Security

Privacy you don't have to think about.

Encryption in Hivox is always on, for everyone. Here is how it works — without the jargon.

End-to-end encryption

When you send a message, your phone encrypts it before it leaves the device. Only your recipient's devices can decrypt it. Our server only sees scrambled data — it delivers it, but can't read it.

Keys stay on your devices

The keys to your conversations are created on your phone or computer and kept in the device's secure storage. They are never sent to the server in readable form. That's why we can't hand over your messages — and nobody can get them from us.

Hivox Web encrypts in your browser

The web version is no exception. Keys are created and kept in your browser, and messages are encrypted and decrypted right there. The server receives the same ciphertext as from the phone app.

New devices only with your approval

When you sign in on another device, you approve it from one you already use. Both devices show a 6-digit verification code — if it matches, you confirm the link. This makes sure your keys only travel to you, not to a stranger.

No passwords on the web — just a QR code

  1. Open hivox.cz/app on your computer. A QR code appears.
  2. In the Hivox app on your phone, choose to link a device and scan the code.
  3. Compare the 6-digit code and confirm the login on your phone.

You never type a password on the web, so no fake page can phish it. Only a phone already approved for your account can log you in. The browser session is protected by a secure cookie that page scripts can't read.

Key backup and recovery code

If you lose your phone, a key backup helps. It is encrypted with your recovery code, which only you know. Without it nobody can open the backup — not even us. Keep the code somewhere safe.

What the server sees — and what it doesn't

The server can't seeThe server needs, to deliver
The content of messages, photos, files and voice notesYour account (email, name) and your list of devices
Your keys and recovery codeWho should receive an encrypted message, and when

More protection

For details on what data we process and why, see the privacy policy.