Every message you send on Onyx Chat leaves your device scrambled, and it stays scrambled until it reaches the device you sent it to. Nobody in between can read the words inside — not the mobile network, not the café Wi-Fi, not Onyx Chat's own servers. That is end-to-end encryption in one sentence. The genuinely useful part is knowing where that protection starts and where it stops, because most people assume it covers more than it does.

The sealed envelope, not the postcard

On a platform without end-to-end encryption, think of your message as a postcard. It passes through several hands on the way to its destination, and every one of those hands can read it: your network operator, the platform's servers, anyone with access to those servers.

End-to-end encryption turns the postcard into a sealed envelope. Your device locks the message with a key, and only your recipient's device holds the matching half. The servers still carry the envelope from A to B, and they can see the address written on the front, but the contents stay sealed. Anyone intercepting it mid-journey gets a block of scrambled data with nothing readable inside.

The important detail is that the keys are generated on your device, not on a server. Your private key never leaves the phone or laptop it was created on; only the matching public key is shared. There is no master key sitting in a database for someone to steal, hand over, or accidentally publish.

Adding a new device

Each device you sign in on gets its own keys. Linking a new phone or laptop involves your existing devices confirming the new one, so someone who guesses your password cannot quietly add themselves to your conversations. If you spot a device in your list that you do not recognise, remove it and change your password straight away.

What end-to-end encryption protects

On Onyx Chat, encryption covers the things you would expect it to:

  • Text messages, one-to-one and in group chats
  • Photos, videos, voice notes and files you send
  • Voice and video calls
  • The same messages while they sit in storage on the servers, where they are held as ciphertext rather than readable text

That last point matters more than people realise. Encryption is not just for the journey; it also means a copy of your conversation stored on a server is not a readable copy.

What it does not cover

Encryption protects content. It does not protect context, and it does not follow your message after it has been read.

Metadata

The servers still need to know where to deliver a message, which means details such as who you are messaging, when, how often, and which groups you belong to remain visible to the platform. Your IP address is visible to the network you connect through. This is not the same as reading your messages, but patterns can be revealing: a message at three in the morning to a solicitor, a sudden burst of messages to one contact, membership of a group about a health condition. The words stay private; the shape of the conversation does not.

Screenshots, forwarding and the person on the other end

Once your message appears on someone else's screen, encryption has done its job. They can screenshot it, photograph it with a second phone, forward it, or leave their device on a table with the screen still open. None of that is something encryption can prevent. It applies to group chats too: everyone in the group can read what you send, and any one of them can share it onwards.

Messages you report

If you report a message to Onyx Chat, you are choosing to send that specific content to the moderation team so they can review it. That is deliberate, and it is usually exactly what people want when they report abuse — but it does mean reported content leaves the encrypted envelope.

Notification previews and backups

A message preview on a locked screen can be read by whoever is holding the phone. If that matters to you, switch previews off in your device notification settings. Backups deserve a look too: if your chats are backed up to a cloud account, how well protected that copy is depends on the backup settings and who holds the password.

Your profile

Your display name, profile photo, username and any "about" text are not message content. They are stored as ordinary profile data so that other people can find and recognise you. Treat them as public, because in practice they are.

Checking you are talking to the right person

End-to-end encryption stops someone reading a message in transit. It cannot stop someone impersonating a contact if you never check. Onyx Chat gives you a security code — sometimes called a safety number — tied to the keys on both devices. Comparing it takes a minute.

  1. Open the chat and tap the contact's name or photo at the top of the screen.
  2. Choose the encryption or security option.
  3. You will see a code or a QR code.
  4. Compare it with your contact in person, or over a call where you both recognise each other's voice.
  5. If the codes match, nobody is sitting in the middle of the conversation.

Do this once with the handful of people you discuss anything sensitive with. If a code changes unexpectedly, verify it again before sharing anything private. A changed code is not automatically bad news — reinstalling an app or adding a device can cause it — but it is worth a question.

What Onyx Chat can and cannot see

The short version: it cannot read the content of your messages, calls, photos or files. It can see your account information, the metadata needed to deliver messages, and any specific content you choose to report. That is an honest summary of the trade-off, and it is worth reading twice rather than assuming encryption means invisibility.

Practical habits that still matter

Encryption does a lot of the work for you, but a few simple habits close the gaps it cannot reach.

  • Lock your device properly. A long passcode, plus biometrics if your device supports them, is the single biggest improvement you can make.
  • Turn off lock-screen previews. It takes thirty seconds and stops your messages appearing to anyone who picks up your phone.
  • Review your linked devices every few months and remove anything you no longer use.
  • Verify security codes with the people who matter, rather than assuming.
  • Think before forwarding. A screenshot undoes encryption completely, and it is usually the person you trust most who takes one.
  • Use disappearing messages for conversations you would rather not keep a permanent record of.

One last thing worth saying plainly: encryption protects the message, not the fact that you sent one. If the timing or the existence of a conversation is itself sensitive, that is a different problem, and it needs a different answer — usually a conversation held face to face. If you handle information that is regulated in your line of work, such as legal, medical or financial records, check what your professional body expects of you. Encryption is one part of that picture, not the whole of it.

Photo: TheDigitalArtist / Pixabay