Panthera shield

Secure Encrypted
Messaging Service

v1.0 · Shipped

End-to-end encrypted. Zero servers of trust. No recovery — by design. Nothing to seize, nothing to leak, nothing to hand over.

Ciphers
XChaCha20-Poly1305
Handshake
X3DH · Ed25519 / X25519
Ratchet
Double Ratchet
KDF
BLAKE2b
Storage
Sealed IndexedDB
Server sees
0 bytes of plaintext
Vision

The Panthera Vision

Every mainstream messenger runs on someone else's servers, someone else's identity system, and someone else's idea of what "private" means. Panthera was built on a single conviction: your conversations belong to no one but the people in them.

No phone number. No recovery. No plaintext ever leaves your device. The server stores ciphertext it cannot read, keys it cannot use, and metadata it cannot correlate. If it is seized, dumped, or subpoenaed — there is nothing to hand over.

  • End-to-end encrypted
    Signal-grade Double Ratchet with X3DH handshake.
  • Zero servers of trust
    Backend holds only opaque ciphertext blobs.
  • No recovery
    Lose the key, lose the data — by design, not accident.
Features

What Panthera does

End-to-end messaging

Every text, image, voice note and file sealed before it leaves the device.

Encrypted attachments

One-time symmetric keys per file; server holds ciphertext only.

Fingerprint verification

Compare Ed25519 fingerprints or scan a QR to authenticate the peer.

Burn after reading

Recipient wipes the row on decrypt — one view, then gone.

Auto-lock

Idle lock 1 min → 1 hour. Works in browser, PWA, home-screen app.

PWA installable

Runs offline-capable on iOS, Android and desktop. No app-store gatekeeper.

Sealed local cache

IndexedDB blobs sealed with in-memory KEK — a stolen dump reveals ciphertext.

Zero registration friction

No phone, no email verification, no username claims. Password only.

Protocol

Double Ratchet + X3DH

State-of-the-art cryptography, stronger than anything the mainstream ships. Two ratchets working together give per-message keys, forward secrecy and self-healing recovery from key compromise — every message a fresh vault.

  1. 01
    X3DH handshake
    Ed25519 identity + signed prekey + optional one-time prekey → 32-byte shared secret.
  2. 02
    Root key seed
    KDF(shared, DH) → root key + first chain key.
  3. 03
    Symmetric ratchet
    Chain key → message key, then chain key → next chain key.
  4. 04
    DH ratchet flip
    New X25519 pair on direction change. Root key rotates.
  5. 05
    Skipped keys
    Out-of-order messages cached (MAX_SKIP=1000) then discarded.
"A messenger protocol that treats its own operators as untrusted — and proves it with math, not marketing."