Kryfo

Releases

• Nov 8, 2026 0.6.0
  New contacts need 0.6 on both phones. Your chats with contacts on 0.5.3 keep working; ask them to update so you can add each other. New - Post-quantum encryption. A chat between two 0.6 phones starts with PQXDH and runs with SPQR, Signal's post-quantum ratchet. An older chat moves over by itself once both sides have 0.6, and the chat shows a line when it has. - Linked devices: link a computer to your phone. Scan the code it shows, compare six digits, and pick what comes over: every chat, text only, or contacts and groups only. New messages reach both, read and deleted ones stay in step. Hidden chats, the decoy, invites, rooms and group changes stay on the phone. Remove a computer from the phone at any time and it erases itself; one left unused for 30 days erases itself too. - Kryfo for Windows, as an early beta (see below). - Kryfo for Linux, as an early beta too (see below). - Invite someone from the first minute: the link you share opens a page that says what Kryfo is and where to get it, then opens Kryfo. It works in any messenger, also for people who don't have Kryfo yet. - Pick a public @name while setting up, or skip it and stay unfindable. - Pair codes have eight digits now, and both phones need 0.6. The six digit code is gone.

  More…

  - Typing indicator in 1:1 chats. It goes straight to your contact over Tor, never through a relay, and is off by itself while Tor goes through a bridge or the chat is archived. Turn it off in Settings, Privacy. - Profile photos. Only contacts you have both added see yours, and it never shows in notifications. - Big files: between 0.6 phones, photos, videos, voice notes and files up to 50 MB wait on our files service until the other side fetches them. The service holds sealed bytes it can't open, is reached over Tor, and keeps nothing longer than a week. - File transfers show their progress and time left, pause and resume, and keep going with a notification. Big files can wait for a tap or for Wi-Fi. - Screenshot blocking in groups. - Note to self keeps photos, GIFs, files and voice notes too, and they reach your linked computer. - A quiet line in the chat when a contact links a new device or removes one. - Share a saved bridge with someone, as a code or into a chat. - The home screen icon and name can look like an everyday app: Notes, Weather, Tasks or News. Pick one in Settings, Security, Icon and notifications. - Offline translation: translate a message on your phone, never on a server. A language pack downloads once, over Tor. - Google push and tips, in the Google Play build only. Google push is off until you pick it. A tip gives a supporter badge and nothing else. - If Kryfo can't start, it offers to restore a backup or start fresh. - A universal APK with both ARM builds in one file. It installs on every ARM phone. - Kryfo in Hindi and Polish, 17 languages in all. Thanks to padrian772 for reviewing the Polish translation. Improved - Setup is shorter: six steps. Your face is drawn from your name, you choose the route in setup, and the battery guide comes right after notifications. - Your PINs only work on this phone: they are tied to the phone's security chip, so they can't be tried on another device. Your encrypted backup is the way back in if the chip ever loses its key. Thanks to Ami (SleepingAmi) for suggesting it. - Photos, voice notes and files are encrypted on the phone too, under names that say nothing about them, and no photo stays decoded once Kryfo locks. - On Android 13 and newer, screenshots work again with a PIN set, in chats that don't block them, and Kryfo stays hidden in recent apps. The lock screen, PIN and passphrase screens, hidden chats and blocking chats still block them. - A request from someone you don't know shows only words until you accept, and links in it stay plain. - The safety number card shows once, on a contact's page, instead of in the chat. - A message you write while Kryfo is still connecting shows as sending and goes as soon as the route is up. - Voice notes go as Opus to phones that play it, smaller at the same sound. - A HEIC photo is sent as a JPEG, so every device can show it. - The clipboard is cleared when hidden chats or the decoy lock, and copied messages are marked as sensitive. - With message previews off, notifications are one shared "New message" alert for all chats, so nobody can count them. - Kryfo keeps fewer connections to relays open. - The keyboard reaches every button and switch, screen readers hear PIN counts, wrong PINs and long jobs, and text grows up to twice its size. - Tor 0.4.9.15. Fixed - Photos no longer flicker after you unlock. - A portrait video stays upright