End-to-end encrypted · No phone number
The Private messenger that knows nothing about you
Private messaging with no phone number and no account database. Messages are end-to-end encrypted on your device and delivered to one-time addresses over a public decentralized transport. PrivaMesh is built to minimise metadata - not to pretend it does not exist.
ArchitectureKnown limitationsAudit statusSource code
- No Phone Number
- · No Servers
- · E2E Encrypted
The differentiator
No servers - concretely
Most “private” messengers still run servers that see who you talk to. PrivaMesh has none. Here is exactly where every piece of your data lives.
| What | Where it lives | How |
|---|---|---|
| Your messages | A public, decentralized transport | Encrypted blobs, addressed to one-time addresses |
| Your inbox | The public transport itself | Retrieved and decrypted only on your device |
| Your keys | Your iPhone Keychain only | Biometric-locked, never leave the device |
| Your contacts & history | Your iPhone only | Never synced, never uploaded anywhere |
| Your identity | An account phrase you hold | Encryption keys on your device - no phone, no email |
| The "PrivaMesh server" | Does not exist | No account server; the transport is public and swappable |
One message, three steps
Send → Transport → Receive. No middle box, no inbox on someone else’s computer.
Send
Your message is padded to a fixed size and sealed with AES-256-GCM under a fresh Double Ratchet key - on your device, before it ever leaves.
Transport
The encrypted blob travels over a public, decentralized transport, addressed to a one-time address. No account server ever holds it.
Receive
Your device retrieves and decrypts it locally with keys only you hold, then advances the ratchet. Only your device can read it.
Hide who. Hide when. Hide how.
Encryption hides the message. PrivaMesh also hides the metadata - the who, when and how that a server would otherwise see.
The cryptography
End-to-end encryption, done properly
PrivaMesh uses the same battle-tested primitives that secure the best encrypted messengers, adapted for a serverless world. Every message gets a fresh key, so a compromised key can’t unlock your past or future conversations.
X3DHCurve25519 handshake establishes a shared secret without a trusted key server.
Double RatchetHKDF + HMAC-SHA256 rotate keys every message for forward secrecy and post-compromise security.
AES-256-GCMAuthenticated encryption seals each payload, padded to a fixed size to hide length.
See it on your iPhone
A private messaging app that looks and feels like a premium chat app - with none of the surveillance underneath.
PrivaMesh vs the messengers you know
Signal is excellent. Telegram is popular. Neither is serverless. Here is the short version.
| Feature | PrivaMesh | Signal | Telegram |
|---|---|---|---|
| No servers | Yes | No | No |
| No phone number | Yes | No | No |
| Metadata protection | Yes | Partial | No |
| End-to-end encrypted | Yes | Yes | Partial |
| Open source | Yes | Yes | Partial |
Frequently asked questions
Is PrivaMesh really serverless?
Yes. There is no PrivaMesh account server, relay, or message database. Encrypted messages travel over a public, decentralized transport, so there is nothing central to breach, subpoena, log, or shut down.
How is PrivaMesh encrypted?
PrivaMesh uses an X3DH handshake over Curve25519 to establish keys, then a Double Ratchet (HKDF and HMAC-SHA256) that gives every message a new key. Payloads are sealed with AES-256-GCM and padded to a fixed size. You get forward secrecy and post-compromise security by default.
Can I use PrivaMesh without a phone number or email?
Yes. There is no phone number and no email. Your account is an account phrase that maps to encryption keys stored in the iOS Keychain - device-only and protected by Face ID or Touch ID.
What metadata does PrivaMesh collect?
None on any server, because there is no server. Delivery uses one-time addresses to hide the social graph, cover traffic hides when you send, and fixed-size padding hides message length.
What happens if I lose my phone?
Restore your account phrase on a new device to recover your identity. By design your chat history is not recovered - forward secrecy means old message keys are deleted, so nobody, including you, can decrypt past messages from the phrase alone.
Stop trusting companies with your conversations
PrivaMesh replaces the company with math and the server with a public, decentralized transport. Your keys, your device, your words.