ORBLINK Get ORBLINK

01 / 07

Your key is born in your phone.

It's your account. No number, no password. It never leaves.

A P-256 signing key is generated inside the phone's secure hardware: the Secure Enclave on iPhone, StrongBox or the trusted execution environment on Android. The private half can't be exported, not even to us.

02 / 07

Only your face or finger opens it.

ORBLINK never sees you. It hears "yes".

Every signature needs a fresh biometric or passcode check, handled entirely by the phone's operating system. A stolen phone can't use your key without you.

03 / 07

Add people face to face, or with a link.

Same number on both phones means it's them.

The invitation's secret travels in the part of a link browsers never send to a server. Both phones derive a safety number from both keys. ORBLINK never asks for your contacts.

04 / 07

Locked on your phone. Opened only on theirs.

In between, it's a locked envelope nobody can open.

Every chat is its own encrypted group under Messaging Layer Security, the open standard RFC 9420. If the other phone is off, a relay mailbox holds the locked bytes with no sender and no key. Undelivered envelopes expire after 7 days.

05 / 07

A voice can be faked. The code can't.

Same code on both phones means it's really them.

Calls are encrypted end to end and run directly between phones where the network allows. Both phones compute the same short code from both identity keys, so a cloned voice on another device can't produce it.

06 / 07

Lose your phone, not your life.

People you trust bring you back. Nobody else can.

Choose a recovery phrase, a passphrase-sealed backup, or a secret split into shares so no single holder can use it. There's no master key and no override.

07 / 07

Prove it without showing your ID.

Only the answer travels. Your ID stays home.

The identity check is optional. Our provider checks your document once and your phone keeps the result. After that you prove one fact, and the other side receives a yes or no, not your document.

How ORBLINK works · 1 minute
Scroll to continue

What we can see. And what we can't.

Never visible to us

  • Your messages, photos and voice notes
  • Your calls
  • Your address book
  • Your key
  • Your card or bank details

The little that passes through

  • Sealed envelopes we can't open, until they expire
  • That a connection happened, like any internet service
  • An email or number, only if you ask us to verify it

Every detail is in the privacy policy.

What no app can protect you from. We'd rather tell you.

A screenshot

Anyone you message can still photograph their screen. Share with care.

A phone that's already hacked

If malware controls the phone, it sees what you see. Keep your phone updated.

Losing every recovery route

With no master key, we can't bring it back. Set up recovery on day one.

Don't take our word for it.

Built on an open standardMessages use MLS, the published encryption standard anyone can read.Read the standard Every detail, written downKeys, encryption, calls and recovery, explained step by step.Security and encryption Found a flaw? Tell usWe'll fix it with you and credit you if you'd like.Report a security issue

What works today, and what doesn't yet