in its bubble. - A file send to a group that stalls now ends instead of waiting forever. - A deleted message stays gone when a late copy of it arrives. Known issues - Offline translation works for one language at a time: after you translate from one language, a second one may show "Couldn't translate". Close Kryfo (swipe it away) and open it again, then translate the other language. A coming update fixes it. Stability and privacy improvements throughout. Update when you can. The full list is in CHANGELOG.md. Upgrading from 0.5.x - Your chats with contacts still on 0.5.x keep working as they are. Once both of you have 0.6, the chat moves to post-quantum encryption by itself. - A contact on 0.5.x needs to update before you can add each other: new invite links, QR codes, handles and pair codes need 0.6 on both sides. Kryfo tells you when that is the case. - Big files and profile photos need 0.6 on both sides. - Moving between Google Play and GitHub or F-Droid needs a backup, uninstall and restore: Play installs are signed by Google, the GitHub and F-Droid packages by us, so Android will not update one with the other. Kryfo for Windows (beta, unsigned) This is an early beta of Kryfo on Windows 10 and 11, 64-bit. Use it on its own, or link it to your phone from Settings. The installer is not signed yet, so Windows SmartScreen shows "Windows protected your PC". Check the file first (below), then choose More info and Run anyway. Windows builds will be signed once SignPath approves. Closing the window keeps Kryfo in the tray, so messages keep arriving; quit from the tray icon. The Windows installer was built from this tag (commit 61b1439) with the scripts in this repository. Its sum is in SHA256SUMS-windows. Builds made by GitHub Actions, with an attestation you can check, come back with a later release. Kryfo for Linux (beta) An early beta for 64-bit Linux, built from this tag. It needs glibc 2.38 or newer: Ubuntu 24.04 or newer, Debian 13, Fedora 39 or newer. Unpack it and run the installer in its folder: tar xzf kryfo-0.6.0-beta-linux-x64.tar.gz cd kryfo-0.6.0-beta-linux-x64 ./install.sh It installs Kryfo for your user only, in ~/.local/opt/kryfo, with a menu entry, and needs no root. Run it again to update. `./install.sh --remove` takes the app away and keeps your messages, which live in ~/.local/share/kryfo. Use it on its own, or link it to your phone from Settings. Its sum is in SHA256SUMS-linux. Which file - app-universal-release.apk: works on every ARM phone. Pick this one if you're not sure. - app-arm64-v8a-release.apk: most phones, a smaller download. - app-armeabi-v7a-release.apk: older and budget phones. - app-x86_64-release.apk: emulators and Chromebooks. - kryfo-0.6.0-windows-x64-setup.exe: the Windows installer (beta). - kryfo-0.6.0-beta-linux-x64.tar.gz: Kryfo for Linux (beta). - libkryfo_signal-0.6.0-source.tar.gz: the complete source of the Signal library inside the app. Check your download There are three sum files: SHA256SUMS for the APKs and the source archive, SHA256SUMS-windows for the Windows files and SHA256SUMS-linux for the Linux tarball. On Linux or macOS, in the folder you downloaded to: sha256sum --ignore-missing -c SHA256SUMS sha256sum --ignore-missing -c SHA256SUMS-windows sha256sum -c SHA256SUMS-linux On Windows, in PowerShell: Get-FileHash .\kryfo-0.6.0-windows-x64-setup.exe -Algorithm SHA256 and compare it with its line in SHA256SUMS-windows. The APKs are reproducible: anyone can build them again from the source and get the same bytes, apart from the signature. To check them yourself, from a clone of this repository: cd repro ./verify.sh --ref v0.6.0 app-arm64-v8a-release.apk app-armeabi-v7a-release.apk \ app-x86_64-release.apk app-universal-release.apk It builds the tag twice in a container and prints MATCH for each APK when it is the same as the one published here. repro/README.md has the details. Signing certificate SHA-256 10928a61642c5cc471a99869e2ea4e2d4d70026e797dfba48c0f306b5b3473db SHA256SUMS 604cd7badd763f675e227a82844565c08e170d31b54c0ce8aae4b1939bcd3b86 app-arm64-v8a-release.apk 1f538463356c3f175a7a9be138e289cffaea8db762173644c180664f8e876fc6 app-armeabi-v7a-release.apk e0744504a396741a32853ee134b3b45fbd69182feed2883a2ea6751cdba06168 app-universal-release.apk 17ed58cc414190afdb68766736437f39daeb2c1714f635141100eb9012b3555c app-x86_64-release.apk 3b3f72cbb1dd9b8e79d4e924e702a392eb01ed5608e75440c26c47aee3e787d7 libkryfo_signal-0.6.0-source.tar.gz SHA256SUMS-windows ab6544bd0c62c0af98b41c97414cfe6c01222f39519f03f7aae988da25562f46 kryfo-0.6.0-windows-x64-setup.exe SHA256SUMS-linux 0f604274bae7c175cfc1bf857fe44dfdf22a41d2913ee941b95deb9f498da254 kryfo-0.6.0-beta-linux-x64.tar.gz