Two people. One room. Nothing readable in between.
This passphrase unlocks your private key on every device you use. It is never sent anywhere and cannot be reset — only the admin can wipe the account and start over.
Read this aloud to each other. If the numbers match on both screens, no one is standing in the middle.
Alerts say only that a message arrived and who it was from — never what it said. The server holds ciphertext and could not include the content if it wanted to. Nothing is sent while you have the app open.
Email and text are limited to one every 15 minutes so a long conversation does not become a long stream of notifications. Push has no limit.
Loading a YouTube or Spotify player tells that company someone opened the link. Previews cannot be generated by this server, which never sees your messages.