Skip to the content
Sign inOpen ILLEST
  • Messages sealed on your device
  • One MLS group per conversation
  • Voice and screens, relayed
  • Servers, roles and forums
  • A wallet only you hold
  • Sixteen page templates

Your group chat, encrypted end to end.

ILLESTâ„¢ is servers and DMs, voice and screen sharing, a wallet and a page of your own. Every message is encrypted on your device, so the server only ever holds ciphertext.

Open ILLEST in your browser

Free to use, and nothing to install. Create an account

A photograph of ILLEST: the channel general in a server called gremlin hours, with its messages, the members panel, the list of channels and the box to write in.
The app as it is. The people and the server are made up.
A photograph of ILLEST in its phone layout: the channel general, a message that mentions kaiyo marked in red, and the box to write in.

01Messages

Encryption you can check.

Your device encrypts each message, and only the devices it is for decrypt it. The server stores ciphertext and is never given the keys. Here is what it holds and what it does not.

  1. 01

    You write it

    On your device, in the conversation.

  2. 02

    Your device seals it

    With the conversation's MLS keys, before it leaves your device.

  3. 03

    The server passes it on

    This is all it receives: which conversation, which epoch, and sealed bytes.

  4. 04

    Their device opens it

    Only a device in the group can, and the group says who sent it.

Your device

see you at nine

MLS PrivateMessage309 bytes

00 01 00 02 07 79 6f 75 72 2d 64 6d 00 00 00 00 00 00 00 01 01 00 1c f8 0d 9d 51 a7 c0 ae ef cb 07 4d bf 66 b2 c4 f9 7b bf 6b bd e7 01 f0 3e 67 79 b4 dd 41 00 51 f7 cb + 253 more bytes, sealed

ILLEST's server

Conversation
your-dm
Epoch
1
Size
309 bytes
Sealed
287 bytes

Their device

Waiting for a message

see you at nine

Sent by your-phone, checked by the group

A recorded example, sealed by the app's own library. The live one loads as you come near.

Sealed on your device

  • What your messages say
  • Your files, each with a key made for that one file
  • Your voice and the screens you share
  • Your password: sign-in uses OPAQUE, so it is not sent
  • Your wallet's keys

What the server knows

  • Who has an account
  • Which conversations exist, and who is in them
  • When messages are sent, and roughly how big they are
  • Your profile, which is public
A photograph of a conversation between two friends, its header marked encrypted with the group's epoch, and the list of conversations beside it.

  • A group per conversation

    Every DM and every channel is its own MLS (RFC 9420) group. Someone joins or leaves, and the keys change.

  • No plain-text fallback

    If a message cannot be encrypted, it is not sent. You are told why.

  • Keys you can check

    If someone's key changes, you are warned, and you can compare safety numbers with them.

  • Your IP stays yours

    Messages, files and calls go through the server. Your device never connects to anyone else's, so they never see your IP address.

What the server still knows, and what this does not protect

  1. The server knows who has an account, which conversations exist, who is in them, when messages are sent and roughly how big they are. It cannot read what they say.
  2. In a browser, the page's code comes from the server, so whoever runs the server could change that code to capture your password. The desktop app carries its code inside the app instead of fetching it from the server each time, so it does not have that weakness.
  3. On the desktop, your device's key is kept in your system keychain and used by the app's own process. The window that draws the screen can ask the app to sign you in or open a message, and is not sent the key. Another program running as you can read the keychain on Windows and Linux, and on macOS the app does not yet ask the keychain to restrict it. One command that moves an older device's key into the app is still present, so this is not yet a promise that no key ever passes through the window.
  4. Encryption does not protect you from your own computer. Another program running as you can reach what you can.

02Chat

Everything a conversation needs.

The way your group already talks, every word of it sealed on your device.

01

Talk

Reply to a message or open a thread from it. React, run a poll, use your own emoji and stickers, and play sounds from the server's soundboard.

  • Replies
  • Threads
  • Reactions
  • Polls
  • Emoji and stickers
  • Soundboard
A photograph of the channel general in a server: messages with replies and reactions, a mention marked in red, and the members beside it.

02

Files

Drop files anywhere in the conversation. Each one is sealed with a key made for that one file before it leaves your device, and a sound draws its waveform.

