Security

How MyGalaxy protects your messages

What is locked end to end, what is not, and what we are still building. No marketing words, just the facts.

Last updated: 1 November 2026

End-to-end encrypted, always

These are locked on your device before they leave it. Only the people in the chat can open them. A small closed lock 🔒 shows it.

Direct chats: text, edits, captions, photos, videos, files, voice notes, contact cards, places, polls, events, stickers and reactions.
Groups, up to 2,000 members. A new group key is made every time someone joins or leaves.
Voice and video calls, one-to-one and in groups.
Secret chats: kept on one device of each person only, with optional self-destruct timers.
Saved Messages (your notes to yourself).

Not end-to-end encrypted (open lock 🔓)

We show these honestly with an open lock:

Public channels. They are broadcasts that anyone can read, by design.
Stories (status). Not yet end-to-end encrypted.
Calls while a guest link is active (24 hours), because a guest has no MyGalaxy key.
Link previews, only when you tap “Show preview”.
The routing details the service needs to deliver a message: who talks to whom, when, and file sizes. Never the content.

How your keys work

When you sign up, your device makes your keys from a 12-word recovery phrase. It is shown once and never again.
Messages are locked with AES-256-GCM. Keys are agreed with X25519 and your identity is signed with Ed25519, all widely used open standards.
A copy of your key is kept locked with your PIN, so you can sign in on a new device with your username and PIN. Wrong PINs are limited and lock the backup for longer each time.
You can compare a 12-group security code with a contact to check that you are talking to the right person, and MyGalaxy warns you if a contact's key changes.

Your data

Your data is secured in encrypted mode. MyGalaxy shows no ads, does not track you across other apps and never sells your data. Alerts on your phone show only the sender's name, never the message text.

What we are still building

Forward secrecy: a new key for every message (the “double ratchet” used by Signal and WhatsApp). Today MyGalaxy keys stay the same for the life of a chat, except group keys, which change on every member change.
End-to-end encryption for stories.
An independent outside security review of the design and the code.

Compare MyGalaxy

Try MyGalaxy free

Free download, no ads, no phone number needed. Get it on Google Play or open it in your browser. The iPhone app is coming to the App Store; until then use MyGalaxy in Safari.