End-to-end encrypted · self-custodial

Private messages.
Native bitcoin.

A messenger sealed on your phone before anything leaves it, with a self-custodial Lightning wallet built in. No phone number. No account. One recovery phrase.

MLS / RFC 9420 encryption · content-blind server · Data Not Collected

The honest ledger

What every observer can, and cannot, learn

Privacy that is architecture, not a policy. Messages, photos, and voice notes are sealed on your device using MLS, the IETF standard for end-to-end encryption. Here is exactly what our server can read.

The server cannot see

  • Your messages, photos, or voice notes
  • Who your contacts are, or their names
  • The amounts you send or receive
  • Your social graph or group membership

The little it does route

  • Padded, uniform-size sealed envelopes
  • Random routing handles that auto-expire
  • A content-free wake for notifications
  • Nothing that links a handle to a person

Built for real conversations, sealed by default

Messages that live on your phone, not ours

Text, groups, reactions, read receipts, disappearing messages, and search. Every one sealed before it leaves the device.

Lightning wallet

Self-custodial, from the same phrase.

Photos & video

Encrypted media, inline previews.

Voice notes

Record locally, send sealed.

Safety numbers

Verify a contact in person.

Encrypted backups

Sealed under your recovery phrase and synced to your own private iCloud. We hold ciphertext, never keys.

Groups, done right

MLS group encryption with forward secrecy. Add and remove members without a central operator learning who is in the room.

Money, built in

Send money the way you send a message

A self-custodial Lightning wallet lives beside your chats, created from the same 12-word phrase. No KYC, no custodian. Pay the people you talk to as easily as texting them.

  • Your keys, your coins. They never leave the device.
  • Pay by handle. Send to tx@hisignet.com, no invoice dance.
  • Shown in your currency. The server never touches an amount.

No sign-up, because there is nothing to sign up for

01

Create an identity

Tap once. A 12-word recovery phrase is generated on your device. That is your whole account.

02

Message and pay

Invite a contact, start talking, send sats in the same thread. All of it end-to-end encrypted.

03

Own your keys

The same phrase restores your identity, contacts, and wallet on any new phone. Nothing to leak.

Do not trust us. Run the server yourself.

SIGNET works with any self-hosted delivery server, set up in under thirty minutes with one page of instructions. Your family, your infrastructure. The server is content-blind either way.

$ docker compose up -d signet-ds

Standards, not invented crypto

Nothing proprietary. Everything here is a public, reviewed standard, doing exactly what it should.

Group encryptionMLS · RFC 9420
Key agreementX25519
Message cipherChaCha20-Poly1305
SignaturesEd25519
Media at restXChaCha20-Poly1305
Local databaseSQLCipher

Get on the early TestFlight

The private beta is open. Install it on your iPhone through Apple TestFlight.