Security

Built so we can't read your messages.

End-to-end encryption is on for every chat, group and call, from the first message. No setting to find, nothing to switch on.

How it works

A new key for every message.

If one key ever leaked, it would open one message — not your history.
  1. 1

    Sealed on your device

    Before a message leaves, your device locks it with a key made for that message alone.

  2. 2

    Addressed to their devices

    That key is sealed again for each device of each person in the chat — and only those devices can open it.

  3. 3

    Relayed, never read

    Our servers store and deliver the sealed message. They have no key that opens it.

Your deviceConnectfy serverAysel's device
See you at Fountains Square at 7?
See you at Fountains Square at 7?
What the server stores

Encrypted end to end

Everything you send.

  • Messages in direct chats and in groups
  • Photos, videos, files and voice messages
  • Polls, locations, contact cards and link previews
  • Voice and video calls, screen sharing and group calls

Encrypted Key Vault

Your history follows you. Your keys stay yours.

Your message keys are backed up in a vault locked with a passphrase that never leaves your device. Sign in on a new computer, enter it, and your past conversations open — we can't open the vault without it.

Privacy settings

You decide who sees each part of you.

Every part of your profile has its own setting — Everyone, Friends or Nobody — and the server enforces it, not just the app.
  • Read receipts are fair: hide yours and you stop seeing others'
  • Turn friend requests off entirely if you want
  • Blocking takes effect on both sides at once
  • Phone numberNobody
  • BirthdayFriends
  • Last seenFriends
  • LocationNobody
  • Bio and social linksEveryone
  • Who can add me to groupsFriends
  • Who can message meEveryone

Your account

Locked down, and you'll know if anyone tries.

  • Two-step sign-in

    Turn on two-factor authentication and every sign-in also needs a code sent to your email.

  • One session at a time

    Signing in on a new computer ends your other session. If the new computer isn't trusted yet, it needs a code we email you first — so a stolen password alone can't sign you out.

  • Trusted devices

    See where you're signed in, which devices you've confirmed, and sign the others out.

  • Security emails

    A new-device sign-in, a password or email change, or a deactivation sends you an email with a one-click “That wasn't me” link.

  • Activity log

    A record of your sign-ins and account changes, so nothing happens without a trace.

  • Private file storage

    Files and avatars are stored privately and served through short-lived links, never public URLs.

  • Leave whenever you like

    Deactivate for a break, or delete your account — with 30 days to change your mind.

  • Strong passwords

    Upper and lower case, a number and a symbol — or sign in with Google instead.

  • 13 and over

    Connectfy is for people aged 13 and older; signing up asks for your birthday.

Talk freely. Stay private.

Free, in your browser, in a minute. No phone number needed.