"..in every nuance the most anonymous thing I have ever seen.."

Secrets is a decentralized messenger that puts you back in control of your digital identity and messages.

Create secure private and group chats between friends, family and colleagues, without big brother tuning in.

With no need to download any software, no need to register an account, it has never been easier to begin chatting.

How It Works

First time using Secrets? Here are 3 simple steps to send your first encrypted messages over Secrets.

1. Create Your Identity

Visit the Secrets app. Select Create Identity. Set an Identity Name and enter a password, then select Create Identity. Change these settings at any time by clicking the name you set in the top right of the screen.

2. Create Chat & Share Your Secret

Create New Chat and provide your “secret” to a participant you wish to add. You can do this by QR code in person or email / copy it. Find the secret for each chat (unique for each) under Edit Chat Settings (cog icon).

3. Add Participants & Start Chatting

Have the other participant provide their secret and add them to your chat by clicking Add Participant and entering their name and secret. Your chat is now active, you can begin exchanging secure messages!

Managing Your Identity

Unlike messenger apps that have come before it, Secrets put you in control of your identity.

There is no registration form. There is no account. You own your identity and it is stored on your device. This means that responsibility for the security of and retaining access to your identity is yours.

Your identity has a dynamic state, updating with messages generated, which means you can only use it on one device at a time, but you can move it between devices. Think of it like a saved game, a snapshot of your progress in Secrets.

Export Your Identity

Your identity is stored on your device in the local storage of your browser.

Click on your identity name on the top right, select Export Identity and save the ‘.s2’ file to your device.

The content is encrypted, but you may like to take extra measures to protect the file.

Import Your Identity

If you visit Secrets from a device which doesn’t have an identity file saved in the browser’s local storage you will be presented with options to create or import an identity.

Choose Import Identity. Find and select the ‘.s2’ file on your device. Enter the password for the identity in order to load it in your browser.

Manage Your Identity

Some browsers will save your identity in the local storage by default, others won’t (e.g. private window, Tor, etc). If you clear the local storage you will lose the identity.

Use a strong password for your identity.

Don’t use your identity on more than one device at a time. Export and then import your identity to move it between devices.

Installing Secrets

While there is no requirement for you to download an app or install any additional software to use Secrets, some may find it useful to install Secrets as a Progressive Web App (PWA).

Progressive Web Apps use modern web capabilities to deliver an app-like user experience. They install an icon for the app to the home screen for ease of access and allow a more fluid experience with push notifications and other enhancements.

To install Secrets as a PWA:

iOS (iPhone and iPad)

  • Start Safari and navigate to the login screen.
  • It is best to wait to be logged in (making sure the web app is fully active).
  • When logged in, click the “Share” button.
  • Then, click on “Add to Home Screen”

Android Smartphones

  • Start Google Chrome and navigate to the login screen.
  • It is best to wait to be logged in (making sure the web app is fully active).
  • You will see a little (+) appear in the address bar, on the right, in Chrome.
  • Click on the (+) to install.
  • As an alternative, if you do not see the (+ install), click on the (…) button, with 3 vertical dots, right on Chrome’s address bar.
    This pops up a menu, look for “Install …”, and click on this install menu.
  • Then, click on “Add to Home Screen”

Windows 10

Microsoft Edge

  • Start Edge and navigate to the login screen.
  • You will see a little (+) appear in the address bar, on the right, in Chrome.
  • Click on the (+) to install.


Google Chrome

  • Start Google Chrome and navigate to the login screen.
  • You will see a little (+) appear in the address bar, on the right, in Edge.
  • Click on the (+) to install.

Private and Group Chat

Secrets offers a chat experience where you can communicate in private (1:1) or group (many:many) chats.

Group chats are created when a participant in an existing private or group chat exchanges their secret with a third (or greater number of) participant(s). This action will result in a special message being posted to the chat, allowing any participants to choose whether they want to trust this new participant.

As each two participants agree to trust one another, they will see each other’s messages in the chat. This permission can be revoked at anytime, which effectively works to block a chat participants messages if you no longer wish to see them.

Further Tips

Secrets is currently an alpha release, this means that we are releasing it for public use, but we may still find issues, bugs or make changes that result in your identity being unusable in a future release. Please note, Secrets has not yet undergone an independent security audit, the software is for use at your own risk.

Secrets has been developed as a Progressive Web Application with browser notifications and a responsive design so that it works well on all devices, including Android and iOS phones, tablets, laptops and desktops. You don’t need to download an app to use Secrets.

No. We have no access to restore or provide access to your identity. Ensure you use a secure password, but choose something you will remember or can safely store. If you lose access to your identity, the only option is to create a new one.

We are hosting Secrets on an onion service which enables it’s use over Tor. This assists to anonymize the traffic between your device and the Secrets app (read more about how an onion service works on the Tor website). You can find the details of the Secrets onion service in our list of endpoints.

Our plan is that IPFS will host the files and content when we develop the media rich SOCIETY2 framework. In the meantime we are using IPFS to serve a decentralized version of the Secrets app, so you have the option to access the Secrets service without relying on our infrastructure (see endpoints). Find out more about IPFS on their website.

IOTA forms the backbone of the Secrets identity, encryption and message transmission service. We are using a data communication protocol called Masked Authenticated Messaging (MAM) to publish your encrypted messages in transactions on IOTA’s Tangle.

Endpoints

Official

Web App:

https://secrets.society2.com

IPFS

IPFS Hash:

QmRM1Zn18ue3B3D3CxDKXWmaCuA56zt3FHaV89NGm6NsGF

IPNS Hash:

k2k4r8pjlvx6aj11lqohod9oerwjrpmna2090ekh591v973jb4844h20

Info:

Please use an IPFS gateway, providing origin isolation!

TOR

Onion Service:

pbnh4epbpmt4cf6ftvy7ziycqhtn6g7uuyvhpfl7jstsszfehcnrcrad.onion

Certificate:

https://files.society2.io/ca.crt

Info:

When using the ONION service via encrypted channels, please add the certificate to your trust store!

Feedback and Questions

A critical part of product development is creating a feedback loop between the provider and those using it.

Because we avoid the use of any trackers to monitor your use of Secrets (which would be a gross invasion of your privacy), we humbly request that if you have any questions or feedback around your experience with Secrets, that you contact us using this form.

It would be great to hear what you think of Secrets and how we could improve the experience.