SECURITY
Security you can actually verify
OKIAS Messenger is built on the Signal Protocol. Here is precisely how your messages are protected — and, just as importantly, what we can and can't see.
End-to-end encryption
Private one-to-one and group messages are end-to-end encrypted using the Signal Protocol (libsignal). Encryption and decryption happen only on your devices. Keys are generated on-device and never leave it; there is no master key and no key escrow. Our servers route encrypted payloads they cannot read.
- Message content, attachments and voice notes are encrypted before they leave your device.
- Each conversation uses forward-secret session keys, so a compromised key can't unlock past messages.
- Channels (broadcast) are not end-to-end encrypted — see the table below for exactly what that means.
- We never do server-side content search, indexing or logging of message contents.
What OKIAS can and can't see
Encryption protects content, but running a service still requires some metadata. We'd rather be exact than vague.
| Data | Can OKIAS see it? |
|---|---|
| Text, media and voice note contents in private chats | No |
| Contents of private group messages | No |
| Contents of channel (broadcast) posts | Yes — channels are not E2EE |
| Who you message and when (delivery metadata) | Limited — needed to route and deliver |
| Your phone number and account identifiers | Yes — required to run your account |
| Your contacts' address book | No — contact discovery is privacy-preserving |
| Your encryption keys | No — keys never leave your devices |
| KYC documents (business verification only) | Yes, when you submit them — stored under strict access controls |
Metadata is minimised and retained only as long as needed to operate the service. See the Privacy Policy for retention details.
Safety numbers
Every conversation has a unique safety number that both people can compare in person or over another channel. Matching numbers confirm no one is intercepting your chat. If a contact reinstalls or changes device, the safety number changes and OKIAS tells you — so you can re-verify before sharing anything sensitive.
- Compare safety numbers by scanning a QR code or reading the digits aloud.
- Get a clear alert when a contact's safety number changes.
- Verification is per-conversation and never leaves your device.
Linked-device security
You can use OKIAS on the web while your phone stays in your pocket. Each linked device holds its own independent keys — linking never copies your primary key. You can see every linked device, when it was last active, and unlink any of them instantly. Linking requires confirmation on your primary phone.
- Every linked device is independently keyed — no shared master key.
- Review active devices and their last-seen time at any moment.
- Unlink a device in seconds; it immediately loses access.
Two-step verification
Turn on a registration PIN so no one can re-register your number without it. Two-step verification adds a lock that protects your account if your SIM is ever swapped or your number is targeted. Your PIN is never used to decrypt messages — it only guards registration.
- Set a PIN that's required to re-register your number.
- Optional reminders help you remember your PIN.
- Defends against SIM-swap and number takeover attempts.