VPX Secure
Encrypted messaging and calls with no account, no phone number and no password. Your identity is a recovery phrase only you hold, so no one, us included, can read your messages or sign in as you. Use it free in your browser, upgrade in crypto, or deploy it across your organisation.
What it
does
Every mainstream secure messenger still begins by learning who you are. Signal wants your phone number, others want an email, all of them want an account, and that account is the thread that ties your private conversations back to your real identity, and the thing we could be compelled to hand over.
VPX Secure removes the thread. There is no account, no phone number, no email and no password. Your identity is a recovery phrase generated on your device, and we store only the matching public key. You sign in by signing a challenge with a key only your phrase can produce, so there is nothing on our side that can read your messages or log in as you.
Use it free in your browser and pay in crypto from your own wallet, so no bank or card processor ever learns you use it (the standalone browser edition is launching soon). It is also available inside the VoicePro app, and can be deployed across an organisation for legal, healthcare and financial teams, where confidentiality is a regulatory obligation. All of it on open, independently audited standards.
The process,
step by step
From a recovery phrase to a sealed conversation, here is why no one in the middle, including us, can read your messages or become you.
A phrase, not an account
You start with a recovery phrase generated on your device. It derives your keys; we only ever see the matching public key. No phone number, no email, no password.
Sign in by signature
To log in, your device signs a one-time challenge with a key only your phrase can produce. We hold no password and no secret that could authenticate as you, plus an authenticator code as a second factor.
Keys that never leave you
Your messages are end-to-end encrypted with the open Double Ratchet protocol, and your calls with DTLS-SRTP. The keys live only on your devices and in your encrypted backup, so our servers carry ciphertext they cannot open.
You are the recovery
Your phrase restores everything from an encrypted backup we hold only as ciphertext. Keep the phrase and you keep your account; lose it and no one, us included, can restore it. No backdoor, by design.
A phrase, not an account
You start with a recovery phrase generated on your device. It derives your keys; we only ever see the matching public key. No phone number, no email, no password.
Sign in by signature
To log in, your device signs a one-time challenge with a key only your phrase can produce. We hold no password and no secret that could authenticate as you, plus an authenticator code as a second factor.
Keys that never leave you
Your messages are end-to-end encrypted with the open Double Ratchet protocol, and your calls with DTLS-SRTP. The keys live only on your devices and in your encrypted backup, so our servers carry ciphertext they cannot open.
You are the recovery
Your phrase restores everything from an encrypted backup we hold only as ciphertext. Keep the phrase and you keep your account; lose it and no one, us included, can restore it. No backdoor, by design.
Built for
performance
Privacy from architecture, not a policy. Each of these is a property of how Secure is built, not a promise we ask you to trust.
Under the
hood
Hold it yourself, or deploy it
Use it in your browser with your own keys, build it into your product over API and SDK, or run it for a whole organisation. Open standards throughout, so nothing depends on trusting a black box.
Built for
your operation
For anyone who wants encrypted communication without handing over an identity to get it, from one person to a whole organisation.
People who want no account
Encrypted messaging and calls with nothing that ties them to your real identity. A phrase, a browser, and no phone number to give up.
Get in touchJournalists & sources
No account record to subpoena, no device we can add, no metadata retained beyond the minimum. Content unreadable to us by construction.
Get in touchLegal, healthcare & finance
Deploy the same encryption across your organisation on dedicated or on-premises infrastructure, where confidentiality is a compliance obligation, not a feature.
Get in touchWhat it
doesn't do
Encryption is a precise promise, not a magic shield. Any product that claims to put you beyond the reach of a determined state actor is not being straight with you.
Content is private. Metadata is being solved.
The server can still see that a message happened and when, though never what was said. We keep zero content and minimise signalling metadata to zero now, and remove the single-operator view as routing decentralises onto the VPX network. We will say so plainly until that ships.
It protects the line, not the phone.
Encryption stops us, your carrier and the network reading you. It cannot protect a device already taken over by spyware or left unlocked, which is true of every encrypted app.
Ready to activate Secure?
Free in your browser, or £12.99 a month in crypto for Premium, launching soon. Also £9.99 in the VoicePro app or included on Business+ Elite, and deployable across your organisation.