Say anything.
Reveal nothing.
Haven for macOS is a native macOS messenger where your identity is a codename generated on your Mac - and every message rides cMixx, the xx network mixnet that shreds metadata. No one can see who you talk to, when, or from where.
Free public alpha · Requires macOS 26 or later
- No phone number
- No email
- Metadata shredded
- Open source
Features
Private by design, not by promise
Most “secure” messengers encrypt your words and quietly keep everything else - who you know, when you talk, how often. Haven for macOS is built so there is nothing left to collect.
Metadata shredded by cMixx
Every message is batched into a large anonymity set and mixed through a random team of xx network nodes. The link between sender and receiver simply ceases to exist.
Quantum-resistant encryption
cMixx protects message content with quantum-resistant cryptography, so today’s conversations stay private even against tomorrow’s computers.
A codename, not an account
No phone number, no email, no sign-up form. Your codename is generated locally on your Mac - no servers or databases involved. It can never be traced back to you.
Secret chats
Hide everything: the name, description, members, messages, and more. No one knows a Haven for macOS Chat exists unless they are invited.
DMs & QR contact cards
Direct messages are opt-in per space. Share your QR code and anyone holding it can message you directly - nothing else about you is ever exposed.
Native to the Mac
Built with SwiftUI and AppKit - not a wrapped website. Sandboxed, your identity locked in the Apple Keychain, messages stored locally on your disk.
How cMixx works
Encryption protects content.
cMixx erases context.
Even end-to-end encrypted apps leak metadata - who you talk to, when, and how often. Haven for macOS routes every message through the xx network’s cMixx protocol, the mixnet pioneered by David Chaum, the cryptographer who invented mix networks and digital cash.
Encrypt
Your message is encrypted on your Mac and handed to an xx network gateway.
Batch
The gateway gathers messages from many senders into a large anonymity set.
Mix
A randomly selected team of nodes re-encrypts and reshuffles the set, node after node - shredding timing, order, and routing metadata.
Deliver
The recipient’s app queries a gateway and picks the message up. No observer can link the two of you.
cMixx runs on hundreds of independent xx network nodes across 5 continents. Learn more about the xx network →
Screenshots
Feels like a Mac app. Hides like nothing else.
Community
Built in the open
Haven for macOS is open source and in public alpha. Come hang out, report bugs, or follow development.
Your conversations belong to you.
Download Haven for macOS, create a password, and claim a codename. Setup takes less than a minute.
Free public alpha · Requires macOS 26 or later