# Confer: end-to-end encryption for AI chats **URL:** https://discuss.privacyguides.net/t/confer-end-to-end-encryption-for-ai-chats/34439 **Category:** General **Created:** 2026-01-06T00:37:54Z **Posts:** 28 ## Post 1 by @pitly — 2026-01-06T00:37:54Z I have noticed a few “private AI”threads on the forum, but I hadn’t seen Confer mentioned yet. Moxie Marlinspike has recently released a few blog posts (like the following link) about an approach he is working on: [Private inference | Confer Blog](https://confer.to/blog/2026/01/private-inference/) --- ## Post 2 by @vincent — 2026-01-06T01:08:01Z I was curious to try this out, but it's kind of ironic that a privacy-focused service only has Google OAuth for authentication --- ## Post 3 by @fria — 2026-01-06T02:36:39Z Yeah, it’s a bit strange when they were talking about passkey-derived encryption. Maybe it’s not fully rolled out yet? Still it’s cool to see AI using confidential computing more and more. --- ## Post 4 by @Mossturtlecoffee — 2026-01-06T08:57:01Z Seems a bit expensive to me. Guest Get started with basic features $0/month 20 messages per day 5 active chats Basic AI model **Member** Full access with 2-day free trial **$34.99/month** Unlimited messages Unlimited chats Advanced AI models --- ## Post 5 by @shadowwwind — 2026-01-06T09:29:03Z Interesting to have moxie (the original developer of the signal protocol) take a shot at this, worth to follow at the least. The model can search the web and open web pages, I wonder how he achieves that privately, didn’t see it mentioned yet. > [@vincent](#): > > I was curious to try this out, but it’s kind of ironic that a privacy-focused service only has Google OAuth for authentication I could sign up with a normal email and then create a passkey. > **Off topic, passkeys on degoogled Android** > > Slightly annoying that on GrapheneOS without play services Vanadium is the only browser that supports passkeys with PRF. When Proton announced Lumo I thought this is what they did. Kinda disappointed in Proton there. --- ## Post 6 by @vincent — 2026-01-06T09:38:27Z Just checked it out again and noticed they’ve added email registration alongside Google OAuth, nice to see --- ## Post 7 by @fria — 2026-01-06T14:23:51Z I still don’t understand why email is needed, passkeys sync with your password manager across devices and don’t have any risk of being forgotten like passwords. A private AI shouldn’t be collecting any data. --- ## Post 8 by @shadowwwind — 2026-01-06T22:09:47Z Probably to prevent abuse considering it does have a free tier. --- ## Post 9 by @bearbanjopig — 2026-01-08T11:26:47Z I’d like to try this but I can’t figure out how. I use MacOS, Firefox, and Bitwarden. I can’t save a passkey. My YubiKeys aren’t Bio series so I can’t use those. I can’t use MacOS’s keychain because that requires iCloud, which I don’t use. Bitwarden isn’t supported. I think I could use a Chromium based browser and store the passkey locally in that? Any ideas? --- ## Post 10 by @anon61753997 — 2026-01-08T12:24:37Z Oh great, another AI chatbot that misuse the term “end-to-end encryption”. “Confidential computing” is not “end-to-end encryption”. :roll_eyes: I know what these companies are trying to do, but this marketing tactic leaves a sour taste in my mouth. > [@bearbanjopig](#): > > I’d like to try this but I can’t figure out how. > > I use MacOS, Firefox, and Bitwarden. I can’t save a passkey. My YubiKeys aren’t Bio series so I can’t use those. I can’t use MacOS’s keychain because that requires iCloud, which I don’t use. Bitwarden isn’t supported. I think I could use a Chromium based browser and store the passkey locally in that? > > Any ideas? Confer isn’t the only one offer this kind of service. You can [try Maple AI](https://trymaple.ai) instead. --- ## Post 11 by @shadowwwind — 2026-01-08T18:02:15Z In only tried proton pass which worked on Firefox om desktop and Vanadium --- ## Post 12 by @xe3 — 2026-01-08T20:47:36Z I’m quite interested in this (and the various other projects working on similar things [[1]](#footnote-132417-1). Currently it seems that details are very thin, and docs are seemingly non-existant. The [github](https://github.com/ConferLabs) is