Anyone can publish audio. Voice Seal lets you go one step further: when you publish a voice post, you can ask the network to measure the audio against your enrolled voice and co-sign the result. Listeners see a chip that says exactly what was measured — "sealed voice · matched enrolment" — no more, no less.
Sealing is a choice you make per post. When you publish a voice post and ask for a seal, the audio you're publishing is sent to our verification service — the same server-side system behind the live voice badge — which measures it against your enrolled voiceprint and scores the match on our side, with our model, under our threshold policy. If it matches, the service co-signs the result into the post.
A voice post, like any other
"Seal this as my voice" — per post, never automatic
The audio is scored against your enrolment, on our servers
Yours + ours, sealed into the post
A seal is deliberately made of two separate signatures, because they answer two separate questions:
Anyone can check both signatures. And the "matched enrolment" verdict is ours to grant — it is computed on our servers and never accepted on the publisher's say-so. Our audit history taught us that rule the hard way: the signer is the adversary, so no field the publisher computes can ever drive the chip.
A sealed post carries a chip stating exactly what happened: the voice in this post matched the publisher's enrolled voiceprint when it was published. An unsealed post carries nothing — no warning, no penalty. Sealing is a claim you add, not a test you fail.
Both signatures check out: the account signed it, and we measured a match against the enrolment it was sealed under.
The account's signature holds, but the measurement no longer stands — for example, the account has re-enrolled a new voiceprint since. The seal degrades honestly instead of pretending.
Most posts. No claim was made, so no claim is shown. Speech never needs a seal to be published.
A seal is bound to the enrolment it was measured against. If you replace your voiceprint, old seals degrade to "signed" — a measurement can't outlive the thing it measured.
We want this chip to be trusted, which means being exact about what it says:
The measuring-and-signing service is built, live, and independently audited — including adversarial fuzzing of the envelope format with zero exemptions. The publish-flow UI is rolling out to the app. We ship the claim only when the whole path is as solid as the copy on this page.