Private by design · local by default
Hide meaning.
Keep control.
Choose the privacy and availability boundary that fits your needs. Local Cwtch messaging minimizes centralized metadata; optional paid Hosted Accounts add managed availability and synchronization with clear privacy tradeoffs.
Local Cwtch
Messaging runs through Cwtch and Tor without a StegMS hosted account, minimizing centralized metadata and third-party exposure.
Hosted Account
A paid managed option for availability, synchronization, and encrypted attachment storage. It involves more centralized metadata and legal-request exposure than Local Cwtch.
Browser tool
Free encoder and decoder only. It does not start Cwtch, Tor, billing, messaging, or a local vault.
Attachment contents remain end-to-end encrypted under both account models. Hosted storage receives encrypted attachment data, not plaintext files.