The world's most private messenger. End-to-end encrypted, always Tor-routed, and engineered for journalists, dissidents, and anyone who refuses to be the product.
Every feature is designed assuming the network is hostile, the device is compromised, and the adversary is watching.
Route messages through Tor or I2P — two independent anonymity networks, both embedded directly in the app. No Orbot, no third-party router required. You choose; the engine is always ready.
Hybrid key exchange combines the proven Signal protocol with post-quantum lattice cryptography. Messages are safe against both classical and quantum adversaries — today and in the future.
Self-destructing conversations with Double Ratchet forward secrecy. Every message uses a fresh encryption key — past messages stay unrecoverable even if your device is seized tomorrow.
Constant-rate cover traffic masks real message patterns using Poisson-distributed dummy messages. Adversaries watching the network cannot distinguish silence from active conversation.
Real-time voice calls with per-call XChaCha20-Poly1305 frame encryption over WebSocket relay. Keys are ephemeral and never stored. Caller and callee IDs are sealed from the relay.
Enter a second PIN under coercion to instantly wipe all sensitive data and surface a clean decoy account. StrongBox-backed keys mean wiping is cryptographically irreversible.
Tapping a URL in any chat never opens your default browser. A dialog appears with "Open via Tor" — routing the request through the embedded Tor engine so the site never sees your real IP address.
Every message follows the same path — encrypted before it leaves your device, unreadable everywhere in between.
Plain message
On your device
Onion relays
Peer decrypts
Zero trace
Android only for now. Choose the install path that matches your threat model.
Trust is earned through transparency, not claims.
Every line of code — app, relay, crypto core — is public on GitHub under AGPL-3.0. Anyone can read, audit, and fork it.
The APK you download hashes identically to the APK built from source with the same commit. Verify it yourself — the commands are on the download page.
We publish a monthly signed statement that we have not received secret legal orders. If the canary stops being updated, treat it as a warning.
Every release is signed by GitHub Actions via Sigstore. The signing event is logged in the public Rekor transparency log — you can verify the provenance chain yourself.
No Sentry, no Firebase Crashlytics, no Google Analytics, no Mixpanel, no advertising IDs. Adding any of these is a build-time rejected change.
External audit by a specialist firm (Cure53 / Trail of Bits / Quarkslab) is in procurement. Findings will be published in full when complete.