End-to-End Encrypted

theSHFT

Private. Secure. Hidden.

A fully functional calculator with a hidden encrypted vault for your private messages. Zero-knowledge encryption meets everyday utility.

X3DH + Double Ratchet
Open Source Crypto
Zero Knowledge
Getting Started

How It Works

theSHFT looks and works like an ordinary calculator. Your secrets are hidden in plain sight.

1

Use the Calculator

theSHFT is a fully functional calculator. Use it for everyday math — no one will suspect a thing.

2

Enter Your Secret PIN

Type your personal PIN on the calculator keypad and press equals. Only you know the combination.

3

Access Your Vault

Your encrypted messaging world opens. Send messages and photos with military-grade encryption.

Features

Everything You Need

Powerful privacy features hidden behind a simple calculator interface.

End-to-End Encryption

Every message encrypted with X3DH key exchange and Double Ratchet. Only you and the recipient can read them.

Self-Destructing Messages

Set timers from 5 seconds to 24 hours. Messages auto-delete after being read, leaving zero trace.

No Phone Number

Connect using only usernames. No email, phone number, or personal information required.

Screenshot Protection

Screenshots and screen recording are blocked at the OS level. Your conversations stay private.

Encrypted Media

Share photos with the same encryption as messages. Media self-destructs with your timer settings.

Zero-Knowledge Architecture

Our servers only store encrypted data. We can never read your messages, even if compelled to.

Compare

How We Stack Up

Every messenger has encryption now. Here's what they don't have.

Feature WhatsApp Signal Telegram iMessage theSHFT
End-to-end encrypted ~
No phone number required
Hidden from home screen
Disguised as another app
Blocks screenshots
Duress PIN (panic wipe)
Remote wipe
No metadata stored ~
Security

Uncompromising Security

Built from the ground up to protect your privacy with multiple layers of defense.

Duress PIN

An emergency PIN that instantly and silently wipes all data. Irreversible. For extreme situations.

Panic Wipe

One-tap permanent account deletion. Clears all local data and server records instantly.

Screenshot Protection

Screenshots and screen recording are blocked at the system level. Conversations cannot be captured.

Zero-Knowledge Servers

Our servers only store encrypted blobs. We cannot read your messages, see your contacts, or access your content.

Recovery Phrase

Secure 12-word recovery phrase stored only on your device. The only way to restore your account.

Remote Wipe

Lost your device? Trigger a remote wipe to destroy all data before anyone can access it.

Open Source Encryption

Our entire encryption library is open source. Inspect the code, verify our claims, and see exactly how your messages are protected.

View on GitHub
Under the Hood

Technical Architecture

Built on proven cryptographic primitives. No proprietary algorithms. No security through obscurity.

Key Exchange

X3DH (Extended Triple Diffie-Hellman)

Asynchronous key agreement protocol. Establishes a shared secret between two parties even when one is offline. Uses identity keys, signed pre-keys, and one-time pre-keys to prevent replay attacks.

Curve X25519
Key Size 256-bit
Forward Secrecy Yes

Message Encryption

Double Ratchet Algorithm

Every message encrypted with a unique key derived from a continuously evolving chain. Compromise of a single key cannot decrypt past or future messages. Same protocol used by Signal.

Cipher AES-256-GCM
KDF HKDF-SHA256
Per-message Keys Yes

Data at Rest

AES-256-GCM + Secure Enclave

All local data encrypted with keys derived from your PIN. On iOS, key material is stored in the Secure Enclave and never leaves the device. Database encryption at the field level, not just disk encryption.

Storage Field-level encryption
Key Storage iOS Secure Enclave
Backup Exposure None

How a Message Travels

1

Compose

Message created on your device

2

Encrypt

AES-256-GCM with unique ratchet key

3

Transit

Encrypted blob over TLS 1.3

4

Deliver

Decrypted only on recipient's device

5

Destroy

Keys deleted after read, message self-destructs

What our servers see

  • Message content
  • Contact lists
  • Encryption keys
  • Phone numbers or emails
  • IP address logs
  • Encrypted blobs (unreadable)
  • Anonymous user IDs
  • Encrypted pre-key bundles

What stays on your device

  • Identity key pair
  • Message history (encrypted)
  • Contact list (encrypted)
  • PIN-derived encryption key
  • Recovery phrase (12 words)
  • Session ratchet state

All local data encrypted with AES-256-GCM. Keys stored in iOS Secure Enclave. Never included in iCloud backups.

Privacy

Your Privacy Matters

We don't collect what we don't need. Your data belongs to you.

No Tracking

No IDFA, no cross-app tracking. Fully compliant with App Tracking Transparency.

No Email Required

Create an account with just a username. No personal information needed.

No Location Data

We never ask for or collect your physical location information.

No Contact Access

We never access your phone's address book or contact list.

GDPR CCPA LGPD PIPEDA
Pricing

Choose Your Plan

Start free or unlock the full power of theSHFT with Pro.

Monthly
$4.99
per month
  • Unlimited messages
  • Unlimited photos
  • Unlimited contacts
  • Extended timers (24h)
  • Duress PIN
  • Remote Wipe
Get Started
Lifetime
$79.99
one-time payment
  • Unlimited messages
  • Unlimited photos
  • Unlimited contacts
  • Extended timers (24h)
  • Duress PIN
  • Remote Wipe
  • Pay once, own forever
Get Lifetime

Free vs Pro

Feature Free Pro
Daily Messages 10 Unlimited
Daily Photos 1 Unlimited
Contacts 2 Unlimited
Message Timers Up to 1 minute Up to 24 hours
Duress PIN
Remote Wipe
Panic Wipe
FAQ

Questions & Answers

Everything you need to know about theSHFT.

Enter your secret PIN on the calculator keypad and press the equals button. You set your PIN during account creation.

If you saved your 12-word recovery phrase, you can restore your account and set a new PIN. If you've lost both your PIN and recovery phrase, your data cannot be recovered. This is by design for maximum security.

No. All messages are end-to-end encrypted on your device before transmission. Only you and your recipient have the keys. We cannot read your messages even if we wanted to.

A Duress PIN is an emergency feature. When entered, it silently and instantly wipes all data from the app. This is irreversible and designed for extreme situations where you need to protect your privacy immediately.

Set a timer per conversation from 5 seconds to 24 hours. After a message is read, it automatically deletes when the timer expires. Deleted messages cannot be recovered.

Screenshot blocking is a core security feature. It ensures that private conversations cannot be captured and shared. This feature cannot be disabled.

Tap the plus button and enter your contact's exact username. Both users must add each other before messaging begins.

Go to Settings on your iPhone, tap your Apple ID, then Subscriptions, find theSHFT, and tap Cancel. Pro features remain active until the end of your billing period.

Blog

Privacy Deep Dives

Understanding the threats your current messenger won't tell you about.

Ready for True Privacy?

Download theSHFT and take control of your private communications.

Download on the App Store

Available on iOS · Requires iOS 16.0 or later · Age 17+