Can psst read my messages?
No. Messages are encrypted in your browser before they leave it, and the keys are made from your own wallet signature. psst has no server and holds no keys. What goes on-chain is sealed ciphertext.
What can other people see?
Like any Solana transaction: which wallet sent a message to which wallet, when, roughly how long it was, and any SOL paid. Never the words. If who you talk to is itself sensitive, use a fresh wallet.
What does it cost?
A normal Solana network fee for each message, a tiny fraction of a cent, plus the recipient's DM price if they set one. That payment goes straight to them. Switching on your inbox costs one transaction fee.
Why do I sign a message to switch on?
Phantom doesn't let websites decrypt with your wallet key directly. So you sign one fixed message, and that signature is turned into your inbox key, right here in your browser. The same wallet always produces the same key, so your inbox opens on any device.
What if the wallet I want hasn't switched on psst?
You can't encrypt to them yet, so psst offers a knock: a tiny public nudge that shows up in their wallet history, telling them someone wants to reach them privately. Once they switch on, you can message them.
How long can a message be?
One Solana transaction carries one message, so a few hundred characters. The box shows how much room is left. Long thoughts become a few messages.
Where is my profile stored?
On Solana. Your name, bio, X handle and picture are saved in one public transaction from your wallet, so anyone can read them and only your wallet can change them. Uploaded pictures are turned into tiny 24×24 pixel art so they fit. Editing costs one network fee.
How does X verification work?
To link an X account you post a short code from it. The code is made from your wallet and your handle, so it only works for you. psst reads the post, checks it came from that account and has your code, then stamps your profile. Every browser checks that stamp before showing the ✓, and handles without one never show. You can delete the post after.
Are follows and balances public?
Yes. Follows are public on-chain transactions, and SOL balances are public on Solana for every wallet. The People page just puts them in one place. If you don't want your balance next to your name, message from a separate wallet.
Is it audited?
Not yet. psst uses well-known building blocks (NaCl / TweetNaCl: X25519 and XSalsa20-Poly1305) and the code runs in your browser where anyone can read it. It's new software, so treat it that way.
Try it. Switching on is one signature and costs nothing.
psst