How do I create an account?

Go to the register page, enter an email address and a password. We'll send you a verification email — click the link and you're in. No phone number, no real name required. A temporary or alias email works fine.

Does Ephemeral work on mobile?

Yes. Ephemeral is a web app — it runs in any browser, including on your phone. Open it in your mobile browser and optionally add it to your home screen for a native-app feel (Safari → Share → Add to Home Screen on iOS; Chrome → Install app on Android). No app store needed.

Do I need to install anything?

No. Ephemeral runs in the browser. On iOS, push notifications only work when the app is installed to your Home Screen. On Android and desktop it works without any extra steps.

How does a message disappear?

Once the recipient opens the message, a 60-second countdown starts. When it reaches zero the message fades out on both screens — permanently. There is no way to extend or disable this timer. That's not a bug; it's the whole point.

What happens if the other person isn't online when I send?

The message is held securely until they open the app, for up to 48 hours. Once they open the conversation the 60-second timer starts. If 48 hours pass without delivery, the message is deleted and you'll see a notice that it was never delivered.

Can I use Ephemeral on more than one device or browser?

You can — but each browser and device is treated as a separate identity, so there are a few things to know. Your encryption key is generated on the device and never leaves it, which means it can't be synced. As a result:

• — Messages are not synced across devices. A message you read on your laptop won't also appear on your phone.
• — The first time you open Ephemeral in a new browser or device, a fresh key is created. From that moment, that becomes the device that can receive your messages.
• — Any message sent to you while you were offline can only be read on the device that was active when it was sent. If you next come online on a different device, that message can no longer be decrypted — it's dropped, you'll see a "new session" notice, and the sender is told it wasn't delivered. Just ask them to send it again.
• — Clearing your browser data has the same effect as switching devices — it discards the key and starts a new session. Some browsers (notably Safari) also clear it automatically after a period of inactivity.

In short: for a given contact, stick to one browser on one device when you can. Switching is fine, but anything in flight at that moment may need to be re-sent. Full multi-device support is on the list for a future version.

Can the other person take a screenshot?

Ephemeral can't technically prevent screenshots. If this is a concern, only exchange sensitive information with someone you trust.

Is Ephemeral end-to-end encrypted?

Yes. Messages are encrypted on your device before they're sent. Our server only ever sees encrypted data it cannot read. Your private key never leaves your device.

What is Ephemeral good for?

Sharing things that are sensitive now but don't need to exist tomorrow:

• — A credit card number or CVV when helping a family member book something
• — A temporary password or PIN for a shared account
• — An API key, .env secret, or SSH credential you need to pass to a developer
• — A Wi-Fi password for a guest
• — Any piece of information that's private enough to matter but not sensitive enough to justify a full secure channel

Is it good for ongoing conversations?

Not really — that's not what it's for. If you want secure day-to-day messaging, use Signal. Ephemeral is a sharp tool for a specific job: sharing something sensitive with someone you trust, without leaving a trace.

WhatsApp has disappearing messages — why not use that?

A few reasons:

• Not ephemeral by design. Disappearing messages are an opt-in setting bolted onto a platform built to store and sync everything. Messages can still be included in cloud backups (iCloud, Google Drive) before or after the timer runs. Ephemerality is not the default — it's an afterthought.
• Meta owns it. Even if message content is encrypted, metadata — who you talk to, when, how often — is collected and feeds into Meta's advertising infrastructure.
• Not open source. You can't inspect what the WhatsApp client actually does. You're taking their word for it. Ephemeral's source is available to read.
• Requires a phone number. WhatsApp ties your identity to a SIM-linked mobile number — something not everyone wants or has.

Ephemeral requires only an email address, keeps no permanent chat history, and there is no conversation log to export or restore.

Signal is the gold standard — why not just use that?

Signal is excellent and we genuinely recommend it for secure day-to-day communication. But a couple of things make it a poor fit in some situations:

• It's a native app, not a web app. Signal requires downloading and installing an app. In some countries or corporate environments app stores are restricted, managed devices block installs, or a colleague simply doesn't want another app on their phone. Ephemeral opens in any browser — nothing to install, nothing to configure. A native app is generally more secure than a web app, but sometimes installing one simply isn't an option.
• It requires a phone number. Signal ties your identity to a mobile number. Not everyone has one available, not everyone wants to share one, and in some contexts a SIM card is hard to come by.

Ephemeral is not a Signal replacement — it's a much simpler tool for a much narrower job. If you can use Signal, use Signal. Ephemeral is for the moments when you can't.