pretty barebones in terms of documentation and comments. I’m really hoping they will prioritize getting some docs written up and providing more detail. My interest is piqued because Moxie is involved, otherwise I think I’d be pretty dismissive of a project that chooses to release with sooo little documentation, or even an FAQ. This could be something cool and useful, but they need to put in the work documenting how it works and what it is. In terms of plans, currently the options are: - $35/mo paid plan = unlimited, and “advanced” (but unspecified) models - Free Plan = 20 queries per day, basic model (also unspecified) It frustrates me when projects won’t state what models they use. I don’t mind when it’s not publicized front and center in the UI, but it should be mentioned somewhere in the docs at least. * * * 1. For Example: [Maple AI](https://trymaple.ai) or [Nano-GPT’s TEE servers](https://Nano-GPT.com) or [PrivateMode.ai](https://privatemode.ai)) [↩︎](#footnote-ref-132417-1) --- ## Post 13 by @xe3 — 2026-01-08T22:38:00Z I’ve been poking around on their github, trying to get a better grasp of the building blocks, and possibly what models are being used. I’m not a developer, so my ability to interpret what I’m reading is quite limited. I’m seeing a lot of references to: 1. [vLLM](https://github.com/vllm-project/vllm) (a popular locally hostable inference backend[[1]](#footnote-132448-1)) 2. Together.ai (an LLM hosting provider[[2]](#footnote-132448-2)) 3. And various references to `OpenAIClient` 4. Web Search seems to be enabled by a service called [Tavily](https://github.com/tavily-ai) * * * 1. and alternative to llama.cpp, ollama, etc [↩︎](#footnote-ref-132448-1) 2. the same provider that Duck.ai uses [↩︎](#footnote-ref-132448-2) --- ## Post 15 by @Carey — 2026-01-09T21:34:19Z I have the same problem. Haven’t tried too hard to figure it out yet. It did appear to ignore my chosen password manager (BitWarden) and try to involve Apple’s Passwords app - which I don’t use and don’t want to use. --- ## Post 16 by @bearbanjopig — 2026-01-10T18:58:52Z ProtonPass on Firefox (on MacOS) worked. --- ## Post 17 by @anon16234852 — 2026-01-12T08:23:38Z It’s frustrating how these services never give you a simple ‘delete account’ option. --- ## Post 18 by @EinslowDownLow — 2026-01-12T19:02:59Z Out of curiosity are you attempting to add the passkey from a phone or computer? In my experience, the user experience can differ based on the device type. --- ## Post 19 by @Carey — 2026-01-12T19:16:13Z I was doing this on my computer (latest macOS). Sorry, should have said that. Also Firefox latest (w/ BitWarden). --- ## Post 20 by @EinslowDownLow — 2026-01-12T20:30:38Z I looked through the Bitwarden forum and there were posts on issues with the Firefox browser extension as recent as Dec 2025. ### The possible solutions mentioned: 1. Bitwarden employee mentioned the latest version that fixes this is 2025.11.2 (you mentioned you already updated - just sharing for awareness) 2. After updating, some users had to restart the browser before it worked 3. Make sure “Ask to save and use passkeys” is turned on. - this found in the browser extension: Settings \> Notifications \> should be a checkbox 4. Make sure no domains are listed in “excluded domains” - one user found google was excluded Does any of this help your situation? --- ## Post 21 by @DracoChartin — 2026-01-12T23:45:11Z Until they have homomorphic encryption where the entire inference computation is performed on encrypted data I don’t think it is legitimate to call any of these services end-to-end. --- ## Post 22 by @Encounter5729 — 2026-01-17T17:11:07Z It really isn’t. It’s essential end-secure\_node(decrypts),secure\_node(encrypts)-other end. I think there was an attack on servers recently using physical means. Really weird they say it’s end-to-end encrypted. --- ## Post 23 by @anon16234852 — 2026-01-17T18:55:11Z Until then, it’d be good just to get what you can ask an LLM. In practice, I could talk about pretty much anything with anyone. 