Session screenshots (7)
Description Session
Session: Private Communication, Engineered for Anonymity
Most messaging apps claim to protect your privacy, but their architecture inherently relies on centralized servers that can log metadata, IP addresses, and contact lists. Session is an open-source, decentralized messaging platform that eliminates these vulnerabilities entirely. It is built on the Oxen Service Node network, a blockchain-based infrastructure, to ensure that no single entity controls your data, and no phone number or email is required to register. This app is designed for users who require verifiable, technical privacy—journalists, activists, or anyone who wants to communicate without leaving a digital footprint.
Core Technical Architecture & Privacy Mechanics
Session operates on a fundamentally different model from traditional messengers. Its core functionality is built around three pillars: decentralization, metadata protection, and end-to-end encryption.
- Decentralized Identity via Onion Requests: Instead of a phone number, Session generates a unique, 66-character Session ID. All communication is routed through the Oxen Service Node network using onion routing (similar to Tor), which encrypts and relays data through three random nodes. This process ensures that the sender's IP address is never visible to the recipient or the server handling the message.
- End-to-End Encryption with the Signal Protocol: All messages and calls are encrypted using the industry-standard Signal Protocol. This ensures that only the intended recipient can decrypt the content. Because the encryption keys are stored locally on your device and never on a central server, Session cannot comply with data requests or government subpoenas for message content.
- Zero Metadata Collection: The Service Nodes process messages but do not log metadata. They do not store who is talking to whom, the frequency of messages, or the device details. The network is designed to be "metadata-resistant," meaning that even if a node is compromised, it cannot reveal communication patterns.
Core Functionality: Messaging, Calls, and File Transfer
Session provides a full suite of communication tools, all operating under the same privacy-first architecture. The interface is clean and functional, prioritizing speed and reliability over unnecessary UI flourishes.
- Text Messaging: Send individual or group messages. Messages are pushed through the network and stored temporarily on Service Nodes until the recipient is online to retrieve them. This allows for asynchronous communication without requiring both parties to be simultaneously connected.
- Voice and Video Calls: Conduct end-to-end encrypted voice and video calls. These calls are routed directly between users using a peer-to-peer connection, bypassing the Service Nodes for real-time performance. Call quality is dependent on your network bandwidth, but the encryption ensures that call metadata (duration, participants) is not logged.
- File Sharing: Send images, documents, and other files up to 10 MB in size. Files are encrypted before being uploaded to the Service Node network. The recipient downloads and decrypts the file locally. This feature is suitable for sharing sensitive documents or media without relying on third-party cloud storage.
Key Advantages Over Centralized Alternatives
Session offers several distinct technical advantages that differentiate it from apps like WhatsApp, Signal, or Telegram.
- No Phone Number or Email Required: Registration requires only a username and password. This eliminates the risk of your identity being linked to your phone number, which is often a primary target for SIM-swapping attacks or identity verification.
- Open-Source Codebase: The entire Session client and Service Node network code is publicly available on GitHub. This allows independent security researchers to audit the code for vulnerabilities and verify that the privacy claims are accurate. There are no hidden backdoors or proprietary algorithms.
- Anti-Censorship Design: Because the network is decentralized, no single server can be shut down to block access. The Oxen blockchain ensures that Service Nodes are geographically distributed, making it extremely difficult for any government or ISP to censor the platform.
Getting Started: Installation and Configuration
Session is available for Android (version 12L and above), iOS, Windows, macOS, and Linux. The installation process is straightforward, but configuration options allow for advanced privacy tuning.
- Installation: Download the app from the official website or a trusted app store. The app requires minimal permissions—only internet access and notification access for message alerts.
- Account Creation: Open the app and generate a new Session ID. You will be prompted to create a strong password. This password is used to encrypt your local database. If you lose your password, you cannot recover your account, as there is no password reset mechanism.
- Advanced Settings: Navigate to Settings > Privacy to configure options like "Disappearing Messages" (set a timer for automatic deletion), "Block Unknown Contacts," and "Use Onion Routing for All Traffic" (forces all connections through the network for maximum anonymity).
Optimized for Android 12L and Above
Session is fully optimized for Android 12L, leveraging its large-screen enhancements for tablets and foldable devices. The app supports multi-window mode, allowing you to chat while browsing other apps. Notification management is compliant with Android 12L's notification trampoline restrictions, ensuring reliable message delivery without battery drain.
Download mobile app now to experience communication without surveillance or data mining. Your conversations are yours alone.
Internet connection required. In-app purchases available for optional Service Node staking features.
Information
- Version
- 1.32.1
- Developer
- Oxen Project
- Requirements
- Android + 12L
- Updated
- 17.03.2026
- Size
- 47.11 MB
- Package
- network.loki.messenger
- Signature
- 8b84810b76901db709bee3f27c0c4096,a3d6c8f0772b4764990353200f25ecd2
- Architecture
- armeabi-v7a, arm64-v8a