Secret uses RSA encryption for all messages. Upon login, the app automatically generates a public-private key pair; the private key is stored offline securely, and the public key can be shared. Public keys are Base64-encoded and used as Deep Links. Valid links always start with https://secretapp.ir/k/.

Your username helps friends find you online. Each username is tied to a key and stored with SHA-512. Usernames are unique; during key reset or change, ownership is transferred or released.

Your nickname in Secret is stored offline and only sent to friends you add. After the friend sees it, it is deleted from the server. Changing your nickname does not affect previously added friends; offline changes are required.

You can set profile pictures for yourself and friends. Each person has only one visible profile, and new profiles only appear for manually added friends.

In Secret, you can add friends. If your friend has the app, they have a public key, which works like a link in the form of a Deep Link encoded with Base64. To add them, enter their nickname and public key. You can also use their username to add friends; the username translates to the public key. Friend requests are automatically encrypted with RSA.

You can edit your friends' profile pictures, nicknames, and contact channels offline, but you cannot change their public key or username. If a friend's key changes, you need to remove and re-add them.

Encrypted messages as Deep Link Base64 can only be opened via https://secretapp.ir/m/. Copy suspicious links without opening. Secret Group is not responsible for malicious or fake links.

Messaging in Secret can occur via the Secret server or other networks like Telegram, WhatsApp, Instagram, SMS, and email. Messages are encrypted with RSA before sending and sent as Base64 links containing sender, giver, and secret fields to the semi-online server. The recipient receives the message, and after viewing, it is deleted from the server. Cached messages are stored offline; only new and undelivered messages are online. Users are responsible for their messages; Secret Group holds no responsibility.

In Secret Chat, you can create private groups where all messages are AES-encrypted, and the AES key is protected with RSA. Group management is reserved for the creator, who can change group name/image, lock/unlock the group, ban/unban users, pin or delete messages. Regular users can only delete or edit their own messages, applied only to unseen messages. Membership is via adding friends or sending invitation cards. Blocked users cannot see or send messages in the group.

You can set PINs; the login PIN grants access to the app, and the destroyer PIN immediately deletes all data if accessed by others. PINs are stored offline with SHA-512. A destroyer PIN cannot exist without a login PIN and must differ from it.

You can back up, reset, and restore keys. Backup exports the key pair as JSON, which must be stored offline. Users are responsible for protecting their keys and messages; Secret Group has no access. Reset or restore creates a new identity.

The Secret server handles encrypted messages with RSA and Base64 and works semi-online. Only minimal data is stored on decentralized servers; usernames are only kept on the official server. Private messages are deleted after the recipient views them, except for group messages which remain for all members. Friend requests are deleted after viewing. Server code is available for developers.

Secret updates only through the official website or within the app. Updates from Iranian marketplaces like Cafe Bazaar or Myket are applied there. Downloaded files can be installed manually.