  • Up to 10 files a message
  • Larger files with Elite
  • Waveforms for sounds

03

Forums

A channel where every topic is a post with a title and tags, shown as a list or a gallery. Each post's title, its words and the tags it wears are sealed.

  • 20 tags a forum
  • 5 a post
  • List or gallery
  • Pin, lock or close a post
A photograph of a forum channel: five posts, each with its title, who started it and its replies, with List and Gallery to choose from.

04

Disappearing

Set a conversation's messages to delete themselves: after an hour, a day, a month, or any number of hours up to a year.

  • 1 hour
  • 8 hours
  • 24 hours
  • 7 days
  • 30 days
  • Your own

05

Search reads only what your device has decrypted. The server could not search your messages if it wanted to.

  • Ctrl F
  • Runs on this device

03Servers

Servers, the way you know them.

For a crew, a community or a few friends. Every channel is encrypted the way a DM is.

  1. 01

    Six kinds of channel

    Text, voice, stages for an audience, forums, announcements and, once the server is boosted, a shop.

    • Text
    • Voice
    • Stage
    • Forum
    • Announcement
    • Shop
    A photograph of a forum channel in a server: its posts, each with who wrote it and how many replies it has, the members panel, and the list of channels.

  2. 02

    Roles in their rank

    Drag roles into the order they rank. Each has its look, its permissions and its members, and you can see the whole server as any one role sees it.

    • Drag to rank
    • Display, Permissions, Members
    • View server as a role

  3. 03

    Rooms of your own

    Make a voice channel a door: whoever joins it gets a room of their own under it, named for them, and the room closes 20 seconds after it empties.

    • Join to create
    • One room each
    • Closes when empty

  4. 04

    Welcomes without a bot

    Greet newcomers in the server's own words, see off whoever leaves, thank boosters, and give newcomers their roles as they are let in. Wave under a welcome to say hi.

    • Up to 10 welcome lines
    • Up to 5 roles for newcomers
    • Wave

  5. 05

    Moderation

    Time someone out for 60 seconds to a week, slow a channel to one message every 5 seconds to 6 hours, change 100 people's roles at once, and see every change in the audit log.

    • Timeouts
    • Slowmode
    • 100 at once
    • Audit log

04Calls

Talk, and share your screen.

Join a voice channel and you are in. Share a screen or a window and each person chooses to watch: until they press Watch, your picture is not decrypted on their device.

A photograph of a voice room: three people on tiles, the bar of call controls underneath, and who is in the room in the list of channels.

  • Encrypted on your device

    Voice and screen are sealed on your device before they leave it. The server relays them and cannot open them.

  • Relayed, never direct

    Calls are relayed, not peer to peer, so nobody in a call gets your IP address from it.

  • Stages

    A few people speak, everyone else listens.

  • The controls you expect

    Mute, deafen, push to talk, and a volume for each person.

05Pages

A page that is all yours.

Build a public page on a canvas. Start from a template, drag in blocks, give each its own frame, depth, effects and motion.

  • ice.illest.one
  • Monolith
  • Hologram
  • Deck
  • Arcade
  • Vinyl
  • Keys
  • Diorama
  • Prism
  • Rack
  • Stack
  • Letterpress
  • Index
  • Zine
  • Poster
  • Toybox
  • Lightspeed
A photograph of ice.illest.one, a page its owner made on ILLEST, as a desktop shows it: the links, a card with the page's name and a music player, over a photograph of a pool at night.
A photograph of ice.illest.one again, as a phone shows it: the same parts, one under another.

ice.illest.one

Made on ILLEST by the person it belongs to, and live at this address.

  • Sixteen templates

    Monolith, Hologram, Vinyl, Arcade, Zine and eleven more.

  • Twenty-one kinds of block

    Links, socials, galleries, video, a music player, a countdown, a terminal, a 3D object and more.

  • A layout for each screen

    One layout for desktops, one for phones, and the editor shows exactly what a visitor sees.

  • Paid from your page

    Put your wallet on it and visitors pay you from theirs.

  • Public on purpose

    A page is public and is not encrypted. It is served apart from the app, to keep it away from your messages.

