Post-quantum private messenger

The message no one
else can read.
Not even us.

TalkOnce encrypts your messages, calls, and media end-to-end with post-quantum cryptography — sealed on your device, opened only on your recipient's. We hold no keys, ask for no phone number, and keep nothing we could ever hand over.

No ads. No trackers. No analytics. Data Not Collected.

Why TalkOnce

Privacy that holds up — even against a quantum computer.

Most encrypted apps protect you against today's attacker. TalkOnce is built for the one recording your traffic now to break it later.

Post-quantum end-to-end

Hybrid classical + post-quantum encryption on every message, call, and file. Harvest-now-decrypt-later attacks come up empty.

No number, no name

Sign up with nothing. No phone, no email, no real name. There is no account profile to leak, subpoena, or sell.

Ephemeral by design

Delivered messages are erased from our servers the instant they reach you. Undelivered ones vanish within 30 days. Nothing lingers.

No ads, no trackers

We make nothing from your attention or your data. There are no third-party SDKs, no analytics, and no advertising — anywhere in the app.

Radical honesty

Exactly what our servers can — and can't — see.

Every messenger's servers touch something. Most won't say what. Here is the whole truth, in plain language.

Cannot see

  • Your messages, calls, photos, and files. They're end-to-end encrypted; we hold no keys and could not decrypt them if forced.
  • Who you are. No phone number, email, or name is ever attached to your account.
  • Your contacts or social graph as identities. We never upload your address book.
  • Your backups. Encrypted with a passphrase only you know — the file never touches our servers.

Must handle

  • An opaque routing address — a random identifier that tells the server which device to deliver an encrypted message to. Not your name, phone, or email.
  • Encrypted envelopes in transit — ciphertext we cannot open, held only until delivered.
  • Rough timing and size of encrypted traffic — an unavoidable property of any network.
  • A notification flag, only if you turn on push, so your device knows a message is waiting.

We'd rather tell you the honest boundary than market a promise we can't keep. Read the full detail in our Privacy Policy.

Everything you'd expect — privately

A full messenger. Nothing watching over your shoulder.

Chats, groups, channels, calls, and stories — the modern experience, without the surveillance underneath it.

1:1 & group chats

Private conversations and groups up to 1,000 members — all end-to-end encrypted, with disappearing-message options.

Broadcast channels

Reach up to 100,000 subscribers from an encrypted channel — the audience of a public feed, the privacy of a private app.

Voice & video calls

Crisp one-to-one and group calls, end-to-end encrypted. The relay that connects you can't listen in.

Stories

Share a moment that's gone in 24 hours — encrypted to your audience, never mined for a profile.

Blackout mode

Route everything over Tor and add cover traffic, so even the fact and shape of your messaging is concealed.

Duress & decoy locks

A panic passcode and a believable decoy account for the moment someone forces you to unlock your phone.

Zero-knowledge backup

Optional. Encrypted on your device with a passphrase only you hold — move to a new phone without trusting anyone.

Make it yours

Reorder your tabs, set profile, group and channel photos, and shape the app around how you actually use it.

You choose the trade-off

Three levels of privacy. You decide.

Every level is end-to-end encrypted. Higher levels trade a little convenience for less metadata — your call, changeable anytime.

Standard
The everyday experience — instant, effortless, still fully encrypted.
  • Post-quantum E2E encryption
  • Instant push notifications
  • Full speed, full features
Shielded
Tighten the metadata footprint while keeping the app fast and usable.
  • Everything in Standard
  • Reduced profile sharing
  • Hardened at-rest posture
Blackout
Maximum concealment for when it truly matters.
  • All traffic over Tor
  • Cover traffic & size padding
  • Duress, panic & decoy locks
For the people who ask

The cryptography, on the record.

No hand-waving. Here's exactly what protects your conversations.

Identity & signatures
Ed25519 + ML-DSA-87 (hybrid)
Key exchange
X25519 + ML-KEM-1024 (hybrid PQXDH)
Message ratchet
Post-quantum Double Ratchet
Content encryption
AES-256-GCM
Sender privacy
Sealed sender — the server never sees who sent a message
Verifiability
Reproducible builds — the app you run matches the published source

TalkOnce is preparing for independent third-party security audit. We publish our threat model in full — including what we don't yet claim.

Say it once. Trust no server with the rest.

TalkOnce is arriving on the App Store, with Android to follow. Privacy will always be free.