Security and encryption
How MRIYU protects your messages: end-to-end encryption based on the Signal protocol design in secret chats, and server-side encryption for regular chats.
MRIYU is a Ukrainian social network where you can message with end-to-end encryption. This page explains what is encrypted, how, and what the server can see.
In short
| Secret chat | Regular chat | |
|---|---|---|
| Encryption | end-to-end, on your devices | on the MRIYU server |
| Who can read it | only you and your contact | you, your contact and the server |
| Where messages are stored | only on the two devices | on the server, encrypted |
| Photos, files, voice messages | encrypted on the device | stored encrypted |
| Calls | encrypted between devices | regular calls |
Secret chats: end-to-end encryption
Secret chats follow the design of the Signal protocol — the same approach used by Signal and WhatsApp:
- X3DH — a way to agree on a shared secret even when your contact is offline. Keys are created on your device (in the browser or on your phone) and never leave it.
- Double Ratchet — every message is encrypted with its own key, and keys keep changing. Even if one key ever leaked, earlier and later messages would stay protected.
- The cipher is AES-256-GCM, key exchange uses X25519, and keys are signed with Ed25519.
- The MRIYU server only receives ciphertext and deletes it as soon as the message is delivered. It cannot read your conversation.
- Not only text is encrypted, but also photos, files, voice messages, video messages, reactions and voice and video calls.
To make sure nobody has replaced the keys, open ⋯ → Encryption key in the chat and compare the 60-digit safety number with your contact — in person or over a call. During a secret call, 4 emoji appear on screen: if you both see the same ones, nobody is intercepting the call.
Secret chats are available on the website, in the desktop app and in the iPhone app. See Secret chats to get started.
Regular chats
Regular chats are stored on the server so they are on all your devices at once. Message text, captions, drafts, and photos and videos in chats are stored encrypted with the conversation key. This is server-side encryption — like regular Telegram chats — not end-to-end. For maximum privacy, use a secret chat.
What the server knows
Even in secret chats, the server sees who talks to whom and when — otherwise messages couldn't reach the recipient. It does not know what you write.
Keeping your account safe
- Use a strong password that you don't use on other sites. If you forget it, reset it with Forgot password? on the sign-in page (Sign up and sign in).
- Link your phone number — it makes recovering your page easier.
- Choose who can see your page, posts and photos in Settings (Settings and menu, Your page on the web and in search).