How It Works — QR Pairing & a Blind Relay

Pairing

From strangers’ phones to a private line

Four steps, once per contact. The old-fashioned part — meeting in person — is precisely what makes the cryptography airtight.

Open the app — that’s the signup

On first launch your phone generates your identity: a pair of cryptographic keys stored in the device’s secure keystore. No form, no number, no verification code.

Meet and scan each other

You show your QR code, they show theirs, you both scan. The codes carry only public keys — nothing private ever appears on a screen.

Compare the fingerprint

Both phones display the same short fingerprint of the exchanged keys. If they match, nobody tampered with the exchange. That glance is the entire trust ceremony.

Talk — it’s sealed from here

From the first message on, everything between you is end-to-end encrypted, with keys that ratchet forward as the conversation moves.

Delivery

The life of one message

Store-and-forward, with the emphasis on forward: the relay is a postbox that holds sealed envelopes briefly and forgets them on delivery.

Sealed on your phone

The app encrypts the message with keys only you and the recipient hold, then hands the sealed envelope to the network.

Parked in a blind mailbox

The relay files the envelope under a hash of the recipient’s public key. It cannot read the contents — and the sender’s identity is inside the seal.

Fetched and opened

The recipient’s phone collects its mailbox, proves ownership with a signature, and decrypts the message locally — the only place decryption can happen.

Gone from the server

On confirmed delivery the envelope is deleted from the relay. Undelivered mail expires on a timer. Nothing accumulates.

The hard question

Who hands you your contact’s keys?

In most messengers, a key server answers that question — and you simply trust it not to lie. A compromised or compelled key server can hand you an attacker’s key and read everything from then on, silently.

TalkRidge removes the middleman entirely: the keys come from your contact’s screen to your camera, and the fingerprint check proves nothing intercepted them. It costs you one meeting — and buys a trust anchor no server breach can touch.

The QR code carries

✓ Your public signing key
✓ Your public agreement key
✗ No name, no number, no secret — nothing an onlooker could use

Good to know

The practical questions, answered

The details people ask about once they’ve seen the pairing flow.

Why in person? Because a QR code you scanned yourself is the one key exchange no server breach can rewrite.

Both people scan: the pairing is mutual, so each phone learns the other’s keys first-hand rather than through an intermediary.

No key server exists — so there is nothing to hack, subpoena or quietly swap keys on.

Push notifications are just a nudge: the phone then fetches and decrypts privately.

Convenience mode can restore your identity and contacts on a new phone from an encrypted, key-locked backup.

Privacy mode keeps everything device-only: lose the phone, lose the history — that is the promise, not a bug.

TalkRidge’s encryption is built exclusively from vetted, unmodified open-source cryptographic primitives, and the protocol design is documented openly. The applications have not yet undergone an independent external security audit — we say so plainly rather than borrow trust, and independent review is on the roadmap.

Next: what the app can do →

Two phones, two scans, zero servers to trust

From strangers’ phones to a private line

The life of one message

Who hands you your contact’s keys?

The practical questions, answered

Questions? Talk to a human.

Headquarter

Email us