Montana
Personal chats sealed end-to-end on your device — the server sees only ciphertext. Sign in with email, no phone number.
End-to-end 1:1 chats
Private one-to-one messaging with media, files, and stickers — sealed on your device before it ever leaves.
Blind server
The relay holds only ciphertext — no keys, no seed. A disk image, a court order, or coercion reveal nothing, because nothing is there to take.
Minute-rotating labels
Messages route through an ephemeral queue label that changes deterministically every ~60-second window. From the stored label-and-ciphertext pairs, no map of who talks to whom can be built.
Post-quantum
A PQXDH handshake and double ratchet on ML-KEM-768, with ML-DSA-65 signatures (FIPS 203/204), ChaCha20-Poly1305, and HKDF-SHA-256. Pure post-quantum — closing “harvest now, decrypt later.”
Email login, no phone
Sign in with email, a one-time code, and a Cloud Password. Your keys are stored hidden in the OS keychain, with encrypted cloud-vault recovery.
Your devices, your contacts
Sync across your devices through the sealed vault; contacts and @names; verify a contact’s fingerprint before the first message.