Secure Communication

Your conversations
belong to you.

AEGIS is an end-to-end encrypted communication platform built for people who take privacy seriously — without compromising on capability.

The Problem

Most messaging apps are free because you are the product. Your conversations are scanned, stored, and sold.

Centralised servers

Your messages pass through servers controlled by corporations, governments, and advertisers — none of whom you invited.

Metadata collection

Even when content is “encrypted”, who you talked to, when, and for how long is logged and sold.

Weak encryption

Many platforms hold the keys. They can read everything. So can anyone who compels them to.

No real control

You cannot audit the code, run your own server, or verify that messages are not being intercepted.

What is AEGIS

AEGIS is a self-hostable, end-to-end encrypted communication platform for text, voice, video, and file transfer. It runs on Windows, Linux, macOS, and Android — connecting through a server you control.

There are no accounts. No phone numbers. No tracking. When you close a session, ephemeral keys are discarded. Even if someone recorded every packet you ever sent, they cannot decrypt past sessions.

Run the server on a VPS, a home machine, or over Tailscale without exposing anything to the public internet at all.

Features

01

End-to-End Encryption

All messages, files, voice, and video are encrypted with ChaCha20-Poly1305. Every single message uses a unique derived key — the server relays ciphertext it cannot read, and no two messages share a key.

02

Forward Secrecy & Post-Compromise Security

The Double Ratchet protocol generates a fresh key for every message and rotates the root key on every DH exchange. Compromising a key exposes nothing about past messages, and the session self-heals automatically after the next ratchet step.

03

Voice & Video

Encrypted real-time voice using Opus. Private webcam sharing between specific peers — not broadcast to the group unless you choose.

04

Screen Sharing

Share your screen with the group or with a single peer. AEGIS blurs your screen automatically when you step away.

05

File Transfer

Send files of any type to the group or privately. Files are chunked, encrypted individually, and reassembled on the receiving end.

06

Privacy Mode

Step away and AEGIS blurs your screen, disables your camera, and sets your status to away. Mouse movement or a password restores it.

07

Self-Hosted

Run the server on any Linux VPS or home machine. No subscription, no third party in the loop. Your server, your rules.

08

Admin Dashboard

A local HTML dashboard gives a live view of peers, auth events, and server health — without ever exposing message content.

Technology

Double Ratchet
Signal-protocol ratchet combining a DH ratchet and symmetric-key ratchet — every message uses a unique key, never reused
X25519 / HKDF-SHA256
Elliptic-curve Diffie–Hellman key exchange feeding HKDF to derive root, chain, and message keys
ChaCha20-Poly1305
Authenticated encryption for every message — header integrity is bound as AEAD associated data, so tampering is detected
Post-Compromise Security
After any key exposure, the DH ratchet step automatically self-heals the session — future messages are safe again
Skip-Key Window
Out-of-order and delayed packets are tolerated via a pre-computed skipped-key store, with a hard cap to prevent abuse
Opus Codec
Low-latency 16 kHz voice compression optimised for real-time communication
Ephemeral Keys
New X25519 keypair generated each session — discarded on disconnect, old sessions unrecoverable
Priority Queuing
Voice packets bypass file transfer queues so calls stay smooth during uploads

Why it matters

Privacy is not a luxury for people with something to hide. It is the baseline condition for free thought, honest conversation, and genuine human connection.

“When communication is surveilled, people change what they say. When people change what they say, they eventually change what they think.”

Journalists protect sources. Lawyers protect clients. Doctors protect patients. Activists protect movements. Families protect each other. Everyone has a legitimate reason to communicate privately.

AEGIS does not ask you to justify your privacy. It simply provides it — with open, auditable technology, no central authority, and no business model built on your data.

The server is yours. The keys are yours. The conversation is yours.

Platforms

🖥

Desktop

Full-featured client for Windows, Linux, and macOS. Voice, video, screen share, and file transfer.

📱

Android

Native Android client with background notifications and encrypted file sharing from your gallery.

Headless Server

Lightweight VPS server with no GUI. Runs as a systemd service with a local admin dashboard.