Security

    Apps with self-destructing messages

    How disappearing messages work in Signal, WhatsApp and Telegram, what each timer actually deletes, what none of them stop (screenshots, forwards), and when a one-time link fits better.

    LinkPilot Team · About LinkPilot

    "Self-destructing messages" means different things in different apps. In Signal and WhatsApp it is a timer on a chat. In Telegram it is a feature of Secret Chats. In iMessage it does not exist beyond a short unsend window. And in every app, the timer governs how long the message sits in the conversation, not what the other person does with it while it is there. This post explains each app's version, from the vendors' own documentation on 19 October 2026, and then where a one-time link does a job none of them do.

    Signal

    Signal's disappearing messages are set per conversation and apply to both sides. The timer counts from when each person has seen the message, so the sender's copy and the recipient's copy can disappear at different times. Signal's documentation lists timer options from seconds to weeks and lets you set a default timer for all new chats. It also says plainly that the feature is for keeping chats tidy on devices you both trust, and that a recipient can still screenshot or save a message before it goes.[1]

    Best for: everyday chats you do not want accumulating on either phone, between people who already trust each other.

    WhatsApp

    WhatsApp's disappearing messages are also per chat, with preset timers (24 hours, 7 days or 90 days at the time of writing) and a default you can apply to new chats. The timer starts when the message is sent, not when it is read. WhatsApp's help page notes that a message can be forwarded or saved before it disappears, that a recipient who has not opened WhatsApp may still see it in a notification after the timer, and that disappearing messages can end up in a backup if the recipient backs up before the timer fires.[2]

    Best for: group chats where you want a rolling window rather than a permanent record.

    Telegram

    Telegram's timer lives in Secret Chats, which are end-to-end encrypted, device-specific and "not part of the Telegram cloud". The self-destruct timer "is available for all messages in Secret Chats and for media in private cloud chats"; the clock starts when the recipient has seen the message, and the message then disappears from both devices. Telegram tries to notify you of screenshots but says there is "no bulletproof way of detecting screenshots on certain systems". Regular cloud chats, the ones most people use, are not covered by the message timer.[3]

    Best for: a one-to-one conversation you deliberately start as a Secret Chat. Easy to forget that your normal Telegram chats are not secret.

    iMessage, and the rest

    iMessage has no disappearing-message timer. You can unsend a message within a short window after sending and delete your own copy; the recipient's copy stays unless they delete it. Snapchat is built around viewing once and tells senders about screenshots; Instagram DMs have a vanish mode. Treat all of these as convenience features, not controls.

    What none of them stop

    • Screenshots and photos of the screen. Every vendor says so.
    • Forwarding before the timer. A message forwarded out of a disappearing chat lives on in the destination chat.
    • Backups and notifications. Copies can survive in a device backup or sit in a notification after the chat has deleted them.
    • The other device. The message is readable on the recipient's whole phone for the timer's length, by anyone who picks it up.

    A timer limits exposure in time. It does not limit who can read a message while it exists, and it does not tell you whether it was read.

    For a password, an [API key](/glossary#api-key "Glossary: api key"), a recovery code or anything you would rather nobody could re-read, the shape you want is different: one reveal, by the person holding the link, then nothing left to find. That is what a one-time secret link does. The content is encrypted in the browser before it is sent; the link is the only key; the first open destroys the stored copy; a link sent by email, Slack or SMS is worthless once used. On a paid plan you also get a record of when it was opened and a way to revoke it unopened.

    Two free tools, no account needed: the self-destructing message generator for a note or message, and the one-time secret link generator for a password or key. For the full comparison of chat, email, password managers and one-time links, read secure password sharing for teams.

    Use the chat app's timer for the conversation. Use a link for the secret inside it.

    References

    [1] Signal Support. Set and manage disappearing messages. https://support.signal.org/hc/en-us/articles/360007320771-Set-and-manage-disappearing-messages. Checked 19 October 2026.

    [2] WhatsApp Help Center. About disappearing messages. https://faq.whatsapp.com/673193694148537. Checked 19 October 2026.

    [3] Telegram. FAQ: Secret Chats and self-destruct timers. https://telegram.org/faq. Checked 19 October 2026.

    Tools mentioned in this article

    Frequently asked questions

    LinkPilot sends a secret link that is gone after it is opened.

    Encrypted in your browser, revealed once, then destroyed. No account needed.

    Create a secret link

    Read next