Guides

How to encrypt a message before you send it, in 20 seconds

A plain guide for anyone who wants to send a text that only one other person can read, using the apps they already have, on iPhone or Android.

Updated 7 October 2026

The short answer

Install HushHush on both phones and pair once, in person, by scanning a QR code. Type your message in HushHush and tap send: it is encrypted on your phone and the ciphertext is copied. Paste it into any app, whether SMS, WhatsApp, Slack or email. The other person copies the text and taps Paste in their HushHush to read it. The app in between only ever carries ciphertext. No account, no phone number, no server.

What encrypting before you send actually changes

Most messaging apps encrypt the connection between your phone and their server. The server, and whoever runs it, can still read the message. Some apps go further and encrypt end to end: as Element's help page puts it, the message is encrypted before it leaves your device and stays encrypted until it reaches the other person's. Whether you get that depends on the app and the chat. WhatsApp's privacy policy says it offers end-to-end encryption. Telegram's FAQ says only Secret Chats are encrypted device to device; ordinary cloud chats are encrypted between you and Telegram and stored on its servers.

Encrypting before you send takes the app out of the question. The text becomes ciphertext in HushHush, on your phone, with keys that only you and one other person hold. Whatever you paste it into sees a block of letters and numbers. If that app is end-to-end encrypted, your message is now wrapped twice. If it is not, or its admin can export chats, or its backups land in a cloud you did not choose, the copy they hold is still ciphertext.

It is not invisible. Ciphertext looks like ciphertext: anyone who can see the chat can tell that something encrypted was sent, when, to whom and roughly how long it was. What they cannot get is the words.

WhatA normal message in any appWith HushHush
The words you typeVisible to the app, unless it is end-to-end encryptedCiphertext only
Who you message, and whenYesStill yes
Admin export, backups, server copiesContain the textContain ciphertext
How long the message isYesRoughly, from the ciphertext
The other person needs to install somethingNoYes, HushHush on both phones

The steps, in detail

1. Install HushHush on both phones

It is on the App Store and Google Play. Each of you sets a password. It is never stored anywhere, not even on the phone; it only opens your HushHush, the encrypted store where your contacts, keys and messages live.

2. Add a contact, in person

Meet. One of you taps Add contact and shows a QR code; the other scans it. That scan is the whole set-up: the two phones now share the keys they need, and nothing leaves the room. There is no directory and no invitation link, so nobody who was not there can be in the pairing. To be certain, compare the safety number HushHush shows you both.

3. Type it and tap send

Open the contact, write the message, tap send. HushHush encrypts it with four independent ciphers, in an order reshuffled for every message, and copies the result. Your clipboard now holds ciphertext, not your words.

4. Paste it into the app

Switch to SMS, WhatsApp, Slack, Telegram, email, whatever you use with that person. Paste. Send. That app stores and carries a block of ciphertext, as it would any other text.

5. The other person taps Paste

They copy the block out of the chat, open HushHush and tap Paste. It is decrypted on their phone and appears in the conversation inside their HushHush. To reply, they do the same in reverse. With a little practice the round trip takes about twenty seconds.

Or let it send itself

If you both connect Telegram, Matrix or email inside HushHush, you can skip the copying: messages are encrypted in HushHush, delivered over that channel and decrypted automatically at the other end. One-to-one chats on this route also get forward secrecy, so every message uses a fresh key and a key captured later does not open earlier messages. The channel still only ever carries ciphertext.

How HushHush helps

HushHush encrypts the text on your phone before it goes into the app you send with. That app carries only ciphertext, and the other person decrypts it in their HushHush. Both people need the app and one in-person pairing.

Step 1

Pair once, in person

Open HushHush, add a contact, and scan the QR code on the other phone. No account, no phone number, no server.

Step 2

Type it in HushHush

Write the message and tap send. It is encrypted on your phone and copied as ciphertext.

Step 3

Paste it into any app

The app carries the ciphertext. Your contact pastes it into HushHush to read it. Or connect Telegram, Matrix or email and it is sent and decrypted automatically.

What HushHush does not do. It does not hide who you talk to or when: the app you paste into still sees the ciphertext, its length and the time. Both people need HushHush. It protects text, not the carrying app's own calls or other features. And it does not make an app private that was not: it makes one message unreadable to it.

Frequently asked questions

Can you encrypt a text message?
Yes. SMS has no encryption of its own, so you encrypt the text before it goes into the Messages app. With HushHush you type the message, tap send, and paste the ciphertext into an ordinary SMS. The other person pastes it into their HushHush to read it. The carrier and both phones' message stores only ever hold ciphertext.
How do I send an encrypted message to someone?
Both of you install HushHush and pair once, in person, by scanning a QR code. Write the message in HushHush, tap send, and paste the ciphertext into whatever app you normally use with that person. They copy it and tap Paste in HushHush. If you have both connected Telegram, Matrix or email inside HushHush, it is sent and decrypted automatically instead.
Is encrypting a message the same as end-to-end encryption?
End-to-end encryption is something an app does for you, between its own users, if it offers it. Encrypting before you send is something you do yourself, so it works in any app, including ones with no encryption and ones whose admins can export chats. The two are not exclusive: a HushHush message pasted into an end-to-end encrypted app is wrapped twice.
What is the easiest way to encrypt a message?
The easiest honest route is an app that encrypts on your phone and hands you the ciphertext to paste. HushHush does that in three taps once you have paired in person. Public-key tools such as PGP work too, but both people must manage keys and software, which is where most people give up.
Can the other person read it without HushHush?
No. The message is encrypted with keys that exist only on the two paired phones, and only HushHush can use them. The recipient needs HushHush installed and paired with you in person. Opened in any other app, the ciphertext is a block of random-looking characters.

Encrypt it before any app sees it.

HushHush is on the App Store and Google Play. Pair in person, then send in any app.

Related

Sources

  1. Element help and support, Element, accessed 7 October 2026.
  2. WhatsApp Privacy Policy, WhatsApp, accessed 7 October 2026.
  3. Telegram FAQ, Telegram, accessed 7 October 2026.