End-to-end, always
Messages are encrypted on your device and only decrypted on your recipient's. The server relays ciphertext it can't read, then deletes it about five minutes after delivery. There is no plaintext copy to leak, subpoena, or sell.
Pure post-quantum messaging
The math is the wall.
The math is the wall.
Messages live inside it.
Qwing encrypts every message, call and file with lattice-based cryptography built to resist quantum computers — no classical fallback, no phone number, no metadata for the server to sell. The structure that protects you is the same structure that will still hold when the machines arrive.
Don't trust. Verify.
This is everything the server ever holds.
Other apps ask you to believe a privacy policy. Qwing lets you read the bytes. Type any message on the right and watch it become the exact sealed-sender envelope our relay stores — opaque ciphertext, a destination it can't link to you, and a clock counting down to deletion.
- →No plaintext. The body is XChaCha20-Poly1305 ciphertext, decryptable only on your recipient's device.
- →No sender. Sealed-sender means even our relay can't tell who sent it.
- →No archive. The envelope is wiped roughly five minutes after delivery — nothing to subpoena.
on your device — readable plaintext, never leaves encrypted
Meet me at the dead drop at 9.
on our server — this is everything we hold
Sealed sender: even we can't tell who sent it. Auto-deleted ~5 min after delivery.
Privacy by construction
Not a promise to behave. A system that can't misbehave.
Most apps ask you to trust their policy. Qwing removes the data they'd have to be trusted with. Four design choices do the work — here's what each one actually means for you.
Sealed sender
Even the relay doesn't learn who's talking to whom. The "from" is sealed inside the encrypted envelope, so the server moves messages without building a social graph. The most valuable surveillance signal — who, and how often — never exists.
P2P-first calls & files
Voice, video and file transfers go directly between devices. The server is signaling only — it helps two phones find each other, then steps out. Relaying is a last resort, never the default, so your media doesn't pile up on someone else's hardware.
No phone number, no email
Sign up with nothing tied to your real-world identity. No SIM, no inbox, no address book upload. You share a contact with a deep link — qwing.app/add/<id> — and that's the only thread that connects you.
Everything, encrypted the same way
A full messenger — held to a cryptographer's standard.
The hard part isn't adding features. It's making each one earn the same guarantees as the last. Every surface below runs on the same post-quantum core.
1:1 & group chats
Private threads and groups with the same sealed, end-to-end protection. Plus disappearing messages and view-once media for the things that shouldn't outlive the moment.
disappearing · view-oncePost-quantum calls
Voice and video, encrypted end-to-end and routed peer-to-peer. Compare a short SAS safety phrase out loud to confirm no one is in the middle — verification you can actually hear.
voice · video · SASEncrypted Vault
A private, on-device store for the files and notes you don't want anywhere near a cloud. Encrypted at rest, locked to your device, opened only by you.
on-device · at-restSelf-custodial wallet
A multi-chain wallet that lives in the same app and the same trust model. Your keys stay on your device — Qwing never holds them, and never can.
multi-chain · self-custodialDevice migration
Move to a new phone by scanning an animated QR code — keys travel directly between your devices, never through a server. A recovery phrase is your backstop if a device is lost.
animated-QR · recovery phraseForward secrecy, by default
The Q-Ratchet rotates keys with every message, so a key stolen today can't unlock yesterday — or tomorrow. Forward secrecy and post-compromise security, on for everyone, with no settings to find.
Q-Ratchet · FS + PCS
Why post-quantum, now
They're recording today's secrets to crack them later.
It's called harvest-now, decrypt-later: capture encrypted traffic today, store it, and break it once a quantum computer can. Anything protected only by classical math — RSA, elliptic curves — is on borrowed time. Qwing is built on lattice problems chosen precisely because that machine doesn't help an attacker solve them. Encrypt a message in Qwing today, and it's meant to stay private long after the quantum era begins.
NOWAdversaries quietly archive encrypted traffic — betting on future decryption.
NOWQwing already ships ML-KEM-1024 + ML-DSA-87 — NIST-standardized lattice cryptography, no classical fallback to weaken it.
LATERA large quantum computer breaks RSA and elliptic curves. Harvested archives unlock — except the lattice ones.
STILLYour Qwing conversations stay sealed. The wall was always quantum-shaped.
Free · iOS & Android
Start a conversation no one else can read.
No phone number. No email. Install Qwing, share your link, and you're talking inside the lattice in under a minute.
Already have it? Add a contact with qwing.app/add/<id>