End-to-end encrypted
The messaging server receives encrypted message envelopes, not readable conversations.
PRIVATE COMMUNICATION, DELIBERATELY SMALL
Conversations that stay between you.
VaultSec is an invitation-only messenger for people who want a quieter, more private place to communicate. No public sign-up. No discovery feed. Just your circle.
Android · private alphaiOS · in development
VaultSec
AR
AlexSee you at eight.
✓MI
MinaPhoto received
✓Sealed by default
Your private keys stay on your device.
THE SECURITY MODEL
Privacy is designed into the system, not added later.
Every message is encrypted on the sender’s device before it leaves. Only the recipient’s device can decrypt it.
Keys stay with you
Private messaging keys are created and protected on the device. The admin panel cannot view or create them.
Protected in transit
Connections use HTTPS/TLS. The server needs limited delivery metadata, but never your message content or private keys.
Invitation only
A personal code unlocks one private download and one account registration. It is deleted after registration.
WHAT THE SERVER CAN AND CANNOT SEE
It delivers encrypted data. It does not hold the keys to your conversations.
The server stores only the technical data needed to run the service: account names, public keys, encrypted message envelopes, encrypted image ciphertext and expiry times. Private conversation keys remain on the participating devices, so the server cannot turn the stored encrypted content back into readable chats or images.
SECURITY & BETA STATUS
What is ready now — and what is deliberately still next.
This is a private Android alpha. The app and service are designed to keep message content and private message keys off the server. It is not yet a production release or a substitute for an independently audited messenger.
Private Android access
Invitation-only download, PIN lock, panic PIN, three failed PIN attempts erase local vault data, and username/password re-download for existing members.
Encrypted text chats
Text messages are encrypted on the sending device and the receiving device decrypts them. The server delivers encrypted envelopes and keeps limited operational metadata.
View-once images
A JPEG image is encrypted on the sending device before upload and can be claimed once by its intended recipient.
iOS and broader media
iOS support, video, files and broader encrypted media are later milestones. They are not included in this alpha.
Production hardening
Release signing, backup and recovery procedures, external security review and full admin access policy are required before any broad public launch.
PRIVATE ACCESS
One invitation. A clear path in.
- 1
Receive a personal code
An authorised administrator creates it for you.
- 2
Download the Android app
The code opens one short-lived private download.
- 3
Create your account
Use the same code in the app. It is then permanently deleted.
PRIVATE INVITATION
Unlock the Android app.
Your code is checked only to create one short-lived download link. It is not saved in this browser.
Android is available in the private alpha. The iOS app is in development.
RETURNING MEMBER
Need the Android app again?
Enter your VaultSec username and account password to unlock one short-lived download. This does not sign you in or unlock your account; your device key and PIN are still required in the app.
ALPHA UPDATE
View-once images are now part of the Android alpha.
Images are encrypted on the sender's device before upload. The service stores ciphertext only and the recipient obtains it through a one-time claim.
One claim
The encrypted image can be claimed by its intended recipient once. After that claim, the server deletes the stored ciphertext.
No thumbnail cache
The app displays the decrypted image only in memory, briefly, and clears it when the view closes or the app locks.
Clear limitation
View-once reduces retained copies, but cannot prevent a recipient from using another camera or a compromised device.
Platform scope
Android alpha currently supports private view-once JPEG images. iOS and broader encrypted media remain later milestones.