99.9% wouldn’t get it, or if they did, they couldn’t care less. You shouldn’t give it any personal or secret info. You should let it do the work of 10 people in 30 minutes. I’m not at all surprised that a huge number of jobs are going to disappear. Customer service, all the paper-pushers, all the people processing applications. It sucks for a lot of people, but it’s true. I’m just surprised the transition is taking this long. And then once we get E2EE and enough power, the banking and legal sectors are definitely next. Of course, a human will review and make the final call. --- ## Post 24 by @yolakalemowa — 2026-01-18T08:09:48Z I just want to advise to take (the success ad sustainability of) these jobs losses with a grain of salt. In fact there’s evidence that most of these AI-onboarding decisions (usually built on hype) are decreasing efficiency not increasing it and is requiring a lot of “firefighting”. I totally forgot which companies’ were reporting this I read this report like a couple days ago. If I find I’ll post here. Gary Marcus is a source I recommend for keeping a balanced and skeptical head in the face of all the AI hype boom and doom. --- ## Post 25 by @anon16234852 — 2026-01-18T09:02:37Z Well, accomplishing all of that is quite straightforward, considering I can leverage it in a job that’s ten times more complex. The real issue is a shortage of skilled individuals; the rest are simply afraid for their job security. This situation, however, presents a wealth of opportunities for proactive people to figure out how all these processes can be automated. One shouldn’t resist artificial intelligence until the bitter end, especially since it has already taken the world by storm. Of course, you’re free to resist, but it would be prudent to seriously consider whether your own job could be performed by AI. --- ## Post 26 by @yolakalemowa — 2026-01-18T09:48:11Z I understand but I’m saying there’s compelling evidence to show that replacing humans with AI is not proving to be a good idea and not returning expected hyped results but the opposite. It’s not sustainable, and the firefighting costs make it not worth it. I’m just saying, CEO’s and Hiring Managers shouldn’t jump on bandwagons just yet without really being objective and not influenced by all the bubbly hype. --- ## Post 27 by @anon16234852 — 2026-01-18T10:06:36Z This is precisely a consequence of its improper utilization or application in unsuitable contexts. Klarna has acted correctly and redirected people to the appropriate channels. They’ve had the audacity to experiment, and upon realizing it was the wrong approach, they’ve reverted people back. > **[Klarna Reverses AI Push, Says Customers Prefer Human Support](https://www.forbes.com/sites/quickerbettertech/2025/05/18/business-tech-news-klarna-reverses-on-ai-says-customers-like-talking-to-people/)** > > Klarna is hiring human agents again after AI chatbots disappointed customers. Learn what this means for your business customer service strategy. Furthermore, my professional self and my private self are kept distinctly separate. And in fact, the reason I discovered this forum was that I was searching for tools to achieve encryption and security, as I was already paranoid about everything—and justifiably so, given the need to protect myself from so many threats. Now, I sleep peacefully at night. --- ## Post 28 by @gammexane — 2026-05-04T14:53:28Z Just wanted to share an update for those still trying to get in: you can now sign up/log in to confer.to using a recovery code instead of being forced into passkey setup right away. The issue isn’t passkeys in general; it’s the specific type of passkey that Confer uses. Confer leverages WebAuthn with PRF (Pseudo-Random Function) extension, which allows the passkey to derive encryption keys. This is essential for their E2EE architecture, but it’s still a relatively new feature and Bitwarden doesn’t support it yet: > **[Support for Storing PRF-Capable Passkeys in Bitwarden Vault](https://community.bitwarden.com/t/support-for-storing-prf-capable-passkeys-in-bitwarden-vault/82239)** > > Talking about the implementation of Passkeys where the Bitwarden Extension/App acts as the A in CTAP. (Authenticator) PRF support → For one of my accounts, I have Bitwarden master password in Bitwarden. I was planning on adding my Bitwarden as a...