Open the pairing flow.
In CarrierPony, start a new conversation. You'll be offered the ways to pair: share an invite, or scan each other's codes face to face.
A conversation starts with a pairing: the two apps swap public keys so each phone can encrypt to the other. In person it takes seconds; remotely it takes an invite over any channel you trust.
In CarrierPony, start a new conversation. You'll be offered the ways to pair: share an invite, or scan each other's codes face to face.
In person, one phone shows a code and the other scans it. Remotely, send the invite over a channel you trust — the invite carries your public key, which is safe to transmit; it lets people encrypt to you, nothing more.
Your contact accepts, and their app sends its public key back. Both phones now hold the pair of keys the conversation will use.
Open the conversation details on both phones and compare the safety number — aloud in person, or over a call. Matching numbers mean no one is in the middle. See the dedicated guide for the details.
Send the first message. From here on, everything is encrypted to their key and signed by yours, automatically.
The invite contains public key material, which is safe to expose — it only lets someone encrypt to you. The residual risk of remote pairing is interception-and-substitution at first contact, which is exactly what comparing the safety number afterwards rules out.
Yes. Each pairing is its own key relationship and its own safety number.
Both ends need CarrierPony, because both ends need keys. That's what makes it end to end.
Free private messaging and file transfer for iPhone. Currently in App Review — leave your address for exactly one email on launch day.