Legba

Legba is a messenger for people who want their conversations to stay between them.

NO ACCOUNT
There is nothing to sign up for. No phone number, no email, no password. Your identity is created on your phone and never leaves it.

PAIR IN PERSON
You add a contact by being in the same room: show a code, read five digits aloud to each other, then each of you says a phrase. Both phrases become the keys of the conversation. Nobody can be added to your contacts without that moment.

SEALED MESSAGES
Every message is encrypted on your phone before it leaves, and arrives sealed on your contact's phone. It stays sealed, shown as ciphertext, until they swipe to read it. Two minutes later it seals again. The server only ever sees coded text.

YOUR KEYS, YOUR PHONE
Keys are kept in the phone's secure hardware and unlocked with your PIN or fingerprint. Legba never has a copy.

BACKUP YOU CONTROL
An encrypted backup file, protected by six words, lets you move to a new phone. Lose the phone and the words, and the conversations are gone — by design.

ERASE, BOTH SIDES
Erase a contact and they are gone from both phones: your copy is deleted on the spot, and the moment the erase order reaches your contact's phone, the conversation and the contact disappear there too. No notification, no trace, nothing to recover. Clean.

WHAT LEGBA DOES NOT DO
No contact list upload. No analytics. No ads. No accounts to hack.

Legba keeps the gate at the crossroads. What you say there is yours.