This is the deep end. If you want to know exactly how LADON messenger protects a message — from your keyboard to your contact's screen — it's all here. Nothing hand-waved, nothing hidden.
Every message passes through seven separate layers of protection. We build as if every layer fails — and you'd still be protected.
No phone number. No email. No name. On first launch, LADON messenger creates a secret key right on your phone — and never sends it to us. To our system, you are a random number.
Server one knows your IP, but not the recipient. Server two knows the recipient, but not you. Even if one were seized, the secret stays safe.
LADON messenger automatically sends dummy messages between the real ones. An observer sees constant traffic — but can't tell when a conversation is actually happening.
LADON messenger combines classical encryption with post-quantum cryptography. An attacker would have to crack both worlds — today's and tomorrow's — just to read a single message.
Built-in Tor connection with obfs4 and Snowflake bridges. Even in countries that block Tor, your provider sees only meaningless traffic.
Your secret keys live in Apple's hardware chip. Not even we can extract them. Neither can iOS. Nor anyone holding your unlocked phone. Face ID to unlock.
In some moments, privacy matters more than anything. One tap — and LADON messenger overwrites every key, deletes every message, destroys every database. Irreversible, complete, instant.
Keep scrolling and watch your message get secured step by step — until only unreadable noise remains.
The text turns into code that's useless without the key — and can't be changed afterward.
Every message gets a fresh key. Old ones are thrown away. Crack one, and the rest stay sealed.
You and your contact don't need to be online at the same time — the secure connection is built anyway.
A second layer of encryption that even future quantum computers can't crack.
The server sees the message — but not who it's from. Only the recipient can verify that.
Every message is exactly 16 KB. Dummy packets fly in between. Length and timing reveal nothing.
The whole thing travels through the Tor network with bridges. Observers see only meaningless traffic.
If the device itself becomes the target, these layers kick in — so even a phone in the wrong hands gives nothing away.
Sensitive content is hidden from screenshots and screen recordings (the trick Signal uses) — and you're warned the moment a screenshot is taken.
50+ checks plus anti-debugging. A jailbroken or tampered device — or an attached debugger — is locked out.
The app locks itself and needs Face ID to reopen — a glance at your unlocked screen isn't enough.
Inactive too long? The app wipes every key and message automatically.
Messages live in memory (scrubbed after 30 min) and persist only as an encrypted file — seize the device and there's nothing readable on disk. Panic mode wipes both.
The app only trusts our exact servers (hardcoded SPKI pins) — no fake or man-in-the-middle server can slip in between.
There's no central address book to query — or to subpoena. You add a contact directly, and you can verify there's no one in the middle.
Scan your contact's QR code in person — no phone number, no central directory that could be queried or handed over.
Every contact pair shares a safety number (a fingerprint). Compare it once and you know no one is secretly sitting in the middle.
Photos, videos and voice messages are end-to-end encrypted like every text — and cleaned of hidden traces before they ever leave your phone.
Location & camera data (EXIF) are stripped automatically — the image carries no hidden metadata.
Encrypted and metadata-cleaned, split into chunks and verified end-to-end.
The audio leaves your phone with no hidden data attached to it.
Set a timer per chat: 30s · 5min · 1h · 24h · 7 days — or off.
Even the file size reveals nothing — every attachment is padded to a fixed bucket. And contacts are added by QR code, never a phone number.
LADON messenger's protocol is formally modeled in ProVerif, a cryptographic verification tool. Five security properties are written as machine-checkable queries:
Identities are signed with Dilithium3 (ML-DSA-65) — authenticity that holds even against quantum computers.
Signed prekeys rotate automatically every 48 hours — fresh key material on a tight cycle.
A push only signals "new data" — Apple never sees who wrote or what. Or switch to polling-only.
LADON messenger is a young project. We want to do it right — but we're open about where we're not there yet.
The source code will be published. Right now it isn't public yet.
We've reviewed a lot internally. But no independent firm has audited the code yet.
Fewer users means a smaller crowd to disappear into. Signal has an edge here thanks to its size.
No Android, desktop or web yet. We get one platform right, then the next.
"We promise nothing we can't prove."
Every quarter we sign a statement that we have received no secret government requests. If it ever disappears without explanation — you'll know.
"LADON messenger has not received any government requests for user data disclosure. LADON messenger has not been compelled to build any backdoors. LADON messenger has not cooperated with any authority to weaken its encryption. LADON messenger has not been subject to any secret court orders or gag orders."
You've read how it works. Be there when LADON messenger launches — one email, no marketing.