Messenger Satelit
Messages only you can read.
Chat, video calls and files, encrypted on your device. The server has no keys: it only carries encrypted data.
Free, with a Satelit account. No phone number.
- 0 keys on the server
- 8 devices in a call
- 0 MDL messages, calls, files
Encryption
The server carries the message. It cannot read it.
The message is encrypted on your phone and opens only on the devices in the chat. On the way, and on our server, it is just a string of bytes.
Your phone
See you Saturday at 10?
Encrypted on the device
Satelit’s server
iSj6d1u1aGEKEJus0MqFIJg071JVy-0gzApy2e3qpmwiSgfr6v4sXUrzdTxo3xpx - Sees
- encrypted bytes, who is in the chat, the day
- Never sees
- the text, photos, calls, keys
Ioana’s phone
See you Saturday at 10?
MLS · X25519 + ML-KEM-768
- MLS RFC 9420, the IETF standard for group messaging
- ML-KEM-768 post-quantum, together with X25519: what is recorded today stays closed
- 2 ms to encrypt one message, measured on 9.11.2026
What it does
Everything you expect from a messenger. Encrypted.
-
Video call · 4 people 12:40
IC RB MP AMEncrypted like the messages
Voice and video calls
One to one or in a group, up to 8 devices, encrypted like the messages. You can share your screen.
-
Family and groups
Admins, polls, reactions, replies. The group’s name and picture are encrypted too.
-
Folders and archive
All, Unread, People, Groups and your own folders, as tabs. What you don’t need today goes to the archive.
-
0:14Voice messages
Hold and talk. Slide up and your hand is free. Listen faster.
-
Emoji and stickers
In its own keyboard, next to the emoji. GIF search is coming soon.
-
Outing
Picnic at Valea Morilor
Saturday, 10:00
YesNo
Outings with the map
Your Satelit friends are your contacts. An outing arrives in the chat as a card: answer on the spot, the route opens in Satelit.
-
@satelit what do we take to a picnic for 6?
Satelit AIWater, bread, cheese, vegetables and a blanket. Shall I make the list in Satelit?Satelit AI in the chat
Write @satelit and the answer arrives there, in view. The assistant has no keys: it gets only what you pick.
-
Phone, tablet, computer
A second device joins with a QR code. Each has its own keys, and you can remove one any time in Settings.
Compared
Next to what you use today
Only what their own public pages say, and what our code shows.
| What you check | Messenger Satelit | Telegram | Viber | Signal | |
|---|---|---|---|---|---|
| End-to-end encryption in every chat, groups too | Yes, MLS | Yes | No: only secret chats, one to one | Yes | Yes |
| An account without a phone number | Yes, with email | No | No | No | No |
| In a browser, without the phone app | Yes | No: the account starts on a phone | Yes | No | No |
| The server keeps messages after delivery | No: at most 30 days, until delivered | No | Yes, in the cloud, outside secret chats | No | No |
What Messenger Satelit adds
- Post-quantum in groups too X25519 + ML-KEM-768 in every chat, not only one to one.
- Signed build, public log The app checks its own files and raises an alarm at a new version missing from the log.
- Part of Satelit Friends, outings with the map and Satelit AI, in the same chat.
Sources for the other apps, read on 10.11.2026: Telegram · WhatsApp · Viber · Signal
Security
Check it yourself. Don’t take our word.
What the server keeps, what it never sees, and how to check the version you run.
- 0 private keys on the server
- 30 days at most an encrypted message waits until every device has it
- 14 days at most for photos and voice, encrypted
- 10 min the app checks its own version
What the server keeps
- Encrypted messages in waiting, until every device has them: at most 30 days.
- Who is in which chat and the day something moved, not the hour.
- The devices’ public keys.
What it never sees
- Text, photos, files and calls.
- The names and pictures of groups.
- Private keys and the recovery code.
- Who in a chat sent a given message.
How to check the version
- The signed manifest Every file of the version, each with its SHA-256 fingerprint, signed with Ed25519.messenger.satelit.md/.well-known/satelit-build.json
- The version log The manifest’s SHA-256 fingerprint must be here. For a version missing from the log, the app raises an alarm.messenger.satelit.md/api/kt/builds
- The log’s head The log’s signed root, for anyone who wants to follow it over time.messenger.satelit.md/.well-known/satelit-kt-head.json
The public signing key (Ed25519)TOhCsXBzw74hRERKF71s8eFPVbckLYbPuXfytPcYsxg
The app runs these checks by itself at start and every 10 minutes. You can see them in Settings, under “Security and transparency”.
What we do not promise
- No outside firm has audited Messenger yet.
- In a browser, the code comes from the server on the first visit. Only installed apps close this gap completely.
- At a first contact, compare the safety number with the person: only then do you know nobody stands in the middle.
- The server knows who is in which chat and roughly when something was sent. Not what.
Download
On any screen, today
Messenger Satelit works in any browser and installs as an app. The store apps come later.
The web app Available
It opens in a browser and installs on your home screen or desktop, with no store.
- WindowsMicrosoft StoreComing soon
- AndroidGoogle PlayComing soon
- iPhone and iPadApp StoreComing soon
- macOSMac App StoreComing soon
- LinuxFlathubComing soon
How to install from your browser
- Chrome or Edge, on a computer Press the install icon in the address bar, then “Install”.
- Chrome, on Android The three-dot menu, “Add to Home screen”, then “Install”.
- Safari, on iPhone and iPad The Share button, then “Add to Home Screen”.
- Safari, on a Mac The File menu, then “Add to Dock”.
Questions
Is it free?
Yes. Messages, calls and files are free with a Satelit account. Only questions to Satelit AI are paid, from the plan of the person who asks.
Do I need a phone number?
No. A Satelit account is made with an email address. Friends find you by your @name or through a friendship link.
Can Satelit read my messages?
No. The server receives only encrypted data and has no keys. What the server can see: who is in which chat, and roughly when. The exceptions: messages you choose to report, and questions for @satelit.
What does Satelit receive readable?
Two things, only when you use them. What you send with @satelit: the question, the message you reply to and the messages you pick in the question window, with names replaced, so Satelit AI can answer. And what you do in the social part: friends, outings, places and Meet. Satelit reads these, as in the Satelit app. It does not read your other messages.
What happens to messages I report?
The messages you choose to report reach the moderators at Satelit, readable. A report is kept 90 days after it is closed, then deleted.
How do I move to a new device?
Open Messenger Satelit on the new device, sign in with your Satelit account and scan the QR code from the old device, or type the recovery code. History is not kept on the server, unless you turn on its encrypted backup in Settings: with it, a new device gets the old messages.
Does it work without the Satelit app?
Yes. Messenger Satelit opens on its own, in a browser, at messenger.satelit.md. You only need a Satelit account. The map and the road of an outing open in the Satelit app.
Has it been audited by an outside firm?
Not yet. Until then we say so here and in the app.