All messages are secured with client-side Web Crypto PBKDF2/AES-GCM encryption. Nudges shake the recipient screen in real-time DMs.