Question 1

How do I install Veil on iPhone?

Accepted Answer

Open msg.voidly.ai in Safari, tap the Share button (square with arrow), then tap "Add to Home Screen". The app will appear on your Home Screen like a native app — full screen, no browser chrome, with its own icon.

Question 2

Why not use the App Store?

Accepted Answer

The App Store requires Apple review, which can delay updates and restrict features. As a Progressive Web App (PWA), Veil updates instantly, works offline, and gives you the same experience without gatekeepers. iOS 16.4+ supports push notifications, standalone display, and all the Web APIs we need.

Question 3

Is it really end-to-end encrypted?

Accepted Answer

Yes. Every message is encrypted on your device before it leaves. The relay server only sees ciphertext it cannot read. We use Double Ratchet (same algorithm as Signal) for forward secrecy — if a key is compromised, past and future messages stay encrypted. On top of that, ML-KEM-768 post-quantum protection guards against future quantum computers.

Question 4

What is post-quantum encryption?

Accepted Answer

ML-KEM-768 (NIST FIPS 203) is a new encryption standard designed to resist quantum computer attacks. Veil uses a hybrid approach: classical X25519 + post-quantum ML-KEM-768. Both must be broken simultaneously to compromise a session. This protects against "harvest now, decrypt later" attacks where someone records your encrypted traffic today hoping to crack it with a future quantum computer.

Question 5

Can the server read my messages?

Accepted Answer

No. Private keys are generated and stored locally on your device in IndexedDB. The relay is a blind courier — it routes encrypted blobs it cannot decrypt. Even if the relay server is fully compromised, your messages remain private thanks to client-side encryption.

Question 6

How do voice and video calls work?

Accepted Answer

Calls use WebRTC for direct peer-to-peer connections. Call signaling (connecting you to the other person) goes through the encrypted relay, but the actual audio/video stream flows directly between devices. STUN/TURN servers handle NAT traversal so calls work even behind firewalls.

Question 7

What are disappearing messages?

Accepted Answer

You can set messages to auto-delete after 5 minutes, 1 hour, 24 hours, or 7 days. Once the timer expires, messages are permanently removed from both devices. This is set per-conversation, so you can have some chats permanent and others ephemeral.

Question 8

Does it work on Android and desktop?

Accepted Answer

Yes. While designed primarily for iPhone (where App Store alternatives are limited), Veil works on any modern browser. On Android, Chrome will prompt you to install it as a PWA. On desktop, it works in any browser as a regular web app.

Question 9

How do I add contacts?

Accepted Answer

Each user gets a unique did:voidly: identity derived from their cryptographic keys. Share your DID via QR code (scan in person), copy-paste it, or search the directory by name. There is no phone number or email required — your identity is purely cryptographic.

Question 10

What happens if I lose my phone?

Accepted Answer

Your encryption keys are stored locally. Before losing access, export your credentials from Settings — this gives you a JSON backup you can import on a new device. You can also sync settings to the cloud for cross-device restoration. Without a backup, you would need to create a new identity.

Question 11

What is deniable authentication?

Accepted Answer

Deniable auth uses HMAC-SHA256 instead of Ed25519 signatures. Both parties in a conversation can produce the same MAC, meaning neither can cryptographically prove the other sent a specific message. This provides plausible deniability — critical for people in adversarial regimes where proving authorship could be dangerous.

Question 12

What is cover traffic?

Accepted Answer

Cover traffic sends periodic decoy packets that look identical to real messages. This makes it impossible for a network observer to determine when you are actually communicating vs. just generating noise. You can enable this in Settings for maximum privacy.

Encryption SDK	`@voidly/agent-sdk v3.4.0`
Key Exchange	`X3DH (X25519) + ML-KEM-768 (NIST FIPS 203)`
Message Encryption	`Double Ratchet → XSalsa20-Poly1305 per message`
Signatures	`Ed25519 (tweetnacl)`
Deniable Auth	`HMAC-SHA256 with shared DH secret`
Channel Encryption	`NaCl secretbox (XSalsa20-Poly1305)`
Identity	`did:voidly:{base58} — self-certifying, no central authority`
Voice/Video	`WebRTC (Opus audio, VP8/VP9/H264 video, STUN/TURN)`
Storage	`IndexedDB (encrypted ratchet state, contacts, messages)`
Transport	`SSE primary, long-poll fallback, polling tertiary`
Relay	`api.voidly.ai (Cloudflare Worker + D1)`
Offline	`Service Worker shell + IndexedDB message queue`
Cover Traffic	`Optional decoy packets at configurable intervals`
Themes	`Dark / Light / System (persisted + cloud synced)`

Feature	Signal	Telegram	WhatsApp
E2E Encryption		~
Forward Secrecy		—
Post-Quantum	~	—	—
No Phone Number	—	—	—
Sealed Sender		—	—
Deniable Auth	—	—	—
Cover Traffic	—	—	—
Voice/Video Calls
Disappearing Messages		~
No App Store	—	—	—
Open Protocol		~	—

Why Veil?

Messaging Features

Voice & Video Calls

Voice Messages

Image Sharing

Emoji Reactions

Reply & Quote

Disappearing Messages

Read Receipts

Typing Indicators

Security & Privacy

Double Ratchet E2E

Post-Quantum Protection

Sealed Sender

Deniable Authentication

Cover Traffic

TOFU Key Pinning

Encrypted Channels

No App Store Required

QR Identity Exchange

Encrypted Group Channels

Create & manage

Encryption & verification

Data Portability & Sync

Export & Import

Cloud Settings Sync

Offline Queue

Encryption Comparison

How It Works

Create Your Identity

Exchange QR Codes

Send Encrypted Messages

Call, React, Share

Join Encrypted Channels

Install on iPhone

Open in Safari

Tap Share

Add to Home Screen

Launch

Additional Features

Contact Management

Themes

Push Notifications

Key Rotation

Technical Details

Frequently Asked Questions

Ready to message privately?