Is Aurora running?

Website and server updates (no app release).

• Website: a modernized redesign — new navigation, motion, a FAQ, and an Install & troubleshooting page — plus a "For security researchers" section linking the public threat model and crypto spec.
• Homepage: added an interactive screenshot showcase — a swipeable carousel of real Aurora screens (conversations, chat, QR pairing, and the security settings) — and refreshed the site's look with a full-page aurora background.
• Security page: expanded each cryptographic layer with a plain-English "why it matters," covering harvest-now-decrypt-later resistance, nonce-reuse immunity, man-in-the-middle protection, and the honest limits of hardware-backed key storage.
• Server: added a privacy-safe /health liveness endpoint (which powers this page) and turned off API access logging, so no IP-to-node history is retained.

An onboarding patch so a fresh install can actually receive messages.

• First-run setup now ends on a permission gate that explains each permission and won't let you in until the two delivery-critical ones — notifications and background/battery — are granted. These are exactly what a new install needs to receive a pairing request and messages.
• Microphone and camera are optional (asked on first use); sharing photos uses the system picker, so there's no gallery permission to grant.

Release notes →

A pairing-reliability patch.

• A host showing their QR code is now pulled straight to an incoming request when a friend scans it, instead of the request sitting unseen behind the QR screen.
• The in-app version label now shows the real build version.

Release notes →

The second pre-alpha — in-app video, calls that survive leaving the app, and a large internal cleanup.

• In-app video playback with a real thumbnail and a fullscreen player (play/pause, scrubbable seek bar, elapsed/total time) — decrypted straight from memory, never written to disk.
• Minimise a call with Back: it keeps running with a floating video bubble and an ongoing-call notification.
• Delete a contact on both sides, cryptographically erasing keys and messages.
• Numerous call-stability fixes (connect, hang-up, accept, teardown) and a fresh install now does a working video call on the first try.
• Behaviour-preserving architecture cleanup and a new test suite.

Release notes →

The first public pre-alpha. Source published to GitHub under AGPL-3.0 with a signed APK.

• Direct peer-to-peer encrypted messaging, photos, videos, voice messages, reactions, and replies.
• Disappearing messages, and voice/video calls over WebRTC.
• Hybrid post-quantum cryptography (Kyber-1024 + X25519, Dilithium-3 + Ed25519) with forward secrecy and a PQXDH handshake.
• No account, no phone number; QR pairing with mutual code verification.
• Zero-log rendezvous server behind TLS with certificate pinning.

Release notes →