Frequently asked questions
Questions and answers about OSL Privacy, grouped by topic.
About OSL #
What is OSL?
OSL is a desktop application that wraps the Discord client and adds end-to-end encryption to your messages. You install OSL instead of Discord, log in as normal, and any messages you send to whitelisted friends (who also have OSL) are encrypted before Discord sees them.
How is OSL different from Signal?
Signal is its own messaging app — separate identity, separate contacts, separate platform. OSL piggybacks on Discord — same identity, same servers, same conversations, just with end-to-end encryption added. If you want to talk to your existing Discord friends privately, OSL fits. If you want to start over with a separate secure-messaging identity that hides metadata too, Signal is the right tool. See our threat model for a fuller discussion.
Why publish the crypto code?
Privacy claims are only as good as the code behind them. If the encryption is wrong, no amount of marketing fixes it. So the cryptographic primitives, the ratchet, the key store, and the wire format are published on the Audit page. You can read or download them yourself. The Discord integration and keyserver stay closed because those are the business; the crypto isn't.
Does OSL work on mobile?
Not yet. OSL is desktop-only at launch — Windows specifically. macOS and Linux are planned for later. Mobile (Android/iOS) is on the longer-term roadmap but isn't committed.
Privacy & Security #
What encryption does OSL use?
X25519 elliptic-curve key exchange combined with ML-KEM-768 post-quantum key encapsulation. Direct messages are sealed per-message to the recipient's published keys; group chats and server channels use Sender Keys. See how OSL works for details.
Why is post-quantum encryption important?
State-level adversaries are recording encrypted traffic now to decrypt later, once quantum computers catch up. ML-KEM-768 is a post-quantum key-encapsulation mechanism designed to resist that, and OSL pairs it with X25519 in a hybrid — so your messages stay protected even if one of the two algorithms is later broken.
Can my friends read encrypted messages without OSL?
No. OSL recipients need OSL installed to decrypt. Anyone without OSL — your friend, Discord itself, anyone reading the raw Discord database — sees ciphertext only.
Can I encrypt voice/video calls?
No. OSL only encrypts text messages and attached images. Voice and video calls still flow through Discord's normal infrastructure with Discord's own encryption.
What if I forget my password?
Your encrypted history becomes permanently inaccessible. There is no recovery. The password is what unlocks your keys; without it, your data is just random bytes on disk. Write your password down somewhere safe.
What happens to my data if OSL shuts down?
Your data stays on your computer. OSL doesn't host anything — we never had your keys or messages to lose. If we disappear tomorrow, your existing data stays decryptable as long as you have OSL installed and remember your password.
Installing & Using #
Will OSL get my Discord account banned?
OSL modifies the Discord client locally. Discord's terms of service technically prohibit client modifications. We're not aware of any bans related to OSL specifically, but use it at your own risk. If you have a Discord account you can't afford to lose, weigh the risk.
Why is there a Windows security warning?
SmartScreen flags new applications from independent developers until enough users have run them to establish reputation, or until the developer pays for an extended-validation code-signing certificate. We're working on the certificate. See the explanation on the download page for how to proceed past the warning.
Can I use OSL on multiple devices?
Each OSL installation generates its own keys, so different OSL installs see different ciphertext for the same Discord conversation. Multi-device sync is on the roadmap. For now, OSL is best used from a single primary computer.
Can I export my encrypted messages?
Not currently. Local export to a portable encrypted archive is on the roadmap.
What happens when I uninstall OSL?
OSL leaves your encrypted message store on disk by default — if you reinstall, your history comes back as long as you remember your password. To delete the data entirely, remove the OSL data directory after uninstalling. The installer's uninstall flow has a "remove all data" option.
Is there a beta program?
We'll announce a beta program before public launch. Sign up on the landing page to be notified.
Pricing & Support #
Is OSL free?
Yes. The free tier gives you unlimited encrypted text messaging with no time limits and no ads. The paid tier — $5/month or $50/year — unlocks sending encrypted attachments and early access to new features via the beta channel. Free users can still receive and decrypt encrypted attachments sent by paid users.
What does "burn" mean in OSL?
OSL has four ways to make messages disappear on demand. View-once messages can only be read by the recipient one time. In-memory-only mode keeps a message in RAM but never writes it to disk, so it's gone when the app closes. Remote wipe lets you delete a sent message from all recipients after the fact. Full history nuke wipes your entire OSL message store in one button. All four are manual — you decide when to burn. Auto-expiring messages (time-bombed) are planned for a future release.
What exactly do I get for paying?
Two things. First, you can send encrypted attachments — images, files, anything you'd attach to a Discord message — fully encrypted on your end, decrypted only by the recipient's OSL. Free users can still receive and decrypt attachments sent by paid users, so paying friends and free friends can talk to each other normally. Second, paid users get beta channel access — earliest access to new features before they're released to everyone.
How do I report a bug or request a feature?
Email OSLPrivacy@gmail.com with a description of what you saw and what you expected. Include the OSL version (visible in the about screen) and your OS version. For features, the more context on what problem you're trying to solve, the better.