Establish private communication channels exclusively through an in-person Mutual Physical Handshake. No central servers, no phone numbers, no cloud metadata. Encrypted with ML-KEM-768 Kyber + X25519 and routed over local Wi-Fi or Tor.
Unlike commercial chat apps that store graph telemetry, contact lists, and message queues on central servers, Entangl enforces pure peer-to-peer security.
No phone numbers, SMS verification codes, emails, or central directory servers. Your identity is a cryptographic Ed25519 keypair generated strictly inside your phone's hardware security chip.
Contacts physically scan each other's visual public keys in person. Neither user can send a message until both devices verify a matching 60-digit Safety Number, eradicating remote spam and MITM attacks.
Hybrid Double Ratchet combining ML-KEM-768 (Kyber) and X25519. Protects conversations against "Store Now, Decrypt Later" (SNDL) attacks by future quantum supercomputers.
Local Wi-Fi peer discovery for instant, zero-latency LAN transmission. For remote WAN chats, Entangl runs an embedded Tor arti daemon hosting private .onion hidden services without exposing IPs.
All database tables, message logs, and contact records are encrypted at rest with SQLCipher (AES-256). Master keys are wrapped by the hardware-backed Android Keystore with StrongBox support.
Window enforcement with FLAG_SECURE blocks screenshots and screen recording. Cryptographic keys reside in native memory buffers (`NativeKeyBuffer`) and are zeroed immediately with sodium_memzero.
In the Entangl Android application, each node selects a codename and an atomic profile color from the cyber color picker. The profile is signed with Ed25519 to prevent identity spoofing.
Click any preset to dynamically re-theme this website and preview the node signature:
Active Profile Hex: #00F0FF
Connecting with a peer takes under 15 seconds, requires zero Internet connectivity, and guarantees immunity against remote surveillance.
Alice initiates the handshake. Her device generates a rolling nonce, exports her public Ed25519 identity key, and displays a dynamic QR code.
Bob scans Alice's QR code. Bob's phone validates Alice's signature, signs both nonces with his private key, and renders a response QR code.
Alice scans Bob's QR code. Both devices compute a deterministic 60-digit Safety Number (12 blocks of 5 digits) to verify channel integrity.
Both devices establish initial Double Ratchet keys. Messages can now route over local LAN or Tor with post-quantum Kyber protection.
Every packet, payload, and cryptographic primitive is transparent and auditable. Inspect real wire payloads below:
{
"protocol_version": 1,
"ephemeral_x25519_pub": "a4f891b2c45d6e7f80123456789abcdef0123456789abcdef0123456789abcde",
"pq_kem": {
"algorithm": "ML-KEM-768 (Kyber)",
"ciphertext_bytes": 1088,
"encapsulated_key": "0x9f88a1b2...[Lattice Encapsulation Validated]...e4f1"
},
"kdf_derivation": "HKDF-SHA256(SK_X25519 || SK_ML_KEM_768)",
"security_level": "NIST Category 3 (192-bit Quantum Security)"
}Free, open-source, and verifiable. Available via Google Play Store, direct APK download, and source code build.
Google Play Store
Standard installation with automatic security updates and verified signatures through Google Play Protect.
Standalone installation with no Google Play Services dependency. Includes embedded Tor daemon.
Clone the repository, audit the cryptographic primitives, and build using Kotlin 2.0 and Gradle.
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855