Private by default. Yours by design.

Blink is a secure messenger built on end-to-end encryption. Your servers only ever store ciphertext — your keys never leave your device.

Built on proven cryptography

AES-256-GCMECDH P-256HKDF-SHA256Zero-knowledge serversForward secrecyOn-device keys

Security you can actually see at work.

Blink's protections aren't buried in settings — they're built into every message, every file, and every device. Here's what's working for you the moment you sign in.

What's new in Blink

Secure Locker
New feature

Secure Locker

An encrypted vault for files — even the filenames are hidden.

Transaction messages
Feature enhancement

Transaction messages

Receipts and records that never expire, sealed with the same E2EE.

Reverse-PIN duress wipe
New feature

Reverse-PIN duress wipe

A second PIN that quietly erases everything under coercion.

Disguise apps
Roadmap

Disguise apps

Open Blink behind a weather, game, or stocks icon. Coming soon.

Fully E2EE voice & video
Roadmap

Fully E2EE voice & video

Calls run over secure media servers today; end-to-end-encrypted calls are coming.

Switzerland + GDPR residency
Roadmap

Switzerland + GDPR residency

Planned. Today Blink runs in the US and India.

Private by default

Private by default — not a setting.

Every message and file is end-to-end encrypted before it leaves your device. Servers store only ciphertext, and your keys stay with you.

Every message and file is sealed with AES-256-GCM before it leaves your device. Servers only ever see ciphertext.

How encryption works

Restore on a new device without exposing a single plaintext message.

Learn about your vault

Privacy reaches every corner of the conversation — not just the message body.

Explore secure messaging
AES-256-GCM
Authenticated encryption on every message and file, with ECDH P-256 key agreement

Total control of your devices

Total control of every device that holds your data.

See every device, lock down the screen, and revoke a lost one for good — with a keyboard built so nothing can watch you type.

A push-triggered, 4-step factory-clean wipe revokes a lost device's keys for good.

Learn about device control

Blink's custom keyboard fully disables the system keyboard on iOS and Android.

Learn about the keyboard

Plus an app-switcher guard and proximity blackout for sensitive moments.

Learn about screen protection

Sources stay protected — end-to-end encryption and a duress wipe mean a seized device gives nothing away.

Illustrative persona, Investigative journalist

Built for when it matters

Built for the moments when it really matters.

Duress defense, the Secure Locker, and immortal transaction records are designed for high-stakes work — when ordinary privacy isn't enough.

The reverse-PIN duress wipe is built for the moments you're under pressure.

Learn about duress defense

Keep high-risk conversations sealed behind an extra layer.

Learn about space lock

Transaction messages stay immortal — encrypted, verifiable, retained.

Learn about transaction messages
4-step
Push-triggered factory-clean wipe that revokes a lost device's keys for good

Secure Spaces

Secure Spaces, with real roles and real isolation.

Multi-tenant Spaces with proper RBAC, space lock and guarding, and the same encryption guarantees on web, iOS, and Android.

Superadmin, admin, owner, and member — isolation and policy for every team.

Learn about Spaces

The same protocol and the same guarantees, wherever you are.

See all features

Disguise apps, fully E2EE calls, and Swiss + GDPR data residency are on the way.

See what's coming

Privileged files live in the Secure Locker — encrypted, off the device, with the keys in our hands alone.

Illustrative persona, Legal team lead

Built for the people who can't afford a leak.

Illustrative personas showing how Blink's architecture holds up under pressure.

How a newsroom protects its sources with Blink.

Play video

A legal team keeps privileged files off the device.

Play video

Field operations rely on instant remote wipe.

Play video

A founder under NDA keeps verifiable, encrypted records.

Play video

Privacy that's engineered, not promised.

0-bit

AES-256-GCM authenticated encryption on every message and file

0 platforms

Web, iOS, and Android — one protocol, one set of guarantees

0-day

Epoch forward secrecy limits what any single key can ever unlock

The cryptography behind every Blink message.

AES-256-GCM

authenticated encryption on every message and file

ECDH P-256

key agreement with HKDF-SHA256 key derivation

Ciphertext-only

servers in ScyllaDB never see your plaintext

4-step

push-triggered remote wipe across web, iOS, and Android

Don't just take our word for it.

Your messages are sealed before they ever reach our servers.

Private by design. Fast by default.