Hush Secret Text

Encrypt text and files locally, then send the HUSH package through the app you already use. No account, tracking, cloud vault, or developer-operated server.

Hush is a local-first encryption utility for private text and files. Encrypt a message with a shared secret, copy the HUSH package, and paste it into the messaging app you already use. The recipient opens it in Hush with the same shared secret and decrypts locally on-device.

Hush is intentionally not a chat network. There is no inbox, account, hosted relay, social feed, cloud message store, analytics service, or tracking SDK.

TEXT ENCRYPTION

Write a message, enter a shared secret, and Hush creates a HUSH2 encrypted text package. The package can be copied, shared, or shown as a QR code when it is small enough.

SEND READINESS

Version 2.1 adds a pro-level Send Readiness panel after encryption. Hush checks whether the package can be decoded, whether the shared secret passes the local strength audit, whether a verification code is available, whether QR share is appropriate, and whether the package length is likely to survive copy/paste.

SECRET SAFETY

Use the built-in Diceware phrase generator, strength meter, pattern audit, and offline verification code. The verification code lets two people confirm they typed the same shared secret without saying the secret itself.

SELF-DESTRUCT OPTIONS

Set an expiration time or mark a message as burn-after-reading. These options are sealed inside the authenticated ciphertext and cannot be changed without breaking decryption.

FILES, DECOYS, LEDGER, AND TEMPLATES

Encrypt photos, PDFs, and documents into .hush files. Create decoy packages with separate real and decoy secrets. Save local ledger entries you choose to keep. Use templates for repeated message drafts.

CRYPTOGRAPHY

Hush uses Apple CryptoKit AES-256-GCM authenticated encryption and PBKDF2-HMAC-SHA256 with 600,000 iterations through Apple CommonCrypto. HUSH1 messages from older versions still decrypt automatically.

PRIVACY

Hush collects no data. No account is required. Message content, secrets, files, templates, ledger entries, and saved secrets remain on the device unless the user deliberately copies or shares them.