-locked app after password sign-in. Closing and reopening still requires your password. The sealed unlock data stays on your device; cancellation leaves it locked.
Privacy beyond the message
Hidden chats with a PIN, auto-lock, local wipe controls and a screen shield when the app leaves the foreground. Alerts appear after local decryption, with preview choices, quiet hours, sound, vibration and per-chat mute.
Make the conversation yours
Dark by default, with a saved light theme, Classic or Flowing chat styles, seven backgrounds and a custom encrypted background. Adjust text and avatar size. Appearance preferences stay local and do not change encryption or retention.
More ways to stay connected
Encrypted groups, replies, voice notes, photos and files, with clearer sender attribution and blurred-photo reveal. Disappearing timers and burn-after-read keep expiry visible and under your control.
A free core. A separate payment identity.
The secure messaging core remains free. Paid capabilities use an anonymous licence code redeemed in the app, without attaching payer identity to the messaging alias. Banks and payment providers can still identify a card payer.