DEV Community: VEIL

VEIL is now open source — and running on our own infrastructure

VEIL — Thu, 15 Oct 2026 11:51:52 +0000

Big VEIL news: we now run our own relay on infrastructure we own and operate, and the entire codebase is open source (AGPL-3.0) — crypto core, relay, protocol. Anyone can verify what we claim.

What's public and checkable today: X25519 + ML-KEM-768 post-quantum E2EE. Deleted means deleted — hard delete, zero rows. Burn-after-open enforced server-side. Nothing-at-Rest — a locked phone holds nothing to extract. Encrypted vaults with hidden volumes, private notes, steganography. Anonymous signup.

Every claim carries its test status at tryveil.app/claims — limits included: no independent audit yet (self-reviewed, the code is the proof), calls are same-network only today.

Read the code: github.com/VeilPrivate/VEIL

iOS beta: testflight.apple.com/join/Aqay7XH2

VEIL is a post-quantum E2EE privacy suite — messaging, encrypted vaults, private notes, steganography. No accounts, no email, no tracking.

Secure October Day 15: What October taught us

VEIL — Thu, 15 Oct 2026 00:05:02 +0000

Secure October, Day 15, halfway: the month's theme in one line — 'stay safe online' usually means behaving carefully. Real safety means complying fully with nothing to extract. No accounts, no tracking, nothing at rest. That's the standard we build to. #SecureOctober

Secure October: 31-day series for Cybersecurity Awareness Month. VEIL is E2E encrypted messaging with post-quantum hybrid key agreement (ML-KEM-768 + X25519) — no accounts, no email, no tracking. iOS beta in review with Apple.

Secure October Day 14: Your 2048-bit key has an expiry nobody printed

VEIL — Wed, 14 Oct 2026 00:09:28 +0000

Secure October, Day 14: your 2048-bit key has an expiry nobody printed. RSA-2048 is fine today and breakable on a future quantum machine — and recorded ciphertext waits. Hybrid ML-KEM-768 + X25519 in every VEIL handshake keeps today's messages sealed past that horizon. #SecureOctober

Secure October Day 13: Hide the file inside the picture

VEIL — Wed, 14 Oct 2026 00:07:35 +0000

Secure October, Day 13: hide the file inside the picture. VEIL's steganography embeds encrypted text inside ordinary images — the picture opens like a picture; the payload doesn't exist unless you know where to look. Encryption keeps secrets; steganography keeps the secret that a secret exists. #SecureOctober

Secure October Day 12: Screenshots outlive the chat

VEIL — Mon, 12 Oct 2026 00:05:59 +0000

Secure October, Day 12: screenshots outlive the chat. Ephemeral messaging promised disappearing; the other person's camera kept a copy. VEIL can't stop a camera — nobody can — so we say so plainly. Burn-on-open, hard-delete from both devices: what we can promise, we deliver. #SecureOctober

Secure October Day 11: Your cloud backup is the weak copy

VEIL — Sun, 11 Oct 2026 01:55:00 +0000

Secure October, Day 11: your cloud backup is the weak copy. End-to-end encryption that ends at the backup isn't end-to-end. VEIL keeps keys and files on-device; the server stores ciphertext it can't read and nothing at rest to seize. The weak copy is the one you can't see. #SecureOctober

Secure October: 31-day series for Cybersecurity Awareness Month. VEIL is E2E encrypted messaging with post-quantum hybrid key agreement (ML-KEM-768 + X25519) - no accounts, no email, no tracking. iOS beta in review with Apple.

Secure October Day 10: Plausible deniability isn't paranoia

VEIL — Sun, 11 Oct 2026 01:54:59 +0000

Secure October, Day 10: plausible deniability isn't paranoia. When a vault exists, its absence is itself evidence. VEIL's decoy vaults are indistinguishable from the real one - there is always something ordinary to find. You comply fully; there is nothing to extract. #SecureOctober

Secure October Day 9: Duress codes, explained

VEIL — Fri, 09 Oct 2026 09:01:33 +0000

Secure October, Day 9: duress codes, explained. One code wipes. A second code opens a decoy — a real, working VEIL with nothing sensitive in it. Under coercion you can comply fully and still protect what matters. It's a documented seizure scenario, not paranoia. #SecureOctober

VEIL Beta, Verified: 1,388 Sessions, Zero Crashes, Every Claim Labelled

VEIL — Thu, 08 Oct 2026 22:16:12 +0000

Every security claim on our site is labelled: Implemented, Experimental, or Not claimed. Our beta numbers get the same treatment.

Verified (App Store Connect, 9 October 2026):

1,388 sessions across our beta builds — zero crashes
534 testers reached
234 of 1,000 founding places claimed (live count — the cap is real and enforced)
Newest messenger build: 89 sessions, no invite code, open now

Nothing above is projected, rounded, or aspirational.

iOS beta, one tap: https://testflight.apple.com/join/Aqay7XH2

Methodology: source App Store Connect, pulled 9 Oct 2026. The companion beta app retires 11 December; sessions above are combined across both builds and the messenger build is the one linked. Android waitlist: https://tryveil.app

Secure October Day 8: The PIN someone forces you to type

VEIL — Thu, 08 Oct 2026 00:03:18 +0000

Secure October, Day 8: the PIN someone forces you to type. If someone compels your passcode, most phones open completely. VEIL's duress code wipes your data; a decoy code opens a second, ordinary-looking VEIL. Compliance and protection aren't opposites.

Secure October Day 7: Harvest now, decrypt later

VEIL — Wed, 07 Oct 2026 00:03:38 +0000

Secure October, Day 7: harvest now, decrypt later.\n\nRecorded traffic can be stored today and broken when quantum computers arrive. Classical key exchange has an expiry nobody printed. VEIL bakes post-quantum ML-KEM-768 into every handshake, today.\n\n\n\n---\n\nSecure October: 31-day series for Cybersecurity Awareness Month. VEIL is E2E encrypted messaging with post-quantum hybrid key agreement (ML-KEM-768 + X25519) — no accounts, no email, no tracking. iOS beta in review with Apple.

Secure October Day 6: What delete actually deletes

VEIL — Tue, 06 Oct 2026 00:06:05 +0000

Secure October, Day 6: what delete actually deletes. In most apps 'delete' removes the message from your view; copies persist in backups, caches and the other device. Gone should mean gone. In VEIL, threads burn and a conversation can be hard-deleted from both devices at once, from either side. #SecureOctober