Signal Double Ratchet (E2EE)

End-to-End Encrypted Private Messaging

Communicate freely with cryptographic forward secrecy, crystal-clear HD audio/video calls, and zero telemetry tracking.

256-Bit

Curve25519 Keys

0 Bytes

Plaintext Stored

< 50ms

WebSocket Latency

Local-First

SQLite Cache

A
Ananya Roy
● end-to-end encrypted
Messages and calls are end-to-end encrypted. No one outside of this chat can read or listen to them.
Hey! Did you check out the new Signal Protocol Double Ratchet update on WhatsMsg?
10:42 AM
Ananya Roy
Did you check out the new Signal Protocol...
Yes! Every single message generates a fresh ephemeral key with forward secrecy. Even quoted replies stay clean plaintext!
10:43 AM
0:14
10:44 AM
Crystal clear audio! Sending the project blueprint now.
10:45 AM

The Signal Protocol Double Ratchet

How WhatsMsg mathematically guarantees that your private communications can never be intercepted, logged, or decrypted retroactively.

1

X3DH Handshake

When starting a conversation, devices perform an Extended Triple Diffie-Hellman (X3DH) exchange utilizing identity keys, signed pre-keys, and one-time pre-keys.

Curve25519 • HKDF-SHA256
2

KDF Message Chain

Each message sent ratchets the symmetric key-derivation chain forward. Old message keys are permanently destroyed immediately upon encryption/decryption.

AES-256-GCM • Forward Secrecy
3

DH Ratchet Recovery

Whenever recipient responds, a fresh Diffie-Hellman ratchet step occurs, healing the session even if an ephemeral key was theoretically compromised.

Break-in Recovery Guarantee

60-Digit Safety Number Verification

Compare the safety fingerprint below with your contact's device. If the numbers match, your end-to-end encrypted connection is 100% immune to eavesdropping.

39482 10948 29384 19284
84729 48291 03948 57291
94820 18274 95820 48291

Built for Intimacy, Scale & Speed

Every feature has been meticulously crafted to rival the world's most advanced messaging networks.

True End-to-End Encryption

All texts, photos, videos, voice messages, documents, and calls are encrypted with the Signal Protocol. No backdoors, no master keys.

Sub-50ms Realtime Delivery

Powered by high-throughput Pusher/Reverb WebSockets with on-device SQLite sync queues ensuring 100% delivery even during network dropouts.

HD WebRTC Voice & Video

Peer-to-peer audio and video calling with adaptive bitrate codec negotiation and global TURN relay fallback for strict NAT traversal.

Biometric Chat Lock

Lock confidential conversations behind fingerprint authentication or custom secret passcodes with stealth folder hiding.

Disappearing Messages

Set custom timers (24 hours, 7 days, 90 days) or send View-Once media that self-destructs immediately after initial playback.

Communities up to 1,024

Organize neighborhood groups, developer circles, and companies with granular admin permissions, announcement channels, and join preview links.

Technical Architecture Specs

Open, transparent, and built with industry-standard protocols.

Encryption ProtocolSignal Protocol (Double Ratchet + X3DH + Curve25519)
Local PersistenceEncrypted SQLite (Drift 2.34) with deduplicated upserts
Real-Time TransportPersistent WebSocket (Laravel Reverb) + REST Failover
Calling StackWebRTC Peer-to-Peer + Coturn STUN/TURN Relays
Target PlatformsAndroid 8.0+ (API 26), iOS 14.0+, Modern Web Browsers
Release Packagecom.example.mitra_app • v1.0.4

Frequently Asked Questions

Clear answers to your technical, privacy, and security questions.

Can WhatsMsg servers read my messages or listen to my calls?
No. All message payloads are encrypted directly on your device using the recipient's public keys before ever hitting the network. Only the intended recipient possesses the corresponding private key necessary to decrypt the content. The server only sees ciphertext envelopes.
How is WhatsMsg different from Telegram or WhatsApp?
Unlike Telegram (where regular chats are stored on the cloud unencrypted by default), WhatsMsg enforces end-to-end encryption by default for every private chat and call. Unlike proprietary closed messaging apps, WhatsMsg operates with strict zero-knowledge telemetry and does not sell or profile user metadata.
What happens when I send messages while completely offline?
WhatsMsg features a local-first SQLite sync queue. Your outgoing messages, reactions, and edits are stored locally as 'pending' and dispatched automatically with idempotent UUIDs as soon as internet connectivity returns.
Are group chats also encrypted?
Yes. Group messaging utilizes pairwise Signal Protocol sender-keys so that only authorized group members can derive keys to decrypt incoming group messages.