Umbera for computers
Everything your phone can do, on a big screen.
Windows, macOS and Linux.
Windows 10 and 11 (64-bit), macOS 12 and newer on Apple Silicon and Intel, and Linux: Ubuntu 22.04, Debian 12, Fedora 36 and newer, from our repository, a .deb or an AppImage. Free.
Linked to your phone with a QR code.
Scan once, compare a 6-digit code on both screens, and your contacts, chats and photos move over, encrypted all the way.
Your account stays on the phone.
The computer gets its own keys. It can’t change your password or delete your account, so a lost laptop can’t take your account away.
All the features, nothing cut.
Chats, groups, voice and video calls, conferences, files, voice messages, disappearing messages, reactions, Communities, Vault and Shield.
Made for a computer.
Any window size or full screen, keyboard shortcuts, drag and drop files, right-click menus, a separate window per chat, spell check, tray icon and start with the system.
Notifications with reply.
Answer a message or a call right from the notification. Reading a chat on one device clears its notifications on the others.
App lock.
A code, a pattern, Touch ID or Windows Hello. The Umbera window can be hidden from screenshots and screen recordings on Windows and macOS.
Up to 4 computers.
Every device in your account sees an alert when a new one is linked, with a “That wasn’t me” button. An unlinked computer erases its chats and keys by itself.
Calls
Better calls on every device.
Share your screen in any call.
Voice, video or a conference. Pick a whole screen or one window, and share your computer’s sound too.
Move a call between devices.
Start on the phone and continue on the computer, or the other way round, without hanging up.
Even when Umbera is closed there.
A call you move rings on the other device like an incoming call — even if the app is closed, the phone is asleep or locked, or the computer window is in the tray. Accept, and the conversation carries on; decline, and it stays where it was.
Calls ring everywhere.
An incoming call rings on all your devices; answer on one and the others stop.
Send files during a call.
Messages, photos and files go through while you talk.
Background blur and a small call window.
Blur what’s behind you; keep the call in a small window on top of other apps.
Choose your microphone, camera and speakers.
Test them before a call and switch headsets while talking.
Post-quantum protection everywhere
Recorded traffic stays closed even to a future quantum computer.
Groups.
Group keys are now handed out with a post-quantum algorithm in every operation: inviting, adding and removing members. Existing groups switch over by themselves, with history intact.
Groups heal by themselves.
Each member regularly refreshes their own group keys, even when nobody joins or leaves, and every change of members and keys also carries a post-quantum signature.
Calls and screen sharing.
Every frame of sound and picture is encrypted a second time with a post-quantum key, new for every call.
Linking a computer.
The keys between phone and computer are agreed with classical and post-quantum algorithms together.
Messages and files: smaller and tighter.
Every envelope and every file key is sealed with two algorithms at once, now bound to the exact keys of that exchange, and a fresh post-quantum key is mixed in as you chat. The post-quantum capsule is no longer repeated in every message, so messages are much smaller.
Mailbox addresses change every week.
When both of you have the new version, the address your messages go to is derived from a post-quantum secret and changes every week, so the server can’t link this week’s traffic of a chat to last week’s.
A new safety number.
The code you compare with a contact now covers the post-quantum keys too. With contacts on older versions the familiar code is shown, so nothing breaks.
Group messages are harder to spot.
Each member’s envelope leaves in random order with a small random delay, so the server can’t easily tell from timing that they belong to one group.
Received videos can’t call out.
A file disguised as a video can’t make the media engine connect to someone else’s server: received media is opened only as a local file, so it can’t reveal your IP address.
Up-to-date building blocks.
The libraries in the app and on the server are updated to current stable versions, and the cryptography is checked byte for byte against reference results.
Tor and your IP address
Hide your IP address from our server, with a clear choice.
Offered on first launch.
Tor is off by default. On first launch Umbera asks whether to hide your IP address; you can change it any time in Settings.
A clear message when Tor can’t get through.
If our server can’t be reached through Tor, you see “Retry” and “Continue without Tor”. Nothing is sent directly unless you press it.
Separate Tor circuits.
On computers and Android, mailboxes are checked and messages are sent over several separate Tor circuits, so the server can’t tell from the connection that these mailboxes belong to one device.
On the phone
Quieter and more private.
Android without the permanent “Active” notification.
Messages and calls arrive by push, so there is no always-running service icon.
iPhone asks for the microphone only when needed.
Not at first launch, but right before your first call or voice message.
Chats and groups
Small things that make a difference.
React to your own messages.
Like in other messengers — on the phone and on the computer.
Create groups from the computer.
And they appear on your phone at once.
Several files at once.
Pick several photos, videos or documents in one go (up to 20 on the phone), or drop them onto the window on the computer, in a chat or a group. Each one is prepared like a single file — metadata removed, a random name — and you can cancel any of them while they wait.
Contact names on all your devices.
Rename a contact on the phone or on the computer, and the new name shows up on your other devices within seconds.
Export and import chats.
On the computer and on iPhone, save your chats to a file encrypted with your password, and load them back.
Group invitations always show up.
Fixed: an invitation could stay hidden while a contact request was put off with “Later”.
Communities and Vault on the computer
The full versions, not a light edition.
Communities.
Channels, posts with photos, video, files and voice, comments, polls, private channels and joining by link — with right-click menus and keyboard shortcuts.
Mute once, everywhere.
A muted channel stays muted on all your devices.
Your communities on every device.
Create, join, leave or delete a channel on the phone or the computer, and your other devices follow within seconds.
Vault.
Hide a message in a photo or video from your disk or webcam, and scan folders for messages meant for you. You can hide the Vault tab in settings.
Shield for your computer.
Checks what starts with the system and what has access to your camera, microphone and screen.
Meetings by link
Like the meeting apps you know, without giving yourself away.
Now or on a schedule.
Create a meeting, share a link or a QR code, and whoever opens it lands straight in the meeting in Umbera, on a phone or a computer.
Open or closed.
A waiting room for open meetings; in a closed one only the people you add get in, and a forwarded link won’t open for anyone else.
The same controls as a call.
Mute, camera, sound output, background blur, screen sharing, and moving the meeting between your phone and computer.
The key stays in the link.
The server sees only a random room number. Keys are agreed with X25519 + ML-KEM-1024. Part of Premium.
Premium
Simple and the same on every device.
Pay inside the computer app.
By card, SBP or USDT, without typing your login — the account is already known.
Premium follows your account.
Bought on the phone in the App Store or Google Play, it works on your computer too; paid on the computer or the website, it works everywhere.
Works with older versions
Nobody is left behind.
Old and new versions talk to each other.
Messages, files, calls, reactions and groups work between the new version and older ones. New protection switches on as soon as both sides support it.
Updating keeps everything.
Chats, contacts and your sign-in stay after the update, on Android and iPhone.
How it’s protected
The plain-language page explains where each kind of protection is and what the server knows. Developers will find formats and standards on a separate page.