Zerion
Encrypted chats, calls and channels over Tor. No phone number, no email.
Zerion is a private messenger. It runs over Tor, so your IP address stays hidden from the people you talk to and from the network itself. There's no phone number, no email, and no account on anyone's server. Your data lives encrypted on your own device — nowhere else.
Everything is end-to-end encrypted with hybrid post-quantum cryptography: today's proven algorithms together with the new NIST quantum-resistant ones. Keys move forward with every message, so a key uncovered today cannot open yesterday's conversations. If large quantum computers arrive sooner than expected, what you sent in the past stays protected.
WHAT YOU CAN DO
• One-to-one chats, end-to-end encrypted
• Group chats up to a few dozen people
• Voice and video calls over Tor (opt-in, off by default)
• Send photos, videos, voice notes, and documents
• Disappearing messages
• Stickers
• Introduce two of your contacts to each other, securely
• A built-in vault for passwords, notes, and private files
• Channels — a one-to-many broadcast layer with optional discussion threads
• Translated into more than 35 languages
CHANNELS
One person writes, many people read.
• Public channels: anyone with the invite link can subscribe
• Private channels: people ask to join and the owner approves
• Discussion threads: the owner decides, per channel, whether subscribers can reply
• Reactions, pinned posts, and attachments
• Editor delegations: let trusted people post without sharing your identity key
• Subscribers never see one another — no member list leaks between them
HARDENED MODE (OPT-IN)
Three independent protections under Security settings, all off by default:
• Refuse to start on tampered devices (unlocked bootloader, modified system)
• Refuse to start when a debugger, root, or hooking framework is detected
• Sign out automatically — or wipe — if USB debugging or file transfer is switched on
PRIVACY AND SECURITY
• Tor-only transport — no Wi-Fi, Bluetooth, or LAN exposure
• No phone number, no email, no central server
• No telemetry, no analytics, no crash reporting
• No logging of any kind — verified at build time
• Encrypted at rest with SQLCipher and a key derived from your password
• Screenshots blocked inside the app
• Notifications never reveal message contents
• Fully open source, GPL v3, security-reviewed before each release
UNDER THE HOOD
• Hybrid post-quantum key exchange (X25519 + ML-KEM-768)
• Hybrid signatures (Ed25519 + ML-DSA)
• Forward-secret message ratcheting
• Calls encrypted with AES-256-GCM; storage with SQLCipher (AES-256)
SUPPORT THE PROJECT
Zerion is free and open source — no ads, no trackers, no investors. If you'd like to help keep it independent, you can donate:
https://zerion.chat/donate.html
WHO IT'S FOR
People who want to talk to other people without a third party in the middle. Journalists and their sources, activists, lawyers and their clients, people in countries that block secure messengers. Anyone who doesn't want to hand a phone number to a tech company every time they install a messenger.
WHAT IT WON'T DO
• It won't message people who aren't on Zerion
• It won't work without an internet connection (Tor needs one)
• It won't restore your account if you forget the password — there is no recovery, and that's the point
LEARN MORE
• Website: https://zerion.chat
• Source: https://github.com/zerionproject/Zerion
GPL v3.
Everything is end-to-end encrypted with hybrid post-quantum cryptography: today's proven algorithms together with the new NIST quantum-resistant ones. Keys move forward with every message, so a key uncovered today cannot open yesterday's conversations. If large quantum computers arrive sooner than expected, what you sent in the past stays protected.
WHAT YOU CAN DO
• One-to-one chats, end-to-end encrypted
• Group chats up to a few dozen people
• Voice and video calls over Tor (opt-in, off by default)
• Send photos, videos, voice notes, and documents
• Disappearing messages
• Stickers
• Introduce two of your contacts to each other, securely
• A built-in vault for passwords, notes, and private files
• Channels — a one-to-many broadcast layer with optional discussion threads
• Translated into more than 35 languages
CHANNELS
One person writes, many people read.
• Public channels: anyone with the invite link can subscribe
• Private channels: people ask to join and the owner approves
• Discussion threads: the owner decides, per channel, whether subscribers can reply
• Reactions, pinned posts, and attachments
• Editor delegations: let trusted people post without sharing your identity key
• Subscribers never see one another — no member list leaks between them
HARDENED MODE (OPT-IN)
Three independent protections under Security settings, all off by default:
• Refuse to start on tampered devices (unlocked bootloader, modified system)
• Refuse to start when a debugger, root, or hooking framework is detected
• Sign out automatically — or wipe — if USB debugging or file transfer is switched on
PRIVACY AND SECURITY
• Tor-only transport — no Wi-Fi, Bluetooth, or LAN exposure
• No phone number, no email, no central server
• No telemetry, no analytics, no crash reporting
• No logging of any kind — verified at build time
• Encrypted at rest with SQLCipher and a key derived from your password
• Screenshots blocked inside the app
• Notifications never reveal message contents
• Fully open source, GPL v3, security-reviewed before each release
UNDER THE HOOD
• Hybrid post-quantum key exchange (X25519 + ML-KEM-768)
• Hybrid signatures (Ed25519 + ML-DSA)
• Forward-secret message ratcheting
• Calls encrypted with AES-256-GCM; storage with SQLCipher (AES-256)
SUPPORT THE PROJECT
Zerion is free and open source — no ads, no trackers, no investors. If you'd like to help keep it independent, you can donate:
https://zerion.chat/donate.html
WHO IT'S FOR
People who want to talk to other people without a third party in the middle. Journalists and their sources, activists, lawyers and their clients, people in countries that block secure messengers. Anyone who doesn't want to hand a phone number to a tech company every time they install a messenger.
WHAT IT WON'T DO
• It won't message people who aren't on Zerion
• It won't work without an internet connection (Tor needs one)
• It won't restore your account if you forget the password — there is no recovery, and that's the point
LEARN MORE
• Website: https://zerion.chat
• Source: https://github.com/zerionproject/Zerion
GPL v3.
捐助
版本
雖然在下方可選擇下載 APK 檔案，但要留意這樣的安裝方式將不會收到更新通知，是一種較不安全的下載方法。建議您先安裝 F-Droid 用戶端使用。
下載 F-Droid-
arm64-v8aarmeabi-v7a此版本需要 Android 10 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
arm64-v8aarmeabi-v7a此版本需要 Android 10 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
-
arm64-v8aarmeabi-v7ax86x86_64此版本需要 Android 10 或更高的版本。
此套件包由原開發者建置和簽署，並保證與此原始碼 Tarball 保持一致。
新版本 2.0.2
v2.0.2 — quality, reliability, and platform hygiene
ONE-TIME SETTINGS RESET ON UPGRADE: at-rest encrypted preferences moved to an in-tree implementation that replaces the deprecated AndroidX security library. Decoy mode, the panic/wipe password, notification and security toggles, theme, and language are reset to defaults. Conversations, channels, groups, contacts, vault, and unread state are unaffected. After updating you will see a one-time in-app notice reminding you to reconfigure these in S
ONE-TIME SETTINGS RESET ON UPGRADE: at-rest encrypted preferences moved to an in-tree implementation that replaces the deprecated AndroidX security library. Decoy mode, the panic/wipe password, notification and security toggles, theme, and language are reset to defaults. Conversations, channels, groups, contacts, vault, and unread state are unaffected. After updating you will see a one-time in-app notice reminding you to reconfigure these in S
新版本 2.0.1
Build cleanup. PhotoView library moved from a vendored binary to source code, no functional change.
Required to support distribution on F-Droid's main repository while keeping the same signing key across the Play Store, the GitHub APK, and F-Droid — so users can switch between sources without reinstalling.
Full notes: https://github.com/zerionproject/Zerion/releases/tag/v2.0.1
Required to support distribution on F-Droid's main repository while keeping the same signing key across the Play Store, the GitHub APK, and F-Droid — so users can switch between sources without reinstalling.
Full notes: https://github.com/zerionproject/Zerion/releases/tag/v2.0.1