Professional Secure Communications. End-to-End Encrypted. Ephemeral by Design.
In an era where every exchange is logged, analyzed, and retained — 10 Seconds is a professional encrypted communication software designed for minimal server-side data retention, end-to-end confidentiality, and ephemeral session management. Built for organisations where confidentiality is a governance requirement.
Every conversation you have today is a data point someone else controls.
Many messaging workflows are designed to retain and synchronize conversations over time. Device histories, cloud chats, backups, and service metadata can outlast the discussion. End-to-end encryption protects message content, while retention practices vary by platform and configuration.
For legal teams, executive committees, M&A workstreams, HR decisions, and sensitive internal discussions, this is an unacceptable exposure.
Why 10 Seconds is categorically different
Every design decision was made with a single principle: the server should never be able to read, retain, or betray your communications.
End-to-End Encryption
NaCl public-key encryption (Curve25519/XSalsa20/Poly1305), with AES-256-GCM for D3 video chunks. Your private key is generated on-device, encrypted with your password, and never transmitted in plaintext.
Self-Destructing Messages
Every message is automatically removed from display after 10 seconds. No in-app history or scroll-back. Configurable up to 20 seconds. Device-level captures may persist.
30-Minute Session Lifespan
Every chat room has a 30-minute countdown. The app closes the session when the countdown ends, and D3 video transfers respect a server-checked deadline. There is no server-side message archive. Device-level or network-level captures may persist.
No Server-Side Message Storage
Messages are relayed in real time and are not written to any persistent database. The server processes encrypted relay traffic only. Server-side message content is not retained beyond the active session.
Multi-Layer Authentication
SHA-256 client-side hashing (WebCrypto native) before transmission. Server re-hashes with bcrypt cost 12 inside an isolated thread pool. Raw passwords never sent or stored at any point.
Auto-Destroy on Empty
When all participants have left and the room is empty, the server schedules session cleanup after 30 seconds.
Forensic Watermarking
Every session displays an account-linked watermark with the participant's username, date and verifiable fingerprint. It remains visible in in-app media viewers and can help identify the account displayed in a shared capture. Screenshot alerts are limited to supported native apps; the web version does not detect screenshots. The watermark does not prove who made or shared a capture.
Encrypted Media & Documents
Exchange images, PDFs, voice recordings and video inside the conversation. D3 video transfers use encrypted chunks and recipient acknowledgements, while media viewers remain inside the app.
Separate Room Credentials
Your account login and room access are separate. Joining a conversation requires its session name and shared password, so an account alone does not grant access to every room.
Trace the account shown in a capture
10 Seconds combines account-linked watermarks with screenshot alerts in supported native apps. The web version does not provide screenshot detection. No app can prevent every form of capture.
Account-linked forensic watermark
A visible watermark carrying the viewer's username, date and fingerprint is rendered across the conversation and its in-app media viewers. It can remain visible in captures that include the marked area. The fingerprint can be checked by an administrator.
Native screenshot alerts
Available in supported native apps only. Screenshot alerts depend on the operating system and the capture method. The web version does not detect screenshots. An alert does not identify who shared a capture, and external cameras remain outside detection.
Fingerprint verification
A capture with a readable, valid fingerprint can be linked to the account and UTC day displayed. This can support an internal review, but does not prove who captured or shared the image. Evidential value in formal proceedings depends on the applicable jurisdiction and procedural rules.
Full stack, in writing
No marketing claims. Here is every cryptographic primitive at every layer. Verify it in the Security Overview and reproduce it from the open specifications below.
Built to the standards auditors ask for
The controls below draw on published security standards and guidance. We document the cryptographic primitives and operational posture for review.
What we do, continuously
Not just the standards we follow — the operational posture we maintain over time, verified on every deployment.
How a session works
Four steps. Authentication required. Username is pseudonymous — no real identity required.
Initialize
Create a named session with a strong password. Your device unlocks your account's encryption key locally — the private key is never sent in plaintext.
Distribute
Share the session name and password out-of-band — verbally, or via a separate secure channel.
Communicate
Exchange end-to-end encrypted messages, images, audio, documents, and video. The server relays ciphertext only — it does not hold decryption keys.
Terminate
Close the session manually or let the 30-minute timer expire. Server-side session data is purged from server memory. Note: device-level or network-level capture by third parties may independently persist data.
Non-negotiable constraints
How 10 Seconds compares
| Capability | 10 Seconds | Signal | Telegram | |
|---|---|---|---|---|
| End-to-end encryption | NaCl + AES-GCM | Yes — personal chats | Yes | Secret Chats only |
| Server-side message retention | Live relay; no persistent history | Temporary delivery queues and media | Temporary encrypted delivery queues | Cloud Chats; Secret Chats device-specific |
| Auto-destruct messages | 10 / 15 / 20 seconds after display | 24h / 7d / 90d | Custom timer | Configurable in Secret Chats |
| Auto-close conversation session | 30-minute app countdown | No fixed room countdown | No fixed room countdown | No fixed room countdown |
| No phone number at signup | Yes | No | No | No |
| Personal-message decryption | On participants’ devices | On participants’ devices | On participants’ devices | On devices for Secret Chats |
| Account-linked watermark | Visible + fingerprint verification | No built-in account watermark | No built-in account watermark | No built-in account watermark |
Transparent pricing. Individual or Enterprise.
Pseudonymous crypto, invoiced card payment, or multi-seat packs for teams — same end-to-end encryption.
All prices are shown excl. VAT. Applicable VAT is calculated at checkout based on your country · Invoices issued by Sterling and Pierce Holding L.L.C-FZ, Meydan Free Zone, Dubai, UAE
Payment fees are borne by the client · Non-refundable after activation
Some conversations should not exist in a database.
10 Seconds is built for organizations and individuals who understand that true confidentiality requires a channel designed from the ground up for minimal data retention and end-to-end encryption.
Create a Secure AccountKeep your credentials safe. Personal accounts have no forgotten-password reset or encryption-key recovery. Team sub-account resets are managed by the workspace owner.