Hush Secret Text

HUSHF2 authenticates file contents and metadata. Saved secrets now load only after device authentication, with app-switcher privacy shielding.

Hush is a local-first encryption utility for private text and files. Encrypt a message with a shared secret, copy the HUSH package, and paste it into the messaging app you already use. The recipient opens it in Hush with the same shared secret and decrypts locally on-device.

Hush is intentionally not a chat network. There is no inbox, account, hosted relay, social feed, cloud message store, analytics service, or tracking SDK.

TEXT ENCRYPTION

Write a message, enter a shared secret, and Hush creates a HUSH2 encrypted text package. The package can be copied, shared, or shown as a QR code when it is small enough.

SEND READINESS

The Send Readiness panel checks whether the package can be decoded, whether the shared secret passes the local pattern audit, whether a comparison code is available, whether QR share is appropriate, and whether the package length is likely to survive copy/paste.

SECRET SAFETY

Use the built-in Diceware phrase generator, pattern audit, and offline comparison code. Compare the code in person or through an authenticated channel. Do not publish it because it can help test guesses against a weak secret.

RECIPIENT INSTRUCTIONS

Set a local timed-access instruction or ask the recipient not to retain the result. Compatible Hush versions honor these encrypted instructions, but they cannot erase screenshots, copies, exports, or control a device clock.

FILES, DECOYS, LEDGER, AND TEMPLATES

Encrypt photos, PDFs, and documents into .hush files. New HUSHF2 files authenticate the original filename and file type along with the contents, while HUSHF1 files remain readable. Create visibly marked dual-message packages with separate secrets. Save local ledger entries you choose to keep. Use templates for repeated message drafts.

CRYPTOGRAPHY

Hush uses Apple CryptoKit AES-256-GCM authenticated encryption and PBKDF2-HMAC-SHA256 with 600,000 iterations through Apple CommonCrypto. HUSH1 messages from older versions still decrypt automatically.

PRIVACY

Hush collects no data. No account is required. Message content, secrets, files, templates, ledger entries, and saved secrets remain on the device unless the user deliberately copies or shares them.