Encrypted messenger · Android first · In development

The PIN you type decides which chats appear.

Whisperboxchat works like the messenger you already use. Your everyday PIN opens your everyday chats. A different PIN opens those same chats plus hidden ones — and nothing on the phone hints they exist.

Join the waitlistNo ads. Chats stay on your phone.

Type a demo PIN on the keypad. Every PIN takes the same time, so nobody can tell which kind you used.

One app, three kinds of PIN

Every PIN opens the same app, with the same screens, in the same amount of time.

EVERYDAY PIN

Your normal inbox

Family, work, friends. The chats you'd show anyone — and the PIN you give if someone makes you unlock.

LAYER PIN

Your inbox, plus hidden chats

Up to three hidden layers, each with its own PIN. Start a hidden chat by typing a PIN; the app never shows a list of layers.

DURESS PIN

Your normal inbox, and the hidden chats are gone

Opens exactly like your everyday PIN while every hidden chat is destroyed. Hidden layers also delete themselves if you don't open them for 7, 30 or 90 days.

What stays on your phone

Chats live on your phone.
Messages, photos and files are stored only on your phone, encrypted. There's no cloud backup to hand over.
Our servers forget.
The relay passes encrypted messages along and deletes them once they're delivered — or after 30 days if nobody collects them.
End-to-end encrypted.
Built on the open encryption protocol Signal uses. We can't read your messages, and neither can anyone else in between.
Alerts give nothing away.
A notification can say only “New message”, show a harmless line you choose, or stay silent.
Same screens, same timing.
Every PIN opens the same app in exactly the same time. Settings and storage figures never mention hidden layers.
No ads, no tracking.
We will never sell or use your data. This website doesn't even set a cookie.

Made for people whose phones get checked

  • Journalists and their sources
  • Activists and organisers
  • Families with relatives where messages are watched
  • People crossing borders
  • Survivors and the people supporting them
  • Lawyers handling sensitive matters

What it can't protect you from

We'd rather you know the limits before you rely on it.

  • Spyware or malware already on your phone.
  • Someone watching you type your hidden PIN.
  • A forensic lab with your phone and unlimited time may find signs that hidden chats exist — though not what they say.
  • A contact who photographs their own screen.
  • Local laws. In some places, refusing to unlock a device has legal consequences. Know the rules where you are.

Be first to try it

We're building the Android app first, then iPhone. Join the waitlist and we'll email you when the beta opens.

Work with a newsroom, NGO, legal clinic or shelter? Choose your role in the form and we'll be in touch about piloting it with your team.

We'll only use it to tell you when you can try Whisperboxchat.

We store your email, your answer above and the date — nothing else. Ask us any time and we'll delete it. See the privacy notice.

Questions

What if I forget a PIN?

There's no reset — that's what keeps hidden chats safe. Your 12 recovery words restore your regular chats on a new phone, along with any hidden layer whose PIN you still remember.

Can the people I chat with see my hidden chats?

Only the chats they're part of. Two people can agree to keep a chat hidden on both phones, and to delete it from both at once.

Why would I need a duress PIN?

If you're ever forced to unlock, you can give a PIN that looks like your everyday one. Your regular chats open as normal; the hidden ones are permanently destroyed.

When can I use it?

We're building it now: Android first, then iPhone. Join the waitlist and we'll email you when the beta opens.

How do I know it does what you say?

An independent security firm will audit the app before public launch, and we'll publish the report. The encryption is the same open protocol Signal uses.