Kryfo Private Messenger

Kryfo is a private messaging app by GnosiWorks that routes conversations over Tor and keeps the user's identity separate from the account, because there is no account at all. The problem it addresses is the metadata trail that ordinary messengers leave behind: phone numbers, uploaded address books, and server-side records that can connect a conversation to a real person. Kryfo approaches this differently. Your identity on the network is a key pair generated locally on the device, and on the default route your chats cannot be linked to a real identity, nor can anyone look you up unless you choose to claim a public handle. Traffic travels over Tor by default, while message content is protected with end-to-end encryption using the Signal protocol. Messages pass through relays in a sealed form, so a relay cannot read them, and on the default route those relays do not learn your IP address or who you are. Address book upload is not part of the design at all. The app is at version 0.5.2, updated on 2026-10-22, and was first released on 2026-10-06. It occupies about 70 MB and needs Android 7.0 or newer. Kryfo is free, carries no ads and no investors, and is funded by optional anonymous backing; the developer states that every feature works the same whether or not you contribute. It is licensed under GPL-3.0-or-later.

Key features

• Default routing over Tor, with automatic circumvention when Tor is blocked in your network
• End-to-end encryption of content using the Signal protocol, with messages sealed so relays cannot read them
• Identity as a locally generated key pair, with no phone number, email or account required
• Delivery through Nostr relays, so a message can reach a phone that was offline when it was sent
• Group chats supporting photos, files, voice messages, replies, reactions, pins and polls
• Animated stickers transmitted as a name rather than an image, so no picture file leaves the device
• Search across all conversations, running against the encrypted local database
• Timed messages that disappear after a set period, plus an encrypted local database and encrypted backups
• App lock by PIN or biometrics, a decoy PIN that opens an empty Kryfo, hidden chats behind their own PIN, and a panic wipe that clears everything including media on disk
• A direct chat with the developer, anonymous if you prefer, and interface support for 15 languages

How to install

1. Tap the download button on this page to get the Kryfo APK file, which is about 70 MB.
2. When Android asks, allow your browser or file manager to install apps; this is the “Install unknown apps” setting for that app.
3. Open the downloaded APK file from your notifications or file manager.
4. Tap Install and wait for the package to be verified and copied.
5. Open Kryfo. Your device must run Android 7.0 or newer.

Kryfo suits experienced Android users who already understand what metadata exposure means and are willing to trade some convenience for it. If you compare messengers on the basis of what the server can learn rather than on sticker packs and contact syncing, the design choices here are the point: no account, no address book upload, Tor by default, and an identity that is just a key pair on your device. It also fits people who need messaging to keep working on networks where Tor is blocked, or who want group conversations with files, voice messages and polls without handing over a phone number. Those who want a mainstream messenger with automatic contact discovery will find the model unfamiliar, and anyone who needs a long track record of stable releases should weigh that the app is still in the 0.5.x range.

Before relying on Kryfo for anything important, take a moment to set up the protections it offers: enable the app lock, decide whether you want a decoy PIN, and test the panic wipe behavior on a spare device first so you know exactly what it removes. Turn on encrypted backups, since the local database is encrypted and losing the device without a backup means losing the history. If you want to be reachable by people who do not already know your key, claim a public handle deliberately and remember that this is the step that makes you findable. Timed messages are useful, but treat them as a convenience rather than a guarantee about the other side's device. Finally, keep an eye on the release notes as the version numbers move, because features and behavior can shift between 0.5.x builds.

Kryfo is a focused attempt at private messaging: no account, Tor by default, Signal-protocol encryption, and no address book upload, all in a free package of about 70 MB for Android 7.0 and newer. For users who care more about what a server can learn than about convenience features, it is worth evaluating alongside the alternatives, with the caveat that it is still at version 0.5.2 and some details, including purchase and ad policies, are not stated.