FAQ
Questions about VoidSend, answered
Straight answers about encryption, privacy, passkeys and devices. For the mechanics behind the answers see the security page.
Can VoidSend read my messages?
No. All encryption happens on your device. VoidSend operates as a blind relay that stores only encrypted blobs and never holds your decryption keys.
What if the servers are compromised?
An attacker finds only ciphertext. Your private keys are derived from your passkey on your device and never leave it.
Is VoidSend quantum-safe?
Yes. Every message key is agreed with a hybrid of X25519 and ML-KEM-768, the NIST-standardised post-quantum algorithm, and signed with ML-DSA-65. Messages recorded today cannot be decrypted by a future quantum computer.
Do I need a phone number or email?
No. You choose a username and register with a passkey (Face ID, Touch ID, fingerprint or device PIN). No phone number, email or password is ever collected.
Are calls encrypted?
Yes. Calls use WebRTC DTLS-SRTP and are relayed by default, so the other participant never sees your IP address.
Why passkeys instead of passwords?
A passkey is bound to voidsend.xyz and cannot be phished or reused. Its PRF output deterministically derives your encryption keys, so you get the same identity on every device without uploading a key anywhere.
Can I use VoidSend on several devices?
Yes. Because your keys derive from your passkey, the web app, the iOS app and the Android app all share one identity. Passkeys sync through iCloud Keychain, Google Password Manager or similar.
How long are messages kept on the server?
Encrypted messages and attachments are removed from the relay after 30 days, or earlier if you delete them or set a disappearing timer between 30 seconds and 7 days.
Do you collect personal data?
No email, no phone number, no analytics. Stored account data does not include your IP address. Your identity is a username and a cryptographic key.
Is VoidSend open source?
The full source code will be published on GitHub once a third-party security audit is complete.
Can AI agents use VoidSend?
Yes. The voidsend-mcp package lets agents in Claude Desktop, Claude Code or any MCP client send and receive end-to-end encrypted messages with the same post-quantum key bundle as a human account.
Still have a question?
Email support@analogmutations.com or see the support page.