E2EE and encrypted chat glossary

Encryption where the sender's device encrypts content and only the recipient's device can decrypt it. The service in between stores ciphertext, not readable messages. Markero encrypts messages, files, voice messages and private-channel posts in the browser with OpenPGP (Curve25519). Read the plain-English guide.

Encrypted data that looks like random bytes. It can only be turned back into readable plaintext with the right key. Markero's server stores ciphertext and encrypted key material, not plaintext message archives.

The readable form of a message, file or voice note before encryption or after decryption. Markero's server does not store plaintext message content.

An architecture where the provider stores encrypted content and encrypted key material, but not plaintext or usable private keys. It limits what is exposed at rest; it is not a promise that a malicious server or a compromised device can never capture data. The threat model explains this limit.

Encryption in transit protects data while it moves between devices and servers. Encryption at rest protects stored data. End-to-end encryption goes further because the server cannot read the content even while it is stored or processed.

A keypair. The public key can be shared and is used to encrypt content for you; the private key decrypts it and must stay secret.

The secret half of your keypair. In Markero it is generated in your browser and stored encrypted; the server does not hold a usable copy.

Encrypting one key with another. Markero wraps your private key with a client-only key-wrap secret before the wrapped key is stored.

A client-side secret used to encrypt your private key before it is stored. It is derived in the browser and is not sent to the server. Your password protects the secret.

An open standard for encrypting and signing data. Markero uses OpenPGP with Curve25519 keys generated in the browser. See the encryption details.

A modern elliptic-curve algorithm used for key agreement and signatures. Markero uses it for OpenPGP keys generated in the browser.

A short hash of a public key used to verify that a key belongs to the person or organisation it claims to. Markero publishes its signing-key fingerprint on the press page and in security.txt.

A second check at sign-in, usually a one-time code. Markero uses optional TOTP. 2FA protects account sign-in; it does not encrypt or unlock your private key.

Time-based one-time password. An authenticator app generates a new six-digit code every 30 seconds. Markero supports optional TOTP and provides recovery codes. Read the 2FA questions.

One-time codes that can restore account access if you lose your authenticator app. They are separate from your password and should be stored offline.

Data about a communication rather than its content: who talked to whom, when, from which IP address, and how often. End-to-end encryption protects content, not metadata. Markero's threat model explains what is stored.

The network address your device uses to connect. Markero stores it in clearnet session records for rate limiting and security, not for advertising or profiling. Onion sessions store "tor" instead of an IP.

A version 3 address that routes traffic through the Tor network. Markero's official onion service serves the full app; voice, video and group calls are not available over Tor. How to connect.

Privacy is control over who can see your data. Anonymity is hiding who you are. Markero removes the phone-number and email link and offers Tor, but it does not promise anonymity; your device, network and behaviour still matter.

A written description of what a system protects against, what it does not, and which attacker capabilities are in scope. A useful threat model names the limits instead of hiding them. Read Markero's threat model.

An independent review of a system's security by a third party. Markero has not had a third-party security audit. The public threat model states the limits, and the absence of an audit is stated plainly rather than implied away.

An invite-only, end-to-end encrypted broadcast channel. Owners and admins post, followers read and react, and the channel has no public directory, handle or search listing. Invite links expire after 24 hours, 7 days or 30 days. Channel limits.

A group conversation where content is encrypted for each member's device. Markero encrypts group messages individually for each member.

Markero's optional supporter tier, from $4 per month. It raises upload and storage limits, enables 720p video instead of 480p, and adds a supporter badge. The core messenger is free; Premium is not required to send messages. Pricing questions.

Markero runs the chat service on EU-hosted infrastructure. Hosting location is one part of privacy, not a substitute for end-to-end encryption. Privacy policy.