End-to-end encrypted · Signal protocol

Feels just like Telegram. Actually private.

CipherChat is the messenger you already know how to use — fast, fluid, everywhere — but every message is encrypted on your device. The server only ever sees ciphertext.

X3DH / PQXDH + Double Ratchet Post-quantum ML-KEM No ads, no data selling
Live on iOS macOS Android Windows Linux
What makes it different

Familiar on the surface.
Uncompromising underneath.

Everything you love about a modern messenger — with cryptography you can actually verify, not just take on faith.

End-to-end encrypted by default

No toggle, no "secret chat" mode to remember. Every conversation is protected by the Signal protocol — X3DH/PQXDH key agreement and the Double Ratchet — the moment you open it.

libsignal Double Ratchet ML-KEM · post-quantum

Live & instant on every platform

Messages sync the moment they're sent and stay live across every device you own. Pick up a thread on your phone, finish it on your laptop — seamlessly and in real time.

iOSmacOSAndroidWindowsLinux

Verifiable trust

Compare a safety number to confirm exactly who you're talking to — no impersonation, no silent key swaps. If a contact's device changes, CipherChat tells you right away.

Safety numbers Device-change alerts

Private by design

We keep the bare minimum needed to deliver your messages and nothing more. No advertising profiles, no behavioral tracking. We do not sell your data — there's no business model that depends on it.

Minimal metadata No ads No data selling
How the encryption works

Your message is locked before it ever leaves you

In plain language: the lock and key live on your devices. The server is just a courier carrying sealed envelopes it can't open.

STEP 01

Encrypted on your device

Your message is sealed with keys that exist only on your devices. The plaintext never touches our servers.

STEP 02

Server sees only ciphertext

We relay and queue your sealed message so it arrives reliably. All we ever store is unreadable ciphertext.

STEP 03

Decrypted only by the recipient

Only your recipient's devices hold the keys to open it. The message is decrypted there — and nowhere else.

Keys ratchet forward with every message, so even if one key were ever exposed, past and future messages stay sealed. With ML-KEM, that protection extends to a future of quantum computers.

Verify, don't trust

Know exactly who's on the other end

Every conversation has a unique safety number derived from both parties' keys. Compare it in person or over another channel and you've cryptographically confirmed there's no one in the middle.

If a contact reinstalls or adds a device, their keys change — and CipherChat surfaces a clear device-change alert so a swap can never happen silently.

Safety number with Avery Verified · matches on both devices
43912088776120459930 17645203819447230518 66029113574881072294
Numbers match — your connection is end-to-end verified.
Privacy you can audit

Honest about what we can — and can't — see

We hold the minimum needed to run a reliable service. The content of your conversations is not part of it.

Minimal metadata

Account identifiers and basic connection info to deliver messages — not a profile of your life.

No ads, ever

There's no ad network watching what you say, because we never built one.

We don't sell data

Your information isn't a product. No selling, no renting, no data brokers.

Ciphertext only

The messages, calls, and media you send are sealed end-to-end. We can only store the locked version.

Make the switch

Privacy shouldn't mean starting over

Get the messenger that feels like the one you already use — and keeps your conversations yours.