HOW CAN WE
HELP YOU?

No sign-up is needed. On first launch, Hashe automatically creates an anonymous account with a unique identifier in the format XXX-XXX-XXX. No email, no phone number, no name. You can start chatting in under 30 seconds.

It's your identity on Hashe — a unique code in the format 3 digits – 3 digits – 3 letters (e.g. 472-891-KMF). It is not linked to any personal information. It's the only thing your contacts need to add you.

Hashe never imports your address book. To add a contact, two options:

In person: scan your contact's QR code directly from the app.

Remotely: generate a temporary code (valid for 5 minutes) and share it. Your contact enters it in Hashe to send you a request.

This ensures nobody can contact you without your consent.

The exchange happens in 4 steps:

1. You generate a temporary code from your profile.
2. You share it with your contact (through another channel).
3. They enter the code in Hashe and send a contact request.
4. You accept the request — a Signal Protocol encrypted session is then established between you.

Yes, completely. No ads, no subscriptions, no in-app purchases. Hashe is funded by community donations. You can support the project if you wish.

Hashe is available on iOS (App Store) and Android (Google Play). Only one device can be active per account — this is a security-by-design choice.

Select a contact from your list, type your message and hit send. Every message is automatically end-to-end encrypted via the Signal Protocol. No extra steps needed.

Every message sent on Hashe has a limited lifespan. Once read, the timer starts and the message self-destructs after the delay you chose (from 1 minute to 3 days). On the server side, messages are deleted as soon as delivery is confirmed, or after 24 hours maximum.

You can set a default duration in Settings > Ephemeral Messages. You can also customize it per contact directly from the conversation. Durations range from 1 minute to 3 days.

Yes. All media is encrypted before sending and deleted from the server after download by the recipient (24h maximum retention). You can send images, videos, PDFs, documents and any file type.

View once mode lets you send a photo or video that disappears after a single viewing. The recipient cannot view it again, save it or forward it.

Two modes are available:

Hold to record: press and hold the mic button to record, release to send. Slide left to cancel.

Quick tap: a short press opens the full recorder with pause, preview and a progress bar before sending.

All voice messages are end-to-end encrypted, just like text messages.

Yes. Long-press on a message, then choose “Delete for everyone” to remove it from your contact's conversation, or “Delete for me” to remove it only from your device.

Statuses indicate the progress of your message:

Sending → the message is being transmitted.
Sent → the server received the encrypted message.
Delivered → the message was delivered to the recipient's device.
Read → the recipient opened the message.

Read receipts can be disabled in settings.

From a contact's conversation, tap the phone icon for an audio call or the camera icon for a video call. The call is end-to-end encrypted from the moment it connects.

Yes. Calls use end-to-end encryption via Signal Protocol combined with WebRTC. The architecture is peer-to-peer: the server facilitates the connection but cannot see, hear or record your calls.

During a call, you can:

• Mute/unmute your microphone
• Toggle camera on/off
• Switch between front and back camera
• Enable speaker mode
• See the real-time connection quality indicator
• See the call duration timer

Hashe automatically attempts to reconnect with a visible countdown. If reconnection fails after several attempts, the call ends. Each call is logged in the conversation history (duration, status, time).

Hashe uses the Signal Protocol, the industry standard used by Signal and WhatsApp. Each message is encrypted with a unique key using the Double Ratchet algorithm, Curve25519 and AES-256-GCM. Even if a key is compromised, previous messages remain unreadable thanks to Perfect Forward Secrecy. Learn more on our security page.

Sealed Sender encrypts the sender's identity itself. The server doesn't know who is sending a message to whom. Only the recipient can decrypt the sender's identity, eliminating all metadata collection.

Encrypted messages are deleted from the server as soon as delivery is confirmed (or after 24h maximum). Media follows the same rule. The server only stores your anonymous Hashe ID and your public encryption keys — no plaintext data.

No. No IP address logging, no record of who talks to whom, no conversation timestamps, no cookies, no trackers, no third-party analytics. See our privacy policy for full details.

Android: yes, completely blocked via FLAG_SECURE.
iOS: Apple doesn't allow blocking them, but every screenshot is detected and your contact is immediately notified.

Additionally, the app automatically blurs in the multitasking view to protect visible content.

Each encrypted session generates a unique safety number (60 characters). Compare it in person with your contact from Contact Info > Safety Number. If the numbers match, your session has not been intercepted.

Yes, 100% open source. Over 91,000 lines of code, 42 screens, 50+ Edge Functions — everything is publicly auditable on GitHub. Learn more on our Open Source page.

Servers are hosted at OVH and LWS in France, with Cloudflare for DDoS protection and CDN. Push notifications go through Google FCM (Android) and Apple APNs (iOS) but no content is transmitted via these services.

On first launch, you set a 4 to 6 digit PIN that protects access to the app. This PIN is stored only on your device. It cannot be recovered if you forget it — this is a fundamental security choice.

Vashe mode is a second PIN code. When entered, the app opens normally but silently erases all your data in the background (messages, contacts, notes — configurable). It's completely undetectable: the app continues to work as if nothing happened. Set it up in Settings > Security > Duress PIN.

A 24-word sequence (BIP39 format) generated locally on your device. It lets you recover access to your account if you lose your device, with a mandatory 12-hour security delay. It is never saved in the cloud — write it down somewhere safe.

Yes. From Settings > Account > Transfer, generate a temporary code and enter it on the new device. The old device is permanently invalidated. Only one device can be active at a time — it's impossible to have the same account on two devices simultaneously.

In the app: Settings > Account > Delete Account. You can also email [email protected] with your Hashe ID. Deletion is immediate and irreversible. All data is erased: ID, keys, messages, contacts, media. More details at delete my account.

The account is permanently lost. Hashe cannot recover your PIN or your data. If you wrote down your recovery phrase (24 words), you can recover your account. Otherwise, the only option is to reinstall the app and create a new account. This is a security-by-design choice.

In Settings > Appearance, you can:

• Choose between dark theme and light theme
• Change the app icon (13+ variants: discreet, colorful, minimalist)
• Rename the app on your home screen (e.g. “Notes”, “Reminders”)
• Set a custom chat theme per contact (colors, backgrounds)

In Settings > Notifications. 14 sounds are available (Bolt, Cipher, Phantom, Stealth, etc.). You can also set a different sound per contact and hide notification content on the lock screen.

Shake your phone to instantly lock the app and return to the PIN entry screen. Sensitivity is configurable (low, medium, high) in Settings > Security.

In Settings > Language. Hashe supports 67+ languages, including right-to-left languages (Arabic, Hebrew, Persian).

Notes are 100% local: they are never synced, never sent to a server. Each note is individually encrypted on your device. You can write text, checklists, code, quotes and links.

Yes. Each note can be individually locked with a PIN or password. You can also use biometrics (fingerprint, Face ID) to unlock protected notes.

You can create up to 100 notes per account. Each note supports rich text: titles, lists, code blocks, quotes and links.

Yes. You can send a note as read-only in an encrypted conversation. The shared note benefits from the same end-to-end encryption as messages.