Where secrets stay between you and the recipient
End-to-end encrypted communication with automatic message expiry
Whisper is a completely private and secure messaging app designed for those who appreciate total privacy and security. Our core concept is simple yet powerful: to replicate online the action of whispering a secret in someone's ear.
Think about it—when you whisper a secret to someone in real life, there is no trace of it afterward. The only two people who know what was said are you and the person you whispered to. We consider this type of ephemeral, private communication an essential human right, yet it's rarely the default anywhere online.
Conventional messages are routinely saved by messaging providers, intercepted by third parties, or handed over to whoever asks. With Whisper there is nothing readable to hand over: messages are ciphertext, usernames are one-way hashes, and everything expires. We're bringing the true experience of private communication online.
When you create an account, your browser generates a public and private encryption key pair on your device. The private key is encrypted with a key derived from your password before it is saved in our database, and it can only be decrypted with your password—which we never store, only a one-way hash of it.
We go one step further with your identity: not even Whisper's administrators can read your username or your messages. Usernames are stored only as a one-way cryptographic hash, and display names travel inside the end-to-end encrypted messages themselves. Someone with full access to our database and servers would see only hashes and ciphertext.
Our decision to build Whisper as a website instead of a native app ensures that nothing lives permanently on your device. If your phone is ever compromised or confiscated, no one can view your messages without knowing both your username and password.
Just like a whispered secret vanishes into the air, messages in Whisper have built-in expiration:
Whisper is currently in Beta.
Whisper is free to try — every account can send up to 25 messages a month at no cost. Receiving and reading messages are always free, so you can always reply to someone who writes to you.
For unlimited messaging, buy a Whisper Unlimited pass at $5/month. Pay once for the length you want — there is no subscription and no saved card:
When a pass runs out you simply buy another when you're ready.
All messages are encrypted on your device and can only be decrypted by the intended recipient.
Messages are encrypted twice so both sender and recipient can view their conversations in plain text while maintaining security.
Read messages are automatically deleted after a customizable time period (TTL - Time To Live).
Usernames are stored only as a one-way hash and messages only as ciphertext. Even Whisper's administrators cannot read who you are or what you said.
We enforce secure password policies and account protection mechanisms.
To prevent brute force attacks, accounts are temporarily locked after multiple failed login attempts.
We created Whisper out of a commitment to privacy and security in digital communications. In today's world where data breaches are common and privacy is increasingly compromised, we wanted to offer a solution that puts users' privacy first.
Our approach is fundamentally different from most messaging platforms, which often have access to your messages or metadata. With Whisper, we designed a system where even we can't read your messages - only you and your recipient can.
Whisper is designed as a web app rather than a native mobile application. This approach enhances your privacy by: