WHISPR · PRIVATE BY DEFAULT

Your messages,
only yours.

A messenger that doesn't need an account, a phone number, or even an internet connection. Encrypted end-to-end before it ever leaves your device.

Free · encrypted · never on a server.

End-to-end encrypted via the Signal Protocol · X3DH + Double Ratchet · see the architecture →

01 FEATURES

What it does

Six features that aren't features anywhere else — they're the floor.

🌐

Zero Servers

Messages travel peer to peer. There is no company server to subpoena, no database to breach, no authority to comply with.

🔐

Signal Protocol

X3DH + Double Ratchet. The same cryptography trusted by journalists, activists, and governments worldwide.

📡

Works Offline

Bluetooth LE mesh delivers messages with no internet. At a protest, on a plane, in a blackout — anywhere.

🧅

Tor Routing

Route messages through the Tor network for anonymised delivery. Your IP is never exposed to peers.

📧

Encrypted Email

ECIES-encrypted email between Whispr users. Threads, reply-all, forward — with full E2EE, no central server.

🆔

No Account

Your identity is a locally-generated Ed25519 key pair. No email, no phone, no registration of any kind.

HOW IT WORKS

Three steps. Completely private.

01

Encrypt on device

Your message is encrypted on your device before it ever leaves. Only the recipient's Ed25519 key can decrypt it.

02

Travel the best path

The app automatically picks the fastest available route — direct LAN, Tor hidden service, or BLE mesh.

03

Decrypt on arrival

Only your contact's device decrypts the message. Not us, not your ISP, not anyone in between.

TRANSPORT LAYER

Three ways to reach anyone.

🏠
LAN

Local Network

When on the same Wi-Fi, messages travel directly — sub-second delivery, zero internet required.

🧅
TOR

Tor Network

Route through Tor hidden services for anonymous, censorship-resistant delivery across the internet.

📶
BLE

BLE Mesh

Bluetooth Low Energy mesh. Send messages nearby with no Wi-Fi, no internet, no infrastructure at all.

02 ARCHITECTURE

Built right, by default.

Whispr uses the same cryptography Signal uses, with one difference: there's no server in the middle. Even we couldn't read your messages if we wanted to.

Whispr architecture diagram A message originates as plaintext on the sender's device, passes through an X3DH + Double Ratchet session, gets encrypted with AES-256-GCM, and travels as ciphertext over LAN, Tor, or BLE mesh directly to the recipient. There is no server, no account, and no telemetry between the two devices. ALICE'S DEVICE Plaintext message X3DH + Double Ratchet AES-256-GCM END-TO-END BOUNDARY Encrypted blob DIRECT P2P · NO RELAY LAN TOR · .onion BLE MESH ON THE WIRE Encrypted bytes only BOB'S DEVICE Encrypted blob END-TO-END BOUNDARY AES-256-GCM X3DH + Double Ratchet Plaintext message NOT IN THE PICTURE No server · No account · No phone number · No telemetry · No cloud
A message originates as plaintext on the sender's device, passes through an X3DH + Double Ratchet session, is encrypted with AES-256-GCM, and travels as ciphertext over LAN, Tor, or BLE mesh — directly to the recipient. There is no server, account, or telemetry between the two devices.
security-architecture.txt
Identity Ed25519 key pair · generated on-device · stored in hardware enclave
Key Exchange X3DH (Extended Triple Diffie-Hellman) · forward secrecy
Message Crypto Double Ratchet · AES-256-GCM · per-message keys
Transport Crypto ECIES outer envelope · AES-GCM UDP discovery
Email Crypto ECIES pairwise encryption to recipient Ed25519 identity key
Database SQLCipher · AES-256 · full file encryption on mobile
Password PBKDF2-SHA512 · 200,000 iterations · 256-bit key
Metadata Random padding · ECIES envelope · sender/receiver hidden on wire
Server None
03 ROADMAP

What's coming

Whispr ships continuously. Here's what's in the pipeline.

IN PROGRESS

obfs4 bridge transport

Pluggable-transport binary that disguises Tor as TLS, defeating deep-packet inspection in censored networks. Vanilla bridges already shipped in v1.1.14.

building

IN PROGRESS

Voice & Video Calls

End-to-end encrypted peer-to-peer calls over LAN and Tor. No relay server, no recording, no third party.

building

PLANNED

Group Messaging

Multi-party encrypted group chats using a shared group key, derived without a central key server.

planned

PLANNED

Self-Destructing Messages

Per-message timers. Messages evaporate from both devices after the set duration — no trace left.

planned
04 GET IT

Download Whispr

Available for Android. iOS coming soon. No account. No tracking. Just install and go.

Version1.1.16
Released2026
CostFree. No accounts, no ads, no tracking.
SHA-256 (APK)3790f59b17c9d5886f77a79d985143cde8b62793aa73d781a177a75968eadf24

Full release history: changelog

🌐

USING WHISPR WHERE TOR IS BLOCKED

India · Iran · China · restrictive Wi-Fi

Some networks block Tor. If your messages don't deliver, install Whispr and open Settings → Network → Bridges. Tap the (i) icon there for a full step-by-step guide to setting up bridges for your region.

The instructions live in the app itself so you always have them with you, online or offline.