Private messaging where the keys never leave your hands.
OTPPhone is an end-to-end encrypted messenger for people who take confidentiality seriously. Every message is sealed on your device before it is sent, so its contents are never readable by us, by anyone operating the infrastructure, or by anyone watching the network. There are no accounts, no phone numbers, no email — and no tracking.
Why OTPPhone
End-to-end encryption by default. Messages are sealed with modern public-key cryptography (HPKE: X25519 + AES-256-GCM) before they leave your phone. The relay only ever forwards ciphertext it cannot read.
Optional one-time-pad layer. For your most sensitive conversations, add a second XOR layer keyed by a shared pad you exchange in person — approaching the information-theoretic ideal of a true one-time pad. Pads can be backed by physical entropy harvested from your camera sensor (conditioned through a strong extractor), with a strong CSPRNG fallback.
In-person key exchange over Bluetooth. Meet face to face and pair directly, so no server ever sees your key material. Verify with a short safety phrase to rule out anyone in the middle.
Add contacts with a QR code. Share your identity by showing a QR code and scanning theirs — no usernames to look up, nothing to type.
Your data stays on your device. Message history, contacts, and keys are stored locally and encrypted at rest with AES-256 (SQLCipher). Private keys live in the Android Keystore and are non-exportable.
Biometric app lock. Optionally require your fingerprint, face, or device PIN to open the app.
No accounts. Your identity is a cryptographic key that you control. Nothing to sign up for, nothing to recover, nothing for us to leak.
What the server can and cannot see
Our relay is a blind forwarder. It passes sealed messages between devices and cannot read your messages — it only ever handles ciphertext. It does not store your message content, and it keeps no advertising or analytics profiles on you. The full detail is in our privacy policy.
Who it's for
Journalists, activists, lawyers, businesses, and anyone who wants their private conversations to stay private. OTPPhone gives you strong defaults and, when you need it, an extra in-person one-time-pad layer for defence in depth.