Umbra fuses a CPU-mineable coin, an end-to-end encrypted messenger, and a decentralized VPN onto one chain. One 12-word seed unlocks all three. No phone number, no email, no account.
Live on mainnet since genesis 2026-07-10. Every claim on this page is verified against source.
Apps get banned. Platforms get pressured. Chats get subpoenaed. Payment rails get frozen. Umbra is designed so there is nothing to pressure and nothing to switch off.
Umbra is not a service you sign up for. There is no headquarters to raid, no CEO to pressure, no terms of service to quietly change. The software is the network, and the network belongs to the people running it.
Every masternode is the infrastructure: it relays messages, stores mail, mixes traffic, and serves VPN tunnels. Knock any node offline and the rest carry on. Blocks keep landing every 20 seconds.
No phone number, no email, no ID check. Your entire account is 12 words in your head. Names are claimed on-chain with commit-reveal, so nobody can seize yours or take it from you.
Sealed envelopes, constant packet sizes, mixed 3-hop routes, private lookups. An observer on the line sees uniform noise between strangers, not who is talking to whom.
Censorship needs a single point to seize. Umbra does not have one.
UMB is a proof-of-work coin with 20-second blocks. The algorithm is yespower: memory-hard and CPU-friendly, so ordinary hardware mines real blocks. No ASIC farms, no head start.
Signal-grade cryptography, X3DH and the Double Ratchet, wrapped in something Signal doesn't have: a Sphinx mixnet that hides who sent the message, and private lookup that hides who you searched for.
This is the client's actual sealing pipeline, operation by operation, with the exact byte layout that hits the wire. The example keys below are generated fresh in your browser on every replay. Nothing here is simplified away.
13 bytes of plaintext. It never leaves your device in this form. Everything that follows happens locally, before a single packet is sent.
A brand new keypair for this one message. It is never reused, so no two envelopes can be linked by their keys. The private half is thrown away after sealing.
Diffie-Hellman on Curve25519. Only her private key can reproduce this number. An all-zero result is rejected outright: the low-order point guard.
One secret becomes two keys via HKDF-SHA256 with the domain label umbra-msg-v1. The detect tag lets her client spot mail addressed to her without decrypting anything.
ChaCha20-Poly1305 seals the payload. The AAD binds the ephemeral key and the detect tag into the ciphertext, so tampering with the envelope breaks authentication. A 16 byte auth tag is appended.
89 bytes on the wire for this message. No sender name, no sender key, no addressee on the envelope. Only her private sealing key can open it.
Traditional VPNs ask you to trust one operator with everything. Umbra splits the trust: your traffic tunnels through two independent masternodes, and neither one sees the whole picture.
Entry node: knows your IP, sees only encrypted cells.
Exit node: sees your destination, has no idea who you are.
Payment: on-chain subscription, 20% burned to OP_RETURN.
One seed derives three purpose-built keys through domain-separated derivation. Money, signatures, and sealing never share a key, but they all come home to the same twelve words.
Claim a name on-chain and @yourname resolves to your payment address and your chat keys at once. Registration is commit-reveal, so nobody can front-run the name you picked.
Masternodes relay messages, store mail, mix traffic, and serve VPN tunnels. In return they take 35 percent of every block, plus a 15 percent storage node reward weighted by tier.