How Self-Destructing Messages Work

'Self-destructing' sounds like magic, but under the hood it's a mix of two simple mechanisms: when a message is deleted, and how much of it the server can see while it lives. Understanding both will save you from overestimating your privacy.

The deletion model

There are two common triggers for deletion. Timer-based messages expire after a fixed window and can be reopened during it. Burn-after-reading messages are destroyed the first time they're viewed. Most services use one or the other; some let you combine both.

Khamli uses a timer: you choose 30 minutes, 2 hours, 12 hours, or 24 hours, and the message plus its code are hard-deleted when the timer ends.

What 'deleted' means

A good service hard-deletes the record — removing it from the database and any file storage — rather than soft-deleting (marking it hidden) or archiving it. Khamli hard-deletes database records and removes S3 objects, with no backup that retains data beyond expiry.

Encryption: transit vs. end-to-end

• Encryption in transit (HTTPS/TLS) protects the message between your browser and the server.
• End-to-end encryption protects it the whole way, so the server itself can't read the plaintext.
• Most simple services — including Khamli — encrypt in transit but store plaintext server-side until deletion.

Zero-knowledge tools like PrivateBin and Yopass go further, encrypting in the browser so the server only ever holds ciphertext. That's stronger privacy, at the cost of convenience and often file support.

What self-destructing doesn't do

• It doesn't stop the recipient from screenshotting or copying the message before it expires.
• It doesn't make the message invisible to anyone who has the code during the window.
• It doesn't help if the message was shared through an insecure channel.

The takeaway: self-destructing messages shrink the window of exposure, which is genuinely useful — but they're not a substitute for good judgment about what you share. See how to send a self-destructing message for a practical guide.