Private messaging with nothing to hand over.
End-to-end encrypted. Routed over Tor. No phone number, no email, no logs.
Ada
Safety number verified
Today
Are we still on for 6?
Yes — I'll message when I'm there.
Perfect. See you soon.
On my way.
Delivered
No phone or email
Your account is a 12-word phrase, generated on your device.
12 words = your identity
No recovery secret, phone number or email lives on the relay.
Tor by default
Bundled Tor connection to a hidden service, fail-closed.
7-day max ciphertext
Undelivered envelopes are deleted after 7 days at most.
The product
A private messenger that still feels like a messenger.
Chats, groups, calls, files. Same shape you already use — with a smaller footprint of things anyone else can see.
Ada
Safety number verified
Today
Are we still on for 6?
Yes — I'll message when I'm there.
Perfect. See you soon.
On my way.
Delivered
Graphite behaves like the messenger you already know, and hides the parts you shouldn't have to share. Message content is end-to-end encrypted, delivery is routed over Tor, and the relay never handles anything but sealed envelopes.
- Encrypted voice & video calls (DTLS-SRTP)
- Groups & encrypted file sharing
- Voice notes, offline voicemail
- On-device search — nothing uploaded
- Receipts you control · appear-offline mode
- Safety-number verification per contact
Protocol details are in the security section below.
Identity
Your identity is not an account.
No sign-up form, email confirmation, or phone number. Just twelve words held by you.
- 01
Generate 12 words
Graphite creates a recovery phrase on your device the first time you open the app.
- 02
Keep them on your device
The relay only receives public routing and key material — never your 12 words.
- 03
Restore anywhere
Type the 12 words on another device to get your identity back. Lose them and nobody — including us — can recover the account.
Your 12-word recovery phrase
LocalGenerated on this device. Recovery phrase stays local.
Graphite cannot recover these words for you.
Derived locally
Public fingerprint
A shareable public identifier derived on your device. It can identify you without revealing the 12 words.
Graphite relay
No recovery secret
The relay may hold public-key and routing material, but never your 12 words, email, phone number, password, or a recovery copy.
Privacy architecture
Designed to leave less behind.
Message content lives only on the endpoints. In transit, only sealed ciphertext moves through Tor and the Graphite relay.
- Plaintext here
Your device
Creates, pads and encrypts the message locally.
- Ciphertext only
Tor circuit
A separate Tor circuit hides the network path.
- Sealed envelope · TTL ≤ 7d
Graphite relay
Queues a sealed envelope. Sees delivery state, never message content.
- Plaintext here
Their device
Receives and decrypts the message locally.
- Message content exists only at the endpoints.
- Cyan is the same sealed payload moving through the route.
- Relay sees delivery state, never message content.
Leaves your device
- An encrypted envelope with your message inside.
- Delivery routing data needed while in transit.
What the Graphite relay can read
- Not message content, ever.
- Sealed envelopes and short-lived delivery state (TTL ≤ 7 days).
Security
Modern cryptography, explained like a product.
Real primitives underneath, plain language on top.
- Only you and the person you're talking to can read messages.
- New keys on every message — a stolen key can't unlock the past.
- Post-quantum protection for messages you send today.
- Voice and video are encrypted end-to-end.
- Verify a contact by comparing a short safety number.
Under the hood
- Message crypto
- X25519 + libsodium sealed boxes
- Post-quantum layer
- Hybrid ML-KEM-768
- Session state
- Signal-style double ratchet
- Calls
- DTLS-SRTP, media-encrypted end-to-end
- Verification
- Per-contact safety number
Maya's device
Graphite contact
Safety number · example
Compare with Maya
- 74 21
- 09 36
- 80 19
- 42 07
- 11 84
- 05 28
Read this number aloud on a call or compare it in person.
Your device
Graphite contact
Safety number · example
Compare with Maya
- 74 21
- 09 36
- 80 19
- 42 07
- 11 84
- 05 28
Read this number aloud on a call or compare it in person.
Both devices derived the same contact fingerprint. A mismatch warns that the contact key has changed — verify again before you keep talking.
Beta reality
What "public beta" honestly means.
- Rapid updates. The app updates itself securely and often; expect frequent changes.
- Windows SmartScreen. The current build is not Authenticode-signed, so Windows may warn on first launch.
- Android is sideloaded. There is no Play Store listing; you install a signed APK.
- Recovery is on you. Lose your 12 words and no one can recover the account.
Everyday
Everything you'd expect from a modern messenger.
Calls
Encrypted voice and video, end-to-end.
Voice notes
Send audio; voicemail waits, encrypted, until they're back.
Groups & files
Encrypted group chats and attachments.
On-device search
Search history locally — nothing uploaded.
Receipt controls
Toggle ticks and go incognito when you want.
GrapheneOS-ready
Runs on de-Googled Android without Play Services.
Download
Get Graphite on the platform you use.
Free public beta — Windows v1.13.26, Android v1.13.25. The app updates itself securely over the air.
Native clients for Windows and Android.
Moving to another device? Type your 12 words there to restore the same identity locally. Chat history stays on each device.
Chats
- Maya
- Jun
- Kai
Restoring your phrase on a new device recreates the same identity — it does not sync chat history from a server.
Windows · v1.13.26
Windows
Portable EXE, Windows 10/11, bundled Tor.
- No install
- Bundled Tor
- Auto-updating
Android · v1.13.25
Android
APK you sideload. No Play Services required.
- GrapheneOS-ready
- De-Googled phones
- Auto-updating
The Windows build is not Authenticode-signed and may show SmartScreen — check the release manifest to verify update integrity. Android is sideloaded — verify the release manifest before installing.
FAQ