What you get
The features, and an honest account of what is and isn’t protected.
Features
Private rooms by code
A random code made of words opens a room. Share it only with people you trust.
No accounts
No phone number, no email, no username to register.
Messages and media
Text, photos, files and voice notes, all encrypted on your device first.
Leave or burn
Go back home to wipe the chat from your device, or burn the room to end it for everyone.
Optional saved rooms
Save a room’s code in an encrypted vault on your own device so you needn’t retype it. It stays off until you use it.
Made to fit your screen
Phone, tablet and desktop layouts, with themes and animations you can switch off.
Privacy, stated plainly
What Varbion protects, and what it doesn’t.
End-to-end encrypted
Hybrid design using X25519 with ML-KEM-768 for keys, and Ed25519 with ML-DSA-65 for signatures, with AES-256-GCM for messages.
A blind relay
The relay only passes encrypted messages along. It never holds the keys needed to read them.
Rooms cannot be guessed
A generated code carries 77 bits of randomness, so finding a room by guessing is not practical.
What we can’t hide: any server you connect to can see technical details such as your IP address, when you connect, and how large messages are. Varbion’s relay runs behind Cloudflare, which can see the same. Message content stays encrypted. If you need to hide your IP address too, use a VPN or Tor.
Another honest limit: if someone gets hold of your room code, they can join the room. Share codes only with people you trust, and burn the room when you’re finished.