Messages that find a way.
Encrypted on your iPhone, then sent by whichever road is open: your Wi-Fi, the internet, or Bluetooth.
On the same Wi-Fi
Your phones find each other and talk directly. The message never leaves the network, so there is nothing for a server to hold.
Across the internet
When both phones can be reached, hoppin sends the message straight from one to the other. The relay never sees it.
With no signal at all
Texts hop between nearby hoppin phones over Bluetooth until one reaches Ana. Every phone on the way carries a sealed envelope it can’t open or address.
When Ana is offline
The relay holds the sealed message until her phone collects it, then deletes it. It keeps nothing for more than seven days, and it can never read it.
Features
Simple to start. Honest all the way.
Keys
Your keys are made on your phone.
The private halves never leave it. They live in the iPhone’s Keychain, and no server, backup or other phone ever gets a copy.
Pinned the first time
hoppin remembers the key it first sees for each person, and checks every message against it.
Paused when it changes
If a contact’s key changes, nothing is sent until you’ve looked.
Checked in person
Scan each other’s code to be sure it’s really them.
Ana Ribeiro
+44 7700 900456
Safety number
Pinned the first time you talked, and compared in person since.
Transparency
Encryption hides what you say.
It doesn’t hide that you said something. So here is exactly what our relay handles when a message passes through it.
The relay sees the outside of the envelope.
Which number a message is for, when it arrived and how big it is. It also sees your network address while you’re connected, and doesn’t keep it.
It never sees what’s inside.
Not a word of any message or photo. And anything sent over your Wi-Fi, directly across the internet or by Bluetooth never reaches it at all.
And then it forgets.
A message is deleted the moment it’s collected, and after seven days at most. There are no ads and no analytics, so there’s nothing worth selling.
Read the privacy policyWaiting on the relay
Sealed- For
- +44 7700 900456
- Arrived
- 14:02
- Size
- 2.1 KB
- From
- Your network address
PJM7mqQ8ToDqW/ShvrnoKhX2vw4JoSRDeh7UjvfPl7N3L4pZJYh6kDoOc1vWkoUZIWyoMbQQ6JaMQtrBkKNClavd68NK0/ynY3ebmFbsZPkwjcSmBVfmGRZBIFfqDK3U54hX52ZxfcqBdoXNgJg3c3fnL4B7Yaxn88/6r8hvj4J8Pq/N8Xx04UBA
Security
Encrypted all the way, and open.
No invented ciphers: hoppin uses Apple’s CryptoKit and algorithms anyone can look up. Every message is sealed and signed, and one that fails a check is dropped, never shown. Nothing is ever sent unencrypted, not even as a fallback.
- Key agreement
- X25519
- Key derivation
- HKDF-SHA256
- Encryption
- AES-256-GCM
- Signatures
- Ed25519
- Private keys
- iOS Keychain
- Server connection
- TLS, pinned
Seal a message
Real AES-256-GCM, in your browserWhat the relay would hold
Sealing…
Without the key, that’s all anyone on the way ever sees. Try opening it, then change a byte and try again.