Hush support
For support, bug reports, or App Store review follow-up, contact RobertCorbin84@gmail.com.
Common questions
Do I need an account?
No. Hush works without sign-in or account creation. There is no server.
Does my message leave my device?
No. Encryption and decryption happen entirely on your device. Hush does not send your messages or your secret anywhere. The encrypted text only goes wherever you choose to paste or share it.
How does Hush encrypt my text?
Hush uses AES-256-GCM authenticated encryption from Apple CryptoKit. Your secret phrase is turned into a key using PBKDF2-HMAC-SHA256 at 600,000 iterations, with a random salt and nonce generated on device.
What is the difference between HUSH1 and HUSH2?
HUSH2 is the current format and uses the stronger PBKDF2 key derivation. HUSH1 is the older format from earlier versions. Hush still decrypts HUSH1 messages automatically — it detects the format from the prefix — so messages you received before updating still work. New messages you create are written as HUSH2.
What makes a strong secret?
A multi-word passphrase is far stronger than a short word or a number. Tap Suggest to generate a six-word phrase from the EFF diceware wordlist, and watch the strength meter as you type. Avoid quotes, names, or anything guessable.
I lost or forgot the secret. Can you recover my message?
No, and neither can we. Hush has no backdoor, no master key, and no reset by design. Without the exact shared secret a message cannot be decrypted by anyone, including the developer. Keep your secret somewhere safe.
Decryption failed. What went wrong?
Either the secret does not match, or the encrypted text was cut off or altered. Hush tells you which: a wrong-secret message means the text looked complete, and a "couldn't read that text" message means the package was incomplete. Make sure you copied the entire string including the HUSH prefix.
Where are saved secrets stored?
In the iOS Keychain on this device only. They are never synced to iCloud and are protected by Face ID, Touch ID, or your passcode. You can delete any saved secret at any time.
Does Hush track me or show ads?
No. Hush has no analytics, no advertising, and no tracking. It collects nothing.