Live · end-to-end encrypted by default

Private messages that
leave no trace.

SecMes encrypts every message on your device and deletes it from our servers the moment it is delivered. No phone number, no metadata harvesting, no copy left behind.

iOS and Android · free · no account tracking

AH
Anna Hofmann🔒 encrypted
Messages in this chat are end-to-end encrypted
Did the transfer go through?
Yes — sent it this morning.09:41 ✓✓
Perfect. Anything on the server?
Nothing. It was deleted the second you read it.09:42 ✓✓
Why SecMes

Built so we cannot read your messages — even if we wanted to.

Encryption is not a setting you switch on. It is the only way the app works.

Encrypted on your device

Every message is sealed with AES-256-GCM before it leaves your phone. The key is derived from an X25519 exchange between the two devices — our servers never hold it.

Deleted on delivery

The server is a mailbox, not an archive. The moment every recipient confirms delivery, the ciphertext is wiped. Anything undelivered expires after 48 hours.

Instant, everywhere

A persistent WebSocket keeps chats live with no polling. Offline messages queue locally and flush the second you reconnect.

No phone number

Sign up with a username. Add friends by QR code, by a 12-character verification code, or by handle — never by handing over your contact book.

Photos and voice, sealed

Media gets its own random key per file. The blob is opaque to the server and removed as soon as it reaches the recipient.

Groups that rotate keys

Each group holds a shared key wrapped individually for every member. Remove someone and a fresh key goes out — they cannot read what comes next.

Message lifecycle

Four steps from your keyboard to nothing at all.

Most messengers keep a copy forever. SecMes keeps one only long enough to hand it over.

1

Sealed

Your device encrypts the message with the shared chat key. Plaintext never leaves the phone.

2

Relayed

The ciphertext lands in Redis and is pushed to every recipient over an open socket.

3

Confirmed

Each device decrypts locally, stores it, and sends back a delivery receipt.

4

Erased

Once all receipts are in, the server deletes the message. You see the second checkmark.

For the nerds

The full cryptography stack.

No proprietary hand-waving — audited primitives, documented parameters.

Identity keysX25519 · Ed25519
Chat key agreementECDH → HKDF-SHA256
Message encryptionAES-256-GCM
AttachmentsAES-256-GCM, per-file key
Group keysPer-epoch AES-256, rotated on removal
Backupsscrypt (N=32768) + AES-256-GCM
Server retentionUntil delivered · max 48 h

Start a conversation nobody else can join.

Pick a username, scan a friend's code, and you are talking. It takes about thirty seconds.