Your page is at illest.world/yourname, and with a subscription at yourname.illest.one.

06Names

More than one name, styled your way.

Hold up to two usernames, or five with a subscription, and choose your main one. Your name's colour, typeface and effects are yours to set, the effects stack, and each server can have its own.

  • Seen where you are seen

    In conversations, member lists, calls and your profile.

  • A name that changes hands is marked

    A name that moves to someone new carries a new-owner mark for a while, so nobody mistakes them for its last holder.

  • In your wallet

    The wallet lists the names you hold and sets your main one.

  • Bought and sold

    List a name at a fixed price, paid in USDC. It moves to the buyer the moment the payment is final.

A second username needs an account verified with Google, and opens thirty days after you join unless you subscribe.

A photograph of the wallet's Names screen: two usernames on one account, the one shown now and another, two of five used with a subscription, and a field to claim another.
  • Free2usernames
  • With a subscription5usernames

07Wallet

A wallet in the chat. Yours, not ours.

Send and receive crypto without leaving the conversation. The wallet is made on your device from a recovery phrase only you have. ILLEST does not hold it, cannot spend from it and cannot recover it.

  • Ethereum
  • Base
  • Arbitrum
  • Optimism
  • Polygon
  • Solana
  • Bitcoin

mothlampwhat do i owe u for last night

kaiyosent u a request

Asked you forSolana

42 USDC

dinner, your half

7kQmX4dYw2Ph9Rt3sLc8VbN5aJe6Fz1GuK2oMqWy9xTe

Check the address against something other than this message.

Paid 42 USDC on Solana

  1. Your deviceThe key stays here

    1. Unlocked hereYour wallet password opens the key on this device. It is not your account's password.
    2. Signed hereThe key signs this one transfer on your device. It is not sent to ILLEST.

  2. ILLEST's serverNo key here

    1. Carried, not changedILLEST's server passes the signed transfer on to Solana. It holds no key, so it can carry it but never change it or spend.

  3. The conversationBoth of you see it

    1. PaidA note that it was paid goes into the conversation, for both of you.

The people, the amounts and the addresses are made up.

A photograph of the wallet card: the balance, Send, Receive and Swap, and the coins held: ether on Ethereum, and SOL and USDC on Solana.

  • Several networks

    Ethereum, Base, Arbitrum, Optimism, Polygon, Solana and Bitcoin. Sending is built for each, tested against stand-ins for the networks and not yet with real money.

  • Its own password

    Spending needs a wallet password apart from your account's, so signing in does not unlock your money.

  • Requests in chat

    Send a payment request as a card, and they pay it from their own wallet.

  • It pays for ILLEST

    Subscriptions, usernames and shop orders are paid from it, in USDC on Solana.

In a browser, anything that can run code on the page can reach an unlocked wallet, so keep everyday amounts there. The desktop app keeps the wallet's keys and signs in its own process, so the screen asks for a signature and is never handed the key that made it. The words of your recovery phrase do pass through the screen: when you create a wallet, when you import one, and when you ask to see them.

08Marketplace

Sell in your server. Trade usernames.

A boosted server can open a shop channel and sell items and roles at a fixed price. Usernames sell in the ILLEST server's shop: list a name you hold and someone can buy it.

A photograph of a server's shop channel: four listings, each an item with its seller, how many are left and its price in USDC.

  • Auctions, with ILLEST in the middle

    Put an item, a role or a username up for auction and nobody has to trust a stranger. Every bid is paid to ILLEST and held there. Outbid, yours comes back in full at once. When the auction ends, ILLEST pays the seller and the winner gets what they won, as if they had bought it.

  • Wallet to wallet

    Everything is paid in USDC on Solana. One transaction from the buyer pays the seller and the fee together.

  • Counted once final

    ILLEST's server reads each payment from the chain and counts it only once it is final.

  • Delivered when paid

    A role or a username moves to the buyer as the payment counts. An item is delivered by its seller, and both sides follow the order.

  • Subscriptions

    Paid in USDC for one, three or twelve months, it gives you five usernames instead of two, your page on its own subdomain and larger uploads.

Come in.

ILLEST opens in your browser. Free to use. Bring your people.

Open ILLEST in your browserCreate an account