Start free

Feature

Encrypted, on every plan

The widget, the API and the realtime connection are all HTTPS and WSS. There is no non-encrypted mode to accidentally be in.

Start free14 days. No credit card.

No mixed content

An HTTPS page loading the widget stays HTTPS, so no browser warning and no blocked script.

On every plan

Including the free trial. Encryption is not a feature to sell.

Uploads too

Files are stored and served over TLS, through signed URLs that expire.

How it works

What is encrypted, and what that does and does not mean

  1. Everything is over TLS

    The widget, the API and the live message connection. On every plan, including the entry one, because a chat served over plain HTTP on an HTTPS page is blocked by the browser anyway and would be wrong even if it were not.

  2. It does not trigger a mixed-content warning

    A widget loaded over HTTP onto a secure page breaks the padlock for your whole site. That is a common way an embedded chat damages a site it was added to, and it cannot happen here.

  3. Credentials are not stored in a readable form

    Passwords are hashed, and API keys are hashed at rest. Nobody at Flyzoo can read yours back to you, which is why a lost key is replaced rather than recovered.

  4. What it is not

    Not end-to-end encryption. Messages are encrypted in transit and stored where we can read them, because features like moderation, history and the REST API require that. Anybody claiming both is describing something that cannot be true at once.

Questions

Is the chat end-to-end encrypted?
No, and no product offering server-side moderation, searchable history and an API can honestly claim it is. Traffic is encrypted in transit and access to stored messages is restricted. If end-to-end is a requirement, a group chat with moderation is the wrong shape of product.
Do I need my own certificate?
No. The widget is served from our CDN over our certificate, so there is nothing for you to install, renew or forget to renew.
Is TLS only on the paid plans?
It is on every plan. Selling encryption as an upgrade would mean selling an insecure product as the default.

Related

Your members are already signed inNothing to runSending a file, and a picture of the problem

Put a chat on your site this afternoon

One script tag before the closing body tag. Fourteen days free, and no card until you decide.

Start free14 days. No credit card.