Messaging & calls Rolling out

End-to-end encryption, explained

What end-to-end encryption means in Kit Pay chat, why keys living on your device matters, and what it does not cover.

"End-to-end encrypted" is one of those phrases that gets stamped on everything, so it is worth saying precisely what it means here. In an end-to-end design, messages are locked and unlocked by keys that live on the devices in the conversation — the ends — so what travels through and sits on servers is locked content, not readable text. The people in the conversation hold the keys; the infrastructure in between carries sealed envelopes.

How Kit Pay approaches it

  • Each of your devices holds its own encryption keys, published as a key bundle other devices use to seal messages for it.
  • Fresh one-time keys let a conversation start securely even while your phone is offline.
  • The design includes protections aimed at future threats — including cryptography chosen with tomorrow's computers in mind, not just today's.
  • Key changes are recorded in a way designed to be visible rather than silent, so a device swap looks like what it is.

You do not need to hold any of that in your head. The practical meaning is simpler: your conversations are built to belong to you and the person you are talking to, and why chat activates per device explains the one visible consequence — the per-device rollout.

What encryption does not do

Honesty requires the other half. End-to-end encryption protects messages in transit and in storage between the ends — it does not protect the ends themselves. A phone left unlocked, a PIN shared aloud, a shoulder reading your screen, or the other person screenshotting the conversation are all outside its power. It also does not encrypt your wallet history into invisibility: payments are ledger records with their own protections, separate from chat. And it does not make a scammer's words true — an encrypted lie is still a lie. The staying safe guides cover the human side, which remains the side that matters most.

Frequently asked questions

Can Kit Pay staff read my chats?

Ordinary messages travel and are stored as sealed content the infrastructure cannot read. The one deliberate exception is reporting: if you report a conversation, you can select specific messages and explicitly consent to share their content with authorized moderators. That shares exactly what you chose — never the whole thread by default.

If I get a new phone, do my chats follow automatically?

Keys belong to devices, so a new device sets up its own keys and activates as the rollout allows. Your money and history follow your account; conversations follow the encryption design. Switching phones has the full picture.