Locket Encrypted Messenger — Private Chat That Stays Yours.
The zero-knowledge encrypted messenger and private chat platform with client-side AES-256-GCM E2EE, WebRTC peer-to-peer HD calls, and ephemeral vaporize timers. No account. No phone number. Zero server access to your content.
Zero-knowledge private chat engineered for real privacy.
Every private chat and call is protected on your device before it ever leaves your hands.
End-to-end encrypted private chat
Your private chat is locked on your device before sending. Only the person you're talking to has the key to unlock messages.
Disappearing messages
Messages disappear on a timer you choose. Once time is up, they are permanently erased from both devices.
Direct P2P audio & video
Voice and video calls connect directly between devices without passing through a company media server.
Encrypted chunked transfers
Send photos and files directly from device to device. Nothing is ever uploaded to or stored on a cloud server.
Delivery receipts & typing
See when your message lands, when it is read, and when your friend is typing a reply in real time.
Emergency panic purge
A single tap erases your conversation history, active security keys, and session data on the spot.
How peer-to-peer messaging works.
Direct device-to-device communication with end-to-end encrypted offline delivery.
Create a room
Generate an ephemeral room on your device. A random 6-digit code and QR code are created instantly without requiring an account, phone number, or email.
Share the code or QR
Send the 6-digit code or let your peer scan the QR code in person to initiate a direct peer-to-peer WebRTC connection handshake.
Chat or call directly
Messages, voice calls, and file transfers stream directly between your devices over encrypted WebRTC data channels with zero middleman servers.
Messages disappear
Conversations vaporize automatically on a timer you choose (30 seconds to 24 hours), or vanish instantly with a single tap of the panic button.
Honest technical boundaries.
Real security means being transparent about what our software protects and what it cannot do.
Encrypted store-and-forward
Messages travel directly device-to-device when online. If your peer is offline, messages are held encrypted on the server for up to 7 days and deleted as soon as delivered. The server never holds decryption keys.
Screenshot protection (Android only)
The Android app blocks screen captures and app switcher previews. On web browsers, no website can prevent someone from taking a screenshot of their own screen.
Local-first profiles
Your nickname and avatar exist solely on your own device. We never maintain a central user directory, account list, or address book.
Temporary memory keys
Encryption keys live in your device's temporary memory only while connected. Closing the tab or purging destroys them immediately.
Technical specifications & cryptography
Payloads encrypted client-side using AES-256-GCM via the Web Cryptography API (window.crypto.subtle). Keys remain strictly in volatile memory and never touch a remote server.
Mesh media streams secured with DTLS-SRTP. Connections provide real-time diagnostic telemetry via pc.getStats() for packet loss ratio and ICE candidate types.
Direct P2P streaming over WebRTC data channels with strict category limits: Photos up to 10 MB; Videos up to 500 MB; Audio up to 200 MB; Documents keep original quality for any file up to 1.5 GB. Chunks write straight to device storage with backpressure and screen-awake protection.
Local chat records reside in browser IndexedDB with automated vaporize countdown timers. The Android APK sets window FLAG_SECURE to suppress system screenshot buffers.
Available on Android, iPhone, and Web.
Choose the standalone Android APK, install to your iPhone home screen, or run instantly in any browser.
Locket for Android
Direct signed APK package. Runs without Google Play Services or third-party analytics. If you installed an older version of Locket, uninstall it first.
Download APK (101.8 KB)iPhone (iOS)
Add to Home Screen in 3 short steps:
- 1 Open the web app in Safari
- 2 Tap the Share button
- 3 Tap “Add to Home Screen”
On iPhone, open this link in Safari to add it to your Home Screen.
Web Application
Runs entirely in your web browser with client-side WebRTC and Web Crypto API support.
Open in browserFrequently asked questions.
Verified answers about our architecture, privacy boundaries, and software.
Do I need an account or sign-up to use Locket?
No. Locket requires no accounts, email addresses, or phone numbers. All features are accessible immediately by generating a random 6-digit room code or scanning a QR code.
Where are my messages stored?
Your messages reside on your own device in local storage (IndexedDB). If a recipient is offline, the message is temporarily held on the server as an opaque, end-to-end encrypted envelope (AES-256-GCM) for up to 7 days, and permanently deleted as soon as delivered. The server never holds decryption keys and cannot read your messages.
Is a phone number or email needed?
No. You never need to supply a phone number, email address, or username. Ephemeral rooms are opened using random 6-digit alphanumeric codes or QR codes for direct peer discovery.
How do disappearing messages work?
You can set an automated countdown timer for each room (from 30 seconds up to 24 hours). When the timer expires, messages are permanently erased from local device storage on both sides. An emergency panic purge is also available to wipe all local records and keys with a single tap.
Can others take screenshots of our conversations?
On Android, the standalone app sets window protection (FLAG_SECURE) to block system screenshots, screen recording, and app-switcher previews. On web browsers, website code cannot prevent the host operating system from capturing screen buffers.
What are the file transfer limits?
File transfers travel peer-to-peer directly between devices. Photos are resized (2048 px max, 4096 px HD; EXIF/GPS stripped) up to 10 MB (originals over 50 MB can be sent as a document). Videos can be up to 500 MB. Audio is sent up to 200 MB. Documents keep original quality, sending the exact original bytes for any file type (including photos, videos, and music) up to 1.5 GB. Transfers stream directly to disk with backpressure and screen-awake protection.
Get Locket Encrypted Messenger.
Private chat, peer-to-peer encrypted messaging, and direct HD calls. No account required.