Security you can prove, built into every feature.

Every message and file is sealed with AES-256-GCM authenticated encryption, with keys agreed via ECDH on the P-256 curve and derived with HKDF-SHA256. Our deterministic dm_v3 and group_v3 protocols rotate to a fresh epoch every seven days for forward secrecy, so a compromised key never unlocks the past. Our servers store only ciphertext in ScyllaDB, the database behind Blink — they never hold a key that can read your content.

Blink delivers fast, polished one-to-one and group messaging where the server only ever sees ciphertext. Encrypted reactions, read and delivery receipts, starred and pinned messages, and delete-for-everyone give you all the fluency you expect, with none of the exposure.

Spin up encrypted group chats or admin-broadcast channels for announcements that only owners and admins can post to. Share a 24-hour status with your circle. Group history is floor-based — members see messages from when they joined onward, so the past stays private.

Set messages to self-destruct on a timer so sensitive exchanges leave no trail. Combined with ciphertext-only storage, disappearing messages mean there's nothing left to recover once the clock runs out.

Some communications must be permanent. Transaction messages are immortal records and receipts with a time-to-live (TTL) of zero — they never expire and are never removed by automatic cleanup, giving you a durable, encrypted log for the exchanges that matter.

Blink offers voice and video calling today, mediated by a LiveKit SFU (selective forwarding unit) media server. Fully end-to-end encrypted calls — where not even the media server can listen in — are on our roadmap and coming soon.

Store files in a Secure Locker where everything — including the filenames — is end-to-end encrypted. Quotas keep usage in check and automatic trash cleanup permanently clears deleted items, so nothing lingers.

Blink keeps content in an encrypted cloud vault rather than on the handset. Your device holds only derived keys and an encrypted vault, so a lost or seized phone exposes nothing readable. Lose the device, keep the secrets.

Blink ships its own keyboard that disables the system keyboard while you type, shutting out third-party keylogging. It's real and live on iOS, Android, and web — your keystrokes never pass through software you don't control.

Blink blocks screenshots and screen recording, hides content in the app switcher, and blacks out the screen on proximity so prying eyes and prying apps come up empty. What's on your screen stays on your screen.

See and manage all your authorized devices, and push a remote wipe to any of them. The wipe is push-triggered and runs a four-step factory-clean, so a lost or stolen device can be scrubbed before anyone gets in.

If you're forced to unlock Blink, enter your PIN in reverse. Instead of opening, the app triggers a duress wipe — clearing your data while appearing to comply. Coercion meets a dead end.

Lock and guard individual spaces so the most sensitive areas of Blink stay sealed behind an extra barrier. Compartmentalize your communications and keep guarded spaces shut even when the app is open.

A library of 50+ disguise apps — weather, gaming, stocks, and more — will let Blink masquerade as something ordinary on your home screen. To anyone glancing at your phone, there's no messenger to find.

Organize teams into Spaces with role-based access control — superadmin, admin, owner, and member roles define who can do what. You get clear hierarchy, clean permissions, and the right people in the right rooms.

Blink runs on web, iOS, and Android, with the native apps built on React Native. The same end-to-end encryption and device protections follow you everywhere, so your security never depends on which screen you pick up.