See it on your phone
A real look at Aurora running on Android. Drag, swipe, or use the arrows.
A post-quantum, end-to-end encrypted messenger. No phone number, no account, and no company server ever in the path of your messages.
Android only · sideload · this is an early, experimental build. Don't trust it with anything critical yet.
A real look at Aurora running on Android. Drag, swipe, or use the arrows.
Privacy isn't a setting you switch on. It's the architecture.
Every message is sealed with a hybrid of Kyber-1024 and X25519, signed with Dilithium-3 and Ed25519. An attacker has to break both classical and quantum-era cryptography.
Messages travel directly from your phone to theirs. Our only server helps the two devices find each other's address. It never sees a message, and it stores nothing.
Your identity is a key pair generated on your device. There's no sign-up, no phone number, no email: nothing that ties the app to who you are.
You add someone by scanning their code in person, then both confirm a short code on each other's screen, so no one can quietly slip into the middle of your connection.
Set a timer (an hour, a day, a week) and messages erase themselves on both phones. The data simply stops existing.
A decoy PIN that opens an empty app, optional wipe-on-duress, encrypted local database, and screenshots blocked app-wide.
Voice and video calls connect peer-to-peer and are encrypted end-to-end. No call logs, no recording, nothing kept.
Turn it on to route your traffic through the peer relay network for extra metadata privacy. Off by default. Your messages work without it.
A privacy app that oversells itself isn't private. So here's exactly where Aurora still falls short.
Aurora is pre-alpha software on an unoptimized build, the database format is still changing between versions, and the cryptography hasn't yet had an independent third-party audit. And to wake your phone when a message is waiting, the rendezvous server can tell that your device is online (never your messages or who you're talking to, and never logged). Read exactly how it all works on the How it works page.