secure-os.org
All guidesQubes OSTailsWhonixHardened LinuxDisk encryptionThreat model
messaging

Darkup: A Signal-Based Messenger Locked to a Hardware Key

secure-os· Updated July 3, 2026· 4 min read #messaging#encryption#hardware key#privacy#signal
A brass padlock with its key inserted, resting on a metal chain

A new French messaging app called Darkup takes a bold stance: your identity lives on a physical security key, not on your phone. Coverage from Clubic in 2026 and the project’s own site (darkup.io) describe encrypted messaging and calls with no phone number and no email. This is a fresh, niche, founder-stage project, so the sections below treat its features as claims to check, not proven facts.

If you want the wider landscape first, read our honest best encrypted messaging app guide.

What Darkup claims to do

According to Darkup, the app offers end-to-end encrypted messages and calls, with no phone number and no email required to sign up. There is no personal data asked at registration. Your identity is instead locked to a physical hardware security key. Without that key, the content stays unreadable. Darkup says even an unlocked phone is not enough to place calls without the key present.

Under the hood, Darkup states it uses the Double Ratchet algorithm, the same cryptography that powers Signal. Each message gets its own key, which is thrown away right after use (according to Darkup). This is a well-regarded design, but note that using the same algorithm as Signal is not the same as being audited like Signal.

A person typing a message on a smartphone

The hardware key angle

Most messengers tie your account to a number or an email. Darkup ties it to a physical security key you hold. The idea: your identity cannot be copied off a server, because the secret lives in your hand. A physical security key (the broad category that includes devices like a YubiKey) is a common second factor elsewhere. Darkup’s twist is making the key the core of the identity, not just an extra step.

The upside is clear on paper. If the identity needs the key, a stolen or unlocked phone still cannot read the content or place calls (as Darkup describes it). The trade-off is just as clear: lose the key and you may lose access, and you now carry a physical object you must protect.

How much it costs

Pricing, according to darkup.io, works like this:

  • A one-time entry cost that covers the physical key.
  • Then 3 months free.
  • Then a monthly subscription for access to the encrypted infrastructure.
  • You can stop whenever you want and keep your key.

After the first 200 founder spots, the plan is listed at 14.90 EUR per month. That is a paid, subscription model, unlike Signal, which is free.

How it stacks up against Signal

It is worth being blunt here. Signal is open source, independently audited, free, and used by a very large network. Darkup is new, niche, and at the founder or launch stage. It borrows Signal’s Double Ratchet cryptography, but it has not yet been proven in the way an established, audited app has. There is no public audit, user count, or track record to point to yet.

So Darkup is an interesting bet, not a drop-in replacement for a proven tool. The hardware-key identity is a genuinely different design. Whether it holds up depends on review and time that have not happened yet. For a broader comparison of established options, see Signal vs WhatsApp.

The limit no messenger solves alone

Even a messenger that locks identity to a hardware key does not hide which network you connect from. Your ISP and local network can still see that you are online and where your traffic goes, even when the message content is unreadable. Encrypting the chat is only half of private communication. The network is the other half.

The bottom line

Darkup is a new, founder-stage French messenger that locks your identity to a physical security key and uses Signal’s Double Ratchet cryptography (according to Darkup and 2026 coverage). It asks for no phone number and no email, and it runs on a paid model that starts at 14.90 EUR per month after the founder spots. It is a fresh idea worth watching, but it is not yet proven next to an open, audited, free option like Signal. Try it as an experiment, not as a replacement for a tool with a track record.