Night Drop
Anonymous, end-to-end encrypted 1:1 chat over Tor
新版本 0.1.21
Installed from F-Droid? Night Drop no longer checks for its own updates — F-Droid does that for you. Other builds (sideloaded, or the desktop AppImage) still ask the Night Drop onion site over Tor at most once a day, and only ever tell you; nothing downloads or installs on its own. "Update app" in the menu still works everywhere, and this is now spelled out in About.
The banner shown while your address publishes no longer promises "1-3 min" — it can take several minutes.
The banner shown while your address publishes no longer promises "1-3 min" — it can take several minutes.
Night Drop is a privacy-first 1:1 messenger. Like a night deposit box: every message is a sealed envelope, dropped for one person only, opened by no one in between.
* Anonymous identities only — no phone number, no email, no account. Your identity is a keypair held on your device.
* End-to-end encryption with the Signal Double Ratchet: only the sender and receiver can read a message.
* Peer-to-peer over Tor by default. There is no clearnet path — the only network egress is the Tor network.
* Local-first storage: messages live on your device. Optional server storage is opt-in, capped at 24 hours, and shows a persistent warning in the chat while active.
* An untrusted store-and-forward relay carries offline delivery only. Any relay ever holds nothing but opaque, already-encrypted blobs under unlinkable handles — no keys, no plaintext, no identities, no logs.
* Authorization before the first message: a stranger cannot message you until you approve them (scan a pre-authorized QR, or exchange a short code whose secret words block a man-in-the-middle).
* Safety-number verification (scan or compare) to confirm no one is in the middle.
* User-owned encrypted backups: the recovery password is generated on your device, shown once, and never sent to any server. Lose it and the backup is unrecoverable — by design.
* No analytics, no crash reporters, no ad SDKs, no Google Play Services, and no third-party push service.
* No automatic update check on F-Droid installs. Other builds (sideloaded, or the desktop AppImage, which have no update channel of their own) ask the Night Drop onion site over Tor, at most once a day, whether a newer version exists — and only tell you. The app never installs anything, and does not hold the permission that would let it.
Night Drop is free software (AGPL-3.0-or-later) and built to be reproducible: anyone can rebuild the release from source and confirm it matches, byte for byte.
* Anonymous identities only — no phone number, no email, no account. Your identity is a keypair held on your device.
* End-to-end encryption with the Signal Double Ratchet: only the sender and receiver can read a message.
* Peer-to-peer over Tor by default. There is no clearnet path — the only network egress is the Tor network.
* Local-first storage: messages live on your device. Optional server storage is opt-in, capped at 24 hours, and shows a persistent warning in the chat while active.
* An untrusted store-and-forward relay carries offline delivery only. Any relay ever holds nothing but opaque, already-encrypted blobs under unlinkable handles — no keys, no plaintext, no identities, no logs.
* Authorization before the first message: a stranger cannot message you until you approve them (scan a pre-authorized QR, or exchange a short code whose secret words block a man-in-the-middle).
* Safety-number verification (scan or compare) to confirm no one is in the middle.
* User-owned encrypted backups: the recovery password is generated on your device, shown once, and never sent to any server. Lose it and the backup is unrecoverable — by design.
* No analytics, no crash reporters, no ad SDKs, no Google Play Services, and no third-party push service.
* No automatic update check on F-Droid installs. Other builds (sideloaded, or the desktop AppImage, which have no update channel of their own) ask the Night Drop onion site over Tor, at most once a day, whether a newer version exists — and only tell you. The app never installs anything, and does not hold the permission that would let it.
Night Drop is free software (AGPL-3.0-or-later) and built to be reproducible: anyone can rebuild the release from source and confirm it matches, byte for byte.
版本
雖然在下方可選擇下載 APK 檔案，但要留意這樣的安裝方式將不會收到更新通知，是一種較不安全的下載方法。建議您先安裝 F-Droid 用戶端使用。
下載 F-Droid-
x86_64此版本需要 Android 7.0 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
arm64-v8a此版本需要 Android 7.0 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
armeabi-v7a此版本需要 Android 7.0 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。