Chat privacy and encryption
What's encrypted in Morsel chats, what Morsel's servers can and can't see, and how your chat history follows your recovery phrase.
Chats are end-to-end encrypted. Only you and the other wallet can read them. Morsel's servers store and deliver your messages, but can't read them.
How it works
Each wallet's chat key is derived from the wallet's own key, on your device. The other wallet's address is enough to encrypt a message only it can open. There's no key server and nothing to set up.
Messages are padded to standard sizes before encryption, so their length doesn't give away what they say.
What's encrypted
- your messages and replies;
- the GIF you send;
- payment requests: the amount, token and note;
- which payment a message belongs to;
- your reactions.
What Morsel's servers can see
- which two wallets are talking, and when;
- roughly how large each message is;
- whether a chat is a request, accepted or blocked;
- how far each of you has read;
- the words you search for in the GIF picker.
Payments themselves are on-chain, so anyone can see them, chat or not.
Your history follows your phrase
Because chat keys come from your wallet's key, your chats come with your wallet: restore your recovery phrase on a new device and your history is there.
That also means anyone who gets your recovery phrase can read your past chats. Chats don't use forward secrecy. Protect your phrase. See Your Secret Recovery Phrase.
Watched wallets
A watched wallet has no key in Morsel, so it can't read or send messages.
Notifications
On iPhone and Android, message previews are decrypted on your phone, never on Morsel's servers, and only for accepted chats and contacts. Requests only say who they're from. You can turn previews off. See Message previews.
Reports
When you report a wallet, you can choose to include its last 5 messages. Only those leave your phone, decrypted, with the report. Untick the box to send the report without them.