An end-to-end encrypted messenger. Every word is sealed on your device and opened only on theirs. In between there is nothing to see — not for hackers, not for governments, not even for us.
Most apps offer privacy as a policy. Policies are sentences in a document, and documents get rewritten. Kage's privacy is arithmetic. Every message is encrypted on your phone with keys that exist only there; what crosses the network is ciphertext — noise without the key. If our servers were breached tomorrow, the thieves would haul away a warehouse of static.
And when the letter with a court seal arrives, our answer isn't defiance. It's an inventory: ciphertext, and a timestamp. That's the whole warehouse.
This isn't our invention — that's the point. Kage is built on the Signal protocol, the most audited and battle-tested encryption design in messaging. We didn't roll our own crypto. We built a beautiful place for the best crypto to live.
Everything a messenger should do — and nothing watching you do it.
There is no "secret mode." Every message, call, photo, and file is end-to-end encrypted, every time. Privacy isn't a setting; it's the substrate.
Set a timer, five seconds to four weeks. When it ends, the message burns away on every device. Some conversations should leave no trace.
Your name travels inside the envelope, not on it. Our servers deliver your messages without knowing who sent them.
Backups done honestly: encrypted on your device with a key only you hold, stored as ciphertext we cannot open. Lose your phone, not your past.
Phone, tablet, desktop. Each device holds its own keys and earns its own trust; nothing ever crosses a server in plaintext.
Every chat has a safety number. Scan it in person, and you have mathematical proof no one sits between you.
No magic. This is exactly how it works.
Install Kage and your phone generates its own identity keypair. The private half never leaves. No key, no message — everything below follows from this.
Your device runs Extended Triple Diffie-Hellman against the recipient's published prekeys. Both sides derive the same secret, even if they're offline, and the math authenticates who's who. Hybrid post-quantum key agreement is on our roadmap.
Every message turns the ratchet: a fresh key derived, used once, destroyed. Steal a key and yesterday stays dark; keep talking and the ratchet locks you out of tomorrow.
Your identity rides inside the encrypted payload. The server learns where to deliver, never who is speaking. The recipient's device opens the envelope and confirms it's you.
Encrypted on-device with a key derived from your recovery phrase (Argon2id). We store noise. Without your phrase, it stays noise — for thieves, for subpoenas, for us.
Don't take our word for any of this. Compare safety numbers in person — the math will vouch for us.
Which, if you think about it, is everyone.
A career, a case, sometimes a life — hanging on a metadata trail. Sealed sender keeps names off the envelope. Disappearing messages keep archives from becoming exhibits. Safety numbers keep impostors out of the thread.
You don't need a threat model to want curtains. Your group chat, your family photos, your 2 a.m. thoughts — none of it should be raw material for an ad model. Privacy isn't suspicious. It's the default the internet forgot.
Term sheets, case files, incident reports, unreleased research. Kage Teams gives your org structure — members, rooms, retention rules — while message content stays mathematically out of reach of everyone. Admins manage rooms, never messages.
Built on the Signal protocol via libsignal: published, formally analyzed, attacked for a decade and still standing. We chose the crypto that survived, not the crypto that markets well.
Promises live in documents; documents get rewritten. Our privacy lives in key material that never touches our servers. We can't betray what we can't see.
Sealed sender hides who's talking to whom. Messages are deleted from servers on delivery. Every byte we don't store is a liability we don't have.
Client source published before 1.0, reproducible builds, independent audit with unredacted results. Until then we'll say "verify us soon" — never "just trust us."
Encryption protects the wire and the warehouse, not a stolen, unlocked phone. Disappearing messages can't stop a screenshot. Our servers still see delivery timing. We minimize metadata; we don't pretend to perform magic. A messenger honest about its limits is one you can believe about its strengths.
Every tier runs the same end-to-end encryption — Free included. Upgrades buy storage, groups, and resolution. They never buy safety, because safety was never for sale.
Sealed on your device with a key only you hold. Stored dark on archive-class storage. Takes 12–48 hours to thaw — slow on purpose, cheap because it sleeps. We can't rush it, and we can't read it.
We can't deduplicate your files against anyone else's. We can't compress what we can't see. We can't transcode your video on our servers — your device does, before it encrypts. Every byte you store with Kage is a real byte we pay for. You're not paying for storage tricks. You're paying for the absence of them.
Encryption is never the paywall — paid tiers buy room, not safety. No ads, ever.
Encrypted in under a minute. No ads. No trackers. No trace.