LADON messenger is a messenger for iPhone that lets no one read along. No phone number. No account. No trace. Not even when tomorrow's computers try to crack everything.
Other apps collect everything. We collect nothing. Take a look:
No sign-up. No data. No waiting. You install — and start writing.
LADON messenger on the App Store. No waiting, no invite — a simple monthly subscription.
No account. No number. No email. On first launch, LADON messenger creates your key right on your phone.
Every message is encrypted automatically — before it leaves your phone. There's nothing to set up.
There's no central address book to query — or to subpoena. You add a contact directly, and you can verify there's no one in the middle.
Scan your contact's QR code in person — no phone number, no central directory that could be queried or handed over.
Every contact pair shares a safety number (a fingerprint). Compare it once and you know no one is secretly sitting in the middle.
Photos, videos and voice messages are end-to-end encrypted like every text — and cleaned of hidden traces before they ever leave your phone.
Location & camera data (EXIF) are stripped automatically — the image carries no hidden metadata.
Encrypted and metadata-cleaned, split into chunks and verified end-to-end.
The audio leaves your phone with no hidden data attached to it.
Set a timer per chat: 30s · 5min · 1h · 24h · 7 days — or off.
Even the file size reveals nothing — every attachment is padded to a fixed bucket. And contacts are added by QR code, never a phone number.
To surveil you, someone doesn't even need to read your messages. Who with whom, when and how often — that often reveals more than the content itself.
Even without the content, someone can build a full profile of you — just from your connections.
Sender sealedEven encrypted traffic gives you away: its rhythm shows exactly when a real conversation is happening.
Hidden by cover trafficToday's data gets archived. In a few years, quantum computers decrypt it all at once.
Quantum-safe todayA phone number, email or device ID instantly links your "private" account to your real name.
No identity to linkEvery message passes through seven separate layers of protection. We build as if every layer fails — and you'd still be protected.
No phone number. No email. No name. On first launch, LADON messenger creates a secret key right on your phone — and never sends it to us. To our system, you are a random number.
Server one knows your IP, but not the recipient. Server two knows the recipient, but not you. Even if one were seized, the secret stays safe.
LADON messenger automatically sends dummy messages between the real ones. An observer sees constant traffic — but can't tell when a conversation is actually happening.
LADON messenger combines classical encryption with post-quantum cryptography. An attacker would have to crack both worlds — today's and tomorrow's — just to read a single message.
Built-in Tor connection with obfs4 and Snowflake bridges. Even in countries that block Tor, your provider sees only meaningless traffic.
Your secret keys live in Apple's hardware chip. Not even we can extract them. Neither can iOS. Nor anyone holding your unlocked phone. Face ID to unlock.
In some moments, privacy matters more than anything. One tap — and LADON messenger overwrites every key, deletes every message, destroys every database. Irreversible, complete, instant.
If the device itself becomes the target, these layers kick in — so even a phone in the wrong hands gives nothing away.
Sensitive content is hidden from screenshots and screen recordings (the trick Signal uses) — and you're warned the moment a screenshot is taken.
50+ checks plus anti-debugging. A jailbroken or tampered device — or an attached debugger — is locked out.
The app locks itself and needs Face ID to reopen — a glance at your unlocked screen isn't enough.
Inactive too long? The app wipes every key and message automatically.
Messages live in memory (scrubbed after 30 min) and persist only as an encrypted file — seize the device and there's nothing readable on disk. Panic mode wipes both.
The app only trusts our exact servers (hardcoded SPKI pins) — no fake or man-in-the-middle server can slip in between.
Keep scrolling and watch your message get secured step by step — until only unreadable noise remains.
The text turns into code that's useless without the key — and can't be changed afterward.
Every message gets a fresh key. Old ones are thrown away. Crack one, and the rest stay sealed.
You and your contact don't need to be online at the same time — the secure connection is built anyway.
A second layer of encryption that even future quantum computers can't crack.
The server sees the message — but not who it's from. Only the recipient can verify that.
Every message is exactly 16 KB. Dummy packets fly in between. Length and timing reveal nothing.
The whole thing travels through the Tor network with bridges. Observers see only meaningless traffic.
Other messengers promise security. Here's who actually delivers what.
| Feature | LADON messenger | Signal | Telegram | |
|---|---|---|---|---|
| End-to-end encrypted | ✓ | ✓ | ✓ | optional only |
| New key per message | ✓ | ✓ | ✓ | — |
| Quantum-safe | ✓ | ✓ | — | — |
| Sender hidden | ✓ | ✓ | — | — |
| Built-in Tor | ✓ | — | — | — |
| Cover traffic | ✓ | — | — | — |
| No phone number required | ✓ | — | — | — |
| No contact upload | ✓ | — | — | — |
| Servers in a safe language (Rust) | ✓ | ✓ | — | unknown |
LADON messenger is a young project and has not yet had an external audit. Signal remains, for most users, the gold standard. Our goal: to raise the technical bar beyond Signal — audits and open source are planned.
LADON messenger's protocol is formally modeled in ProVerif, a cryptographic verification tool. Five security properties are written as machine-checkable queries:
Identities are signed with Dilithium3 (ML-DSA-65) — authenticity that holds even against quantum computers.
Signed prekeys rotate automatically every 48 hours — fresh key material on a tight cycle.
A push only signals "new data" — Apple never sees who wrote or what. Or switch to polling-only.
LADON messenger is a young project. We want to do it right — but we're open about where we're not there yet.
The source code will be published. Right now it isn't public yet.
We've reviewed a lot internally. But no independent firm has audited the code yet.
Fewer users means a smaller crowd to disappear into. Signal has an edge here thanks to its size.
No Android, desktop or web yet. We get one platform right, then the next.
"We promise nothing we can't prove."
Every quarter we sign a statement that we have received no secret government requests. If it ever disappears without explanation — you'll know.
"LADON messenger has received no government requests to hand over user data. LADON messenger has not been forced to build a backdoor. LADON messenger has not cooperated with any authority to weaken its encryption. LADON messenger is subject to no secret court orders or gag orders."
LADON messenger launches in 2026. Get a single email when the App Store build is live — no marketing, no follow-ups. Promised.
You'll get a confirmation email. Your address is used only for the launch notification.