PlugZ LogoPlugZ
PlugZ SecureChat

Private messaging, built for peace of mind

SecureChat is a source candidate under validation, not a deployed production capability. In this candidate, direct messages are encrypted end to end in one browser before network I/O.

Scope: the properties below describe the current direct, single-browser candidate. Support requests, this contact form, optional contact-request introduction notes, and free-text abuse-report reasons are not end-to-end encrypted and can be read by PlugZ. Do not include sensitive information there.

Why we built SecureChat

People want private, everyday conversations that stay between the people in them. SecureChat is PlugZ's own approach to messaging — like the messaging built into the platforms you already use — designed to keep your content private and to collect as little data as possible. It is free and part of PlugZ; there is nothing to pay.

Our approach

We design for privacy first: SecureChat uses end-to-end encryption on a server-blind architecture, so PlugZ cannot read your messages, and we collect only what is needed to run the service. See our Privacy Policy for details on data handling.

What SecureChat is designed for

End-to-end encryption of message content
A server-blind architecture, so PlugZ cannot read your messages
Modern, well-reviewed encryption protocols
Privacy-first design with minimal data collection
Key agreement with forward secrecy at session setup (X3DH)
Free and built into PlugZ — no separate subscription

Capabilities

End-to-End Encrypted

SecureChat is designed to encrypt message content end to end, with private keys held only in your browser. No message has yet been carried between two authenticated users.

Server-Blind by Design

The architecture is designed so PlugZ's servers handle only encrypted, opaque messages and cannot read your content.

Privacy-First Design

We aim to collect only the data needed to operate the service. See the Privacy Policy for what is collected and why.

Keys Stay On Your Device

Your private keys and session state never leave your browser — PlugZ servers only store ciphertext they cannot open.

Minimal Metadata

We work to limit the metadata associated with your conversations, consistent with our Privacy Policy.

Free & Built In

SecureChat is part of PlugZ and free for members — no separate app, no separate subscription, nothing to pay.

What is next for SecureChat

Candidate

Source validation

Direct-message E2E code is in the candidate and still requires immutable-artifact, deployed-runtime, authenticated two-user E2E, and device-recovery evidence before availability is claimed. Group and cross-device messaging remain roadmap items.

Next

Cross-device and mobile parity

Bringing the same end-to-end encryption to conversations across every PlugZ app and device.

Later

More privacy controls

Adding finer-grained privacy and device-verification controls based on user feedback.

Later

Group conversations

Group chats and richer conversation controls.

Ongoing

Continuous improvement

Ongoing security reviews and improvements as the product matures.

Last updated: July 6, 2026

SecureChat is PlugZ's built-in messaging and is free for members. End-to-end encryption applies to message content; some capabilities may vary by device and region, and features are described in good faith and may change. Because your keys are stored only on your device, encrypted conversations are readable only in the browser where they were created — clearing your browser data or switching devices means past messages cannot be recovered by you or by PlugZ. Cross-device access is on our roadmap. This page is not a contract; your use of PlugZ is governed by our Terms of Service, and data practices are described in our Privacy Policy.