Home

End-to-end encryption

Your messages are read only by the people you sent them to.

In MangoConnect the contents of chats, media, and attachments are encrypted on the sender's device. The server delivers messages but cannot read their text or open attachments.

End-to-end encryption applies to direct chats, private groups, and calls. Public chats and channels run on a different model and do not use E2EE.

Encrypted before send Keys only with participants Server cannot see content
Direct chats Text and attachments visible only to the people in the conversation
Groups Messages stay closed inside the group conversation
Calls Media stream is protected and is not exposed to the server

How it works

Encryption happens before the message leaves your device.

That is the key boundary: transport, servers, and infrastructure handle delivery, but they never see the original message text.

01

Message is encrypted locally

Text, media, and attachment content turn into ciphertext before they touch the network.

02

Server only sees encrypted data

It forwards messages, holds the queue, and runs sync, but cannot decrypt anything without keys.

03

Recipient opens it on their side

Decryption only happens on the devices of chat participants a message was meant for.

What you see

Ordinary messaging without extra steps.

  • Direct and group chats behave like a regular messenger.
  • Photos, videos, voice messages, and attachments arrive as you'd expect.
  • Encryption is built into how messages are sent and read, not pushed off into a separate mode.

What the server doesn't see

Conversation content stays out of the infrastructure.

  • Message text and replies.
  • Photos, videos, voice messages, and other media.
  • Conversation context inside the chat.
  • Content of protected attachments and synced messages.

Chats, groups, calls

The same protection idea across the main scenarios.

This boundary covers direct chats, private groups, and calls. Public chats and channels are not part of this contour and do not use end-to-end encryption.

Direct chats

Each device works with its own keys, so a message can be opened only on the devices of the people it was encrypted for.

Group conversations

Inside a group a separate protection mechanism delivers messages to all members without exposing them to the server.

Voice and video

Call content is protected between participants. The server helps establish the connection but does not become an observer of the conversation.

Important to know

End-to-end encryption does not erase service metadata.

The service still needs technical data to work: who is in a chat, delivery status, push tokens, and security events. None of these reveal the content of your messages.