Loki
Everyone
info
1+
Downloads
About this app
Today, Loki combines:
- direct peer discovery on local networks
- BLE-assisted discovery for nearby peers
- cryptographic identity based on user-owned DIDs
- X3DH session establishment with a persisted Double Ratchet
- encrypted local persistence with RAM-only paths for sensitive flows
- a full duress layer with wipe, ghost mode, biometric revocation, and panic gestures
## What Loki Is
At a high level, Loki is an experimental secure messenger for users who want:
- no central identity authority
- strong local-device privacy guarantees
- visible trust signals when channels are real and secure
- the ability to switch into a believable decoy state under pressure
The project is not just about end-to-end encryption. It is about the full lifecycle of trust:
- how identities are established
- how keys evolve over time
- what gets written to disk
- what remains only in RAM
- what happens when the user is coerced
## Core Principles
- **Local-first trust**: the app assumes hostile networks and untrusted intermediaries.
- **User-owned identity**: identities are derived from device-held cryptographic material, not server-issued accounts.
- **Defence in depth**: encryption, storage, transport, and UI all carry separate security responsibilities.
- **Plausible deniability**: duress handling is a first-class feature set, including secure wipe and a decoy interface.
- **Minimal leakage**: the project actively audits plaintext persistence, metadata exposure, and UI cues that could reveal sensitive state.
- direct peer discovery on local networks
- BLE-assisted discovery for nearby peers
- cryptographic identity based on user-owned DIDs
- X3DH session establishment with a persisted Double Ratchet
- encrypted local persistence with RAM-only paths for sensitive flows
- a full duress layer with wipe, ghost mode, biometric revocation, and panic gestures
## What Loki Is
At a high level, Loki is an experimental secure messenger for users who want:
- no central identity authority
- strong local-device privacy guarantees
- visible trust signals when channels are real and secure
- the ability to switch into a believable decoy state under pressure
The project is not just about end-to-end encryption. It is about the full lifecycle of trust:
- how identities are established
- how keys evolve over time
- what gets written to disk
- what remains only in RAM
- what happens when the user is coerced
## Core Principles
- **Local-first trust**: the app assumes hostile networks and untrusted intermediaries.
- **User-owned identity**: identities are derived from device-held cryptographic material, not server-issued accounts.
- **Defence in depth**: encryption, storage, transport, and UI all carry separate security responsibilities.
- **Plausible deniability**: duress handling is a first-class feature set, including secure wipe and a decoy interface.
- **Minimal leakage**: the project actively audits plaintext persistence, metadata exposure, and UI cues that could reveal sensitive state.
Peer-to-peer decentralised messaging.
Updated on
Safety starts with understanding how developers collect and share your data. Data privacy and security practices may vary based on your use, region, and age. The developer provided this information and may update it over time.
- No data shared with third partiesLearn more about how developers declare sharing
- No data collectedLearn more about how developers declare collection
What’s new
Today, Loki combines:
• direct peer discovery on local networks
• BLE-assisted discovery for nearby peers
• WiFi direct TCP messaging with automatic BLE fallback and user-selectable transport preference
• cryptographic identity based on user-owned DIDs
• X3DH session establishment with a persisted Double Ratchet
• encrypted local persistence with RAM-only paths for sensitive flows
• duress layer with wipe, ghost mode, biometric revocation, and panic gestures
• a native binary hardening layer
• direct peer discovery on local networks
• BLE-assisted discovery for nearby peers
• WiFi direct TCP messaging with automatic BLE fallback and user-selectable transport preference
• cryptographic identity based on user-owned DIDs
• X3DH session establishment with a persisted Double Ratchet
• encrypted local persistence with RAM-only paths for sensitive flows
• duress layer with wipe, ghost mode, biometric revocation, and panic gestures
• a native binary hardening layer
App support
About the developer
Thomas Smith
mail@tecsmith.info
27 Mildmay Road
LEWES
BN7 1PJ
United Kingdom
