Encrypted & Access-Controlled
Cryptographic operations happen entirely in your browser. Only the intended recipient holds the key to decrypt—your server never sees plaintext.
Client-side cryptography
End-to-end encrypted · Ephemeral · Zero-trust
The world is
changing—
and that’s why
you need Bavlia.
Secure messaging built for high-trust communication. Messages are encrypted, access-controlled, and vanish once read—leaving no trace behind.
Communication has never been more exposed.
Surveillance is endemic. Data brokers harvest your conversations. Legacy messaging platforms log, retain, and expose what you say—often by design.
High-stakes conversations demand a fundamentally different tool: one where the infrastructure itself cannot betray you.
Zero
plaintext visible to the server
Gone
once read—messages self-destruct
Yours
only the recipient can decrypt
Core Pillars
Everything private. Nothing permanent.
Designed to Vanish
Messages self-destruct after being read. No logs, no lingering copies, no long-term exposure—just communication that disappears like it should.
Read-once ephemeral
Verified & Trusted
Verify your contacts with safety codes derived from cryptographic keys. Know with certainty that you’re speaking to the right person—no impersonation possible.
Contact verification
Mobile & Desktop
Install as a Progressive Web App on any device—iOS, Android, Windows, macOS—for a seamless, app-like workflow without app-store gatekeeping.
PWA — no app store
Architecture
Zero-trust by design.
Bavlia’s infrastructure routes encrypted payloads without ever accessing their meaning. Even if the server were compromised, your messages remain unreadable.
- Encryption and decryption run entirely client-side
- No plaintext transmission through backend systems
- Minimal retention—aligned with secure operations requirements
- Passkey authentication—no passwords to steal or phish
Process
Secure from the first handshake.
01
Create your account
Sign up with a username and register a passkey on your device. No passwords, no email required—just a secure credential tied to your hardware.
02
Keys established in-browser
Your device generates and manages cryptographic keys locally. No key material is ever sent to our servers.
03
Send with confidence
Messages are encrypted before leaving your device. The recipient—and only the recipient—can decrypt them.
04
Messages disappear
Once read, messages self-destruct. Nothing lingers. No conversation history to expose, no data to breach.
Documentation
How to use Bavlia.
Getting Started
Visit app.bavlia.com in any modern browser (Chrome, Safari, Edge, Firefox, Brave). Tap Create Account, choose a username and display name, then register a passkey using your device’s biometrics (Face ID, fingerprint, or PIN). That’s it—no email, no password.
Installing the App
Bavlia is a Progressive Web App. Install it for a full-screen experience, push notifications, and quick access from your home screen.
- Chrome / Edge (desktop): Click the install icon in the address bar, or use the three-dot menu > "Install Bavlia"
- Chrome (Android): Three-dot menu > "Add to Home screen" or "Install app"
- Safari (iPhone / iPad): Tap the Share button > "Add to Home Screen"
- Firefox: Menu > "Install" or "Add to Home Screen"
Starting a Conversation
Tap the New Chat button and enter the username of the person you want to message. This sends them a contact request. Once they accept, you can message each other freely. This system prevents unwanted messages from strangers.
Message Requests
When someone wants to message you for the first time, their request appears in your Message Requests inbox. You can Accept (start a conversation), Decline (reject silently), or Block (reject and prevent future contact).
Sending Messages
Open a conversation, type your message, and tap send. Every message is encrypted in your browser before being transmitted. The server only sees encrypted data it cannot read. Message status indicators show you when your message is sent, delivered, and read.
Disappearing Messages
Enable disappearing messages in any conversation to have messages self-destruct after the recipient reads them. Open a conversation, access its settings, and toggle Disappearing Messages on. Choose your preferred timer duration. Either participant can enable or disable this feature.
Contact Verification
Verify your contacts by comparing safety codes—unique strings derived from both participants’ encryption keys. If both people see the same code, the connection is verified and secure. Compare codes in person or via another trusted channel.
Push Notifications
Enable notifications in Settings to receive alerts when new messages arrive, even when the app is closed. Notifications are privacy-preserving—they say "New message" only, never showing sender names or message content.
Panic Wipe
If you believe your account is compromised, use Panic Wipe in Settings to instantly destroy all devices, encryption keys, push subscriptions, and sessions. This is irreversible—you will need to re-register your device afterward.
Blocking Users
Block users from a message request or from Settings > Blocked Users. Blocked users cannot send you requests or messages, and they are not notified. You can unblock users at any time.
Settings & Preferences
Access Settings from the gear icon in the navigation bar. Customize your display name, notification preferences, enter-to-send behavior, default disappearing message timer, and more.
Getting Support
Need help? Use the built-in support system. Go to Settings > Support or visit app.bavlia.com/support to submit a ticket. Choose a category and priority level, describe your issue, and an admin will respond. You can track your ticket status and reply to admin responses directly within the app.
Communicate with
confidence.
Messages are only accessible to recipients—and self-destruct once read.
iOS / macOS
Android
Windows
Install as a Progressive Web App — no app store required.