Skip to main content

Blog

What encryption covers in Ledger Chat today

An honest map of what is encrypted end to end, what is not yet, and how the app tells you.

Messaging apps tend to say they are encrypted and leave it there. The truth is usually more detailed, and the details are what matter when you decide what to send. Here is ours.

Encrypted end to end

Direct messages delivered through XMTP. They are encrypted on your device with MLS, an IETF standard, and only the devices in the conversation can read them. Our servers never see them in readable form.

Not encrypted end to end yet

  • Fallback messages. When XMTP cannot deliver a message, the app can send it through our server instead. Those messages carry a label in the conversation.
  • Communities. Posts and channel messages are stored on our server.
  • Attachments. Files are stored as uploaded.

Why say this out loud

Because you can only make a good decision about what to send if you know where it goes. A label on the message is more useful than a promise on a landing page. Each of these gaps is listed on our audits page, and each will be removed from this list when it is closed.