Private by design.
Simple to use.
Pigeon is a messenger for people who want their conversations to stay theirs. Here is what it does.
No phone number
No number, no email, no name required. Join with an invite code and pick a handle if you want one.
End-to-end encrypted
Every chat, groups included, uses MLS, the open standard for group encryption. Only the people in it hold the keys.
An account only you hold
Your account is a 24-word seed phrase, shown once. Nobody else has a copy, so nobody can take it over by asking.
Groups without admins
Anyone can add or remove a member, and everyone sees it happen. An open overview shows who has opted in to security alerts.
Linked devices
Each computer you link is a full member of your chats. Remove a lost one from any other.
A trusted circle
Choose a few people to be told if your account ever changes hands. Opt-in, and it starts empty.
Photos and files
Attachments are encrypted on your device and stored in pieces that reveal neither what they are nor exactly how big.
Nothing dropped in an outage
Once a message is accepted it is never dropped. If servers go down, it waits and arrives when they're back.
A network that can't read
Messages travel sealed through a network of nodes that store and forward what they can't open.
Reporting without scanning
Pigeon never scans your chats. If someone abuses it, you choose what to report.
Transparency in public
Every legal request we receive, and what we could hand over, is published on droppings.io.
Made for everyday chats
Pin, mute, archive, search and drafts, on Windows 10, Ubuntu and Linux Mint.