Reduce certainty, don't erase every trace
A cover message can make the protected payload less obvious. It does not guarantee that a technical analysis, a device or the other person will not reveal the conversation.
Plausible deniability is not invisibility and does not guarantee safety under duress. An unlocked or compromised device, copies in the transport app, screenshots, backups, or other clues can still reveal a conversation. Layergram reduces some traces, but it does not control the operating system, transport apps, or an adversary with physical access.
The raw encrypted payload contains no plaintext Layergram markers or unencrypted sender or recipient identifiers. A cover message can carry it inside normal-looking text. Deep links intentionally give up this visual deniability in exchange for convenience, because they identify Layergram.
An optional passphrase can derive a separate identity from the same recovery phrase. Layergram does not save that identity like a normal profile and only keeps its keys in memory while the passphrase is active.
When the passphrase identity is not active, the records belonging to it remain encrypted and unreadable in the context of the base identity. Message IDs, timestamps, and auxiliary status are also stored in encrypted local records.
Layergram authenticates encrypted messages to participants, but does not attach a separate digital signature designed to prove authorship to an external observer. The payload alone is therefore weaker evidence of who wrote it.
Frequently asked questions
No. Encryption protects content from someone who does not have the key. Deniability concerns whether evidence can conclusively establish that specific protected data exists or that a particular person authored a message.
No. A Layergram link is recognizable and transport metadata, device artifacts, screenshots, backups or the other participant can provide evidence. Deniability concerns specific cryptographic and local signals, not every surrounding trace.
Its derived keys do not remain in memory, the identity does not appear as a regular local profile, and associated records remain opaque until the identity is derived again using the correct passphrase. Without the passphrase, those encrypted records alone do not establish that they belong to that inactive identity; evidence outside Layergram may still reveal the association.
Not alone. When an endpoint is unlocked, observed or compromised, evidence external to the encrypted payload can reveal contents or patterns of use.
Start free
Start free. Choose one person. Invite them in a few steps.