End‑to‑end encrypted messaging
Your account is a keypair born in your browser. Every message is encrypted on your device before it is sent — the server carries your messages, but it can never read them.
ECDH P‑256 · AES‑256‑GCM · private keys never leave your device unencrypted
When you register, your device forges an ECDH keypair. The public half is published under your username. The private half is encrypted with your password before it is backed up — the server only ever holds a sealed copy.
Your key and their key agree on a secret no one else can compute. Each message is sealed with AES‑256‑GCM under that secret, with a fresh nonce every time, before it leaves your device.
The server relays and stores ciphertext only. Flip on Server view in any conversation to see exactly what it sees — and nothing more.
Every keypair has a fingerprint — a short code you can read to a friend over a call. If it matches, you are talking to them and no one in between. If a contact's key ever changes, OneChat warns you before you send another word.
OneChat never stores your private key on the server. Import the recovery file you downloaded when you registered, then unlock it with your password.
Enter your password to unseal your private key on this device.
Pick a conversation, or press ⌘K to jump anywhere.
Search and previews come from GIPHY, so your search terms go there. The GIF itself is sent end‑to‑end encrypted like any file.
This fingerprint identifies your new keypair. Friends can read it back to you to be certain they're talking to the real @you.
The server keeps no copy of your key. Download the recovery file now — it is the only way back into your account from another device.