Your identity is three words, made on your phone and known to nobody else.
Android. Free and open source, GPL-3.0.
Encrypting the words is the easy part. What gets collected around them is where privacy quietly goes.
In most countries a number is tied to an identity document. Handing one over to sign up undoes much of what the encryption was for.
Uploading your contacts to find friends hands over your social graph: who you know, and who they know.
Waking your phone through Google's servers tells a third party who is messaging you, and when.
No number, no address book, no push service, and no directory anyone can search. There is nothing to hand over, because nothing is collected.
The Signal Protocol underneath, the same double ratchet Signal uses, through an open-source implementation. Tor and Nostr relays for delivery. And an interface that tells you what it is doing instead of assuming you already know.
Nothing is registered anywhere. You get three words nobody can trace back to you, and a face you pick. That is the whole account, and it takes about a minute.
Made on this phone. Nothing is sent anywhere.
Slower and hidden from everyone, or faster and seen by a relay. Most apps decide this for you and never mention it. Kryfo puts the trade-off in plain words and lets you pick.
You can change this any time.
There is no search and no directory, so you cannot be found by accident. People come in through a code you show them, a link you send, or an introduction from someone you already trust.
A burner room expires and takes everything with it, on every phone in it. You join under a name that exists only inside that room, so leaving ends the connection completely.
A messenger is only worth something once your friends are on it. So Kryfo comes with four tools that need nobody else and no internet. Everything happens on your phone.
New in version 0.3.0.
Pick a photo and Kryfo shows what is hidden inside it: where it was taken, drawn on a map the app carries itself, on what phone, and when. Then it makes a clean copy with all of it gone, and checks the copy before handing it over.
Read on this phone. The photo went nowhere.
Share one to Kryfo from your gallery and get a clean copy back. Location, phone and time are gone, and the picture itself stays exactly the same.
Links, Wi-Fi, contacts, text and more. Made on your phone, so no website sees your Wi-Fi password, and no link gets wrapped in a tracker.
Send it anywhere, by email or on a USB stick. It opens in Kryfo, or on any computer with the free tool age.
Privacy software has a habit of promising more than it can keep. So here is the part most sites leave out.
No outside security firm has examined Kryfo. The cryptography it builds on is well studied, but the way this app uses it has not been independently reviewed by anyone. Work is underway to change that, and the report will be published in full, whatever it says.
Kryfo works, and it is used every day. But it is young, features are still landing, and things change between releases. If you find something broken, the issue tracker is open and every report gets read.
Android will warn you about installing outside the Play Store. That is expected. Allow it for your browser or files app, then open the file again.
Every build Kryfo signs carries the same key. If you install an Android package from anywhere other than F-Droid, you can confirm it came from us before trusting it.
10:92:8A:61:64:2C:5C:C4:71:A9:98:69:E2:EA:4E:2D:4D:70:02:6E:79:7D:FB:A4:8C:0F:30:6B:5B:34:73:DBHow to check a download, on a computer or on the phone: kryfo.app/download.
F-Droid signs its own builds with F-Droid's key, not this one, which is why a package installed from there will not match. That is expected, and it is the reason a build from F-Droid cannot update one installed by hand.