End-to-end encrypted, by default
Your personal messages on XWave can only be read on your device and the devices you're talking to. Not even XWave can read them. Here's how we approach security, the controls you have, and how to report an issue.
How your messages are protected
Encryption on XWave isn't a mode you enable. It's how the product works.
End-to-end encryption, on by default
Every personal conversation on XWave, whether one-to-one or a group, is end-to-end encrypted by default, the same always-on protection model used by Signal, WhatsApp, and iMessage. You don't switch it on, and you can't accidentally switch it off. Messages are encrypted on your device and can only be decrypted by the devices receiving them. Our servers route your messages; they cannot read them.
Built on the open standard
XWave's encryption is built on the open standard for secure messaging published by the IETF, the body behind the core protocols of the internet. We chose a published, peer-reviewed standard over inventing our own cryptography, so our security can be examined, not just trusted. A full technical deep-dive is coming soon.
Ready for the quantum era
XWave supports post-quantum key exchange, designed to protect today's conversations against “harvest now, decrypt later” attacks by future quantum computers. Only a couple of the world's biggest messengers ship this kind of protection today.
Encrypted everywhere else, too
Voice and video calls are encrypted. Your local message history is stored in an encrypted database on your phone, and everything moving between your device and our infrastructure is additionally protected with TLS.
How we protect you
A layered approach to keeping XWave and your data safe.
No key, no access
Encryption keys live on your devices, not our servers. We couldn't hand over your conversations even if asked, because we don't have them.
Minimal data
The safest data is the data we never collect. We gather as little as possible and hold it for as short a time as we can.
You stay in control
Your data belongs to you. You can export it, delete it, or take it elsewhere at any time.
End-to-end encrypted
Personal messages, both one-to-one and groups, are encrypted on your device and can only be read by the people you send them to. Calls are encrypted too.
Continuously tested
We test, review, and harden XWave on an ongoing basis, and work with the security community to stay ahead of threats.
Responsible disclosure
We welcome reports from security researchers and aim to respond quickly and act responsibly.
Staying safe on XWave
A few simple habits go a long way toward keeping your account and conversations secure.
Block and report
You can block anyone at any time and report accounts or content that break our rules.
Secure your device
Keep your device locked, up to date, and protected with a passcode or biometrics, it's your first line of defense.
Stay alert to scams
Be cautious with unexpected requests for money or personal details, even from people you know.
Found a security issue?
We take security reports seriously and appreciate the work of the research community. If you believe you've found a vulnerability, please disclose it responsibly and give us a chance to fix it before going public.