Frendy is a privacy-first messenger. Messages, files and calls are encrypted on your device and can only be decrypted by the recipient. No phone number, no email — you join with an invite code and a username you choose.
Not a marketing slogan — auditable cryptography. Here is exactly how it works.
Text is encrypted with the dialog key (AES-256-GCM).
plaintext → cipherStores & forwards ciphertext only. No decryption key exists here.
sees only ciphertextCiphertext is decrypted with the dialog key on-device.
cipher → plaintextBrute-forcing AES-256 isn't "slow" — it's thermodynamically impossible. Iterating through every key would take about 1013× more energy than the Sun will emit over its entire remaining lifetime. This is literal electricity: to run the brute-force on supercomputers you have to power them from the wall — and running them would take exactly that much energy.
The seed key is derived via