Skip to content

Changelog

Changelog

What shipped, and when. Version numbers and dates are pulled from the App Store listing, so this page cannot quietly disagree with what Apple shows.

1.0

  • First App Store release.
  • End-to-end encrypted one-to-one messaging using X3DH and the Double Ratchet with AES-256-GCM.
  • Post-quantum handshake on iOS 26: X-Wing, combining ML-KEM-768 with X25519.
  • Accounts are BIP-39 recovery phrases generated on device - no phone number, no email.
  • Stealth addressing: a fresh one-time address per message.
  • Fixed padding buckets at 32, 64, 128, 256 and 512 bytes.
  • Optional cover traffic at random 3-10 minute intervals, off by default.
  • Anonymous payment via RSA blind signatures, so a send cannot be linked to a purchase.

One release so far. This page exists at version one rather than appearing later, because a changelog that starts when the history is already flattering is not much of a record. Security fixes will appear here and on the security page as they ship.

Keep reading