Security at a glance
How Minyma protects your messages.
The short, plain-language version. No background in cryptography required, just what Minyma protects, how it works, and a clear account of exactly what a relay can and can't see.
Minyma is built so that your messages, attachments, and call setup are readable only by the people in the conversation. The keys that unlock your content stay on your devices. Minymata, the company that runs the service, is designed not to be able to read what you send.
The basics
What stays true every time you send a message.
Hybrid post-quantum, in plain terms
Two locks instead of one.
Today's encryption is strong. But a future quantum computer could one day threaten the classical math behind it, and an attacker could record encrypted traffic now to try to break it later. This is sometimes called "harvest now, decrypt later."
Minyma's answer is to use two independent locks on every layer: a proven classical algorithm and a modern post-quantum one. Your content gets layered protection today while being positioned for the quantum era.
What stays in your control
Security you can see and act on.
Verify
Confirm you're talking to the right person
Minyma pins a contact's identity the first time you connect and shows a safety number you can compare. You can scan a contact's QR code in person to confirm their identity, including their post-quantum identity key. If a contact's keys ever change, Minyma surfaces it for review.
Protect
Locks, duress, and trusted devices
App lock keeps the app closed behind your device authentication. Duress mode gives you an alternate path under pressure. Linked devices and trust changes stay visible, and you can reset secure sessions or delete your account when you choose to.
The boundaries
What encryption does and doesn't cover.
Strong encryption protects the contents of your conversations. It does not make a messaging service invisible. We'd rather be clear about that than imply otherwise.
- Message and attachment contents are designed to stay unreadable to the service.
- A relay still processes routing and delivery metadata, the operational information needed to actually deliver messages and place calls. Minyma works to minimize it, not pretend it doesn't exist.
- Attachments are stored only as ciphertext, just long enough for offline recipients and linked devices to receive them, then deleted. Minyma is built to keep what you choose to keep, and archive nothing on your behalf.
- Anything a recipient has already received and saved to their own device is, naturally, in their hands.
- The infrastructure that stores and routes your encrypted data is based in the European Union, under the EU's data-protection framework (GDPR).
- Minyma is under continuous internal security testing and is queued for independent third-party cryptographic review; we describe it as strongly encrypted by design, and publish review milestones as they're completed.
Go deeper
The details are public.
Minyma's security isn't a marketing word. The design is written down. Read the technical overview for the architecture, or the white paper for the protocol detail.
Verification
Trust & verification
How to confirm a contact's identity, including their post-quantum key, with a QR scan.
Transparency
What we handle
A plain account of the data the service does and doesn't process, and our retention posture.