End-to-end encrypted team messaging
LumaChat is the secure messenger of the European office suite 
LumaSuite. It fully encrypts your conversations and your calls with the latest post-quantum cryptography standards built in, and lets you pair your devices: PC, tablet or smartphone, for a smoother experience.
Secure calls
Calls are end-to-end encrypted.
Recent calls
Calls in progress
Start a call
Settings
SETTINGS
Call ended · 4 minutes
Security actions
Security information
Other information
Tap the screen to try it
LumaChat is complete and free, with no time limit. The Pro plan adds what an organisation needs to build it into the way it works.
€0 for everyone, no subscription
Every feature of the messenger:
From €8.90 excl. VAT per user / month
Everything in Free, plus:
* Additional fees apply to the self-hosted instance.
Contact the Cercle teamA conversation to decide, a group to coordinate, a file to move on: LumaChat brings the exchanges of your teams together in an encrypted space.
Direct conversations, groups, threaded replies and topic Streams help you organise the exchanges of the team.
Files are encrypted on your device before they are sent. Their content stays encrypted in the storage of the server.
Link a device with a QR code and manage the authorised ones. Revocation removes access to future exchanges.
LumaChat is designed to be hosted on your own infrastructure. Keep a hold on your communication environment, as close as possible to the requirements of your organisation.
Discuss my project with Cercle DigitalLumaChat is a Cercle Digital product. One counterpart to build your project around your uses and your requirements.
Administer the accounts and the settings of your instance. Your organisation defines its own communication environment.
LumaChat combines classical and post-quantum cryptography for key establishment. An approach designed to anticipate the risk of exchanges being collected today and decrypted later.
The application checks a log of identities and devices. Anomalies it detects, such as a substituted identity, can block sending and ask for a verification.
Agents are named participants with explicit permissions. An authorised agent can read the exchanges of the conversations it takes part in.
The core provides for migration to a stronger cryptographic profile. The tests check, among other things, that a migration to a weaker profile is refused.
The server keeps messages and files in encrypted form. Acceptance tests inspect the stored data looking for content and keys in the clear.
A sealed sender, sizes normalised into buckets and an inventory of the metadata: concrete mechanisms to reduce what is exposed.
Backups are encrypted on the device before they are transferred. The protection follows your data into its backup.
The security core is written in Rust and exposed to the native clients and to the web. That shared base holds the cryptographic mechanisms and the authorisation rules in one place.
The tests cover, among other things, encrypted storage on the server, the detection of substituted identities, and device revocation for future messages.
Verified identities, revocable devices and explicit permissions: the security rules travel with the exchanges of your teams.
Discover LumaChat from your browser.
Create your identity on your device.
Invite a correspondent and compare your safety code before you exchange.
Discover the web version in your browser, or download the Android package when this instance offers one.
Opens the client in your browser. Installing it on your system is offered from inside the application, wherever your browser allows it.
Open LumaChatThe LumaChat APK package, installed from the file. Compare its SHA-256 fingerprint before installing.
