A messenger with no servers, no phone number and no account.
What it is
An end-to-end encrypted messenger for iPhone, Mac and Android that works without any server. Nearby, it needs no internet at all: messages travel over Bluetooth and Wi‑Fi and hop across up to six devices to reach someone out of range. Further away, it can reach anyone in the world through Tor.
There is no phone number, no email and no account. Your identity is a key made on your own device.
The absence of a server is the security guarantee.
Principles
- No servers, ever. Devices talk to each other directly.
- No identity leakage. Nothing ties you to a phone number, an email or a name.
- Real cryptography, not “good enough”. The full Signal Protocol with sealed sender, and MLS for groups.
- Few dependencies. Every dependency is an attack surface.
- Open, auditable code. Security that can’t be verified is only a claim.
Who it is for
People in a disaster, when the network is down and Bluetooth is all that’s left. And anyone who would rather not hand over their phone number.
Built with
Swift and SwiftUI for iPhone, iPad and Mac; Kotlin and Compose for Android; and a small Rust library for MLS group encryption.
Underneath: X3DH and the Double Ratchet with header encryption, sealed sender, safety numbers you can compare by QR code, and a duress PIN that opens a decoy app.