Lavaboom’s warrant canary has expired

Bad news for anyone trusting Lavaboom for their secure, encrypted communications.

The online service, which dangled the tempting offer of being “the first secure email service that’s truly easy to use” and sadly failed to reach its $100,000 goal in a crowdfunding campaign earlier this year, is over two weeks late in updating its warrant canary.

Lavaboom canary

We have never given away user data. This will be updated on the 1st of every month. This information is correct as of July 1st 2015.

Sign up to our free newsletter.
Security news, advice, and tips.

Sadly, we’re well into August now.

This isn’t something which inspires confidence in a service which was designed with the thought of keeping secure communications out of the hands of law enforcement agencies.

My guess, following the unsuccessful crowdfunding, is that the reason the canary has not been updated is not so much that they have received the unwanted attention of the NSA or other surveillance agency, but rather that that they simply don’t have the funds to continue to operate.

That’s a view shared by some commenters on Reddit.

If this is the case, then I feel sorry for the Lavaboom guys who obviously tried hard to capture the public’s imagination and support – but ultimately weren’t successful. The least, however, they could do is keep their users informed as to the status of the project so no-one jumps to the wrong conclusion.

Regardless, it sounds to me like Lavaboom has just become Lavabust.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "The AI Fix" and "Smashing Security" podcasts. Follow him on Bluesky, Mastodon, and Threads, or drop him an email.

One comment on “Lavaboom’s warrant canary has expired”

  1. linleya

    Actually Lavaboom went to the wall in August, and the technology which acquired by Invacio who have since integrated it in to Invacio as well as re-launched the stand-alone product as Invmail, They soon expect to offer the same facilities from within Invacio in Invmail Including ZN secure voice / video calls and messaging. I received the invite last week, and its running fantastically – https://www.invmail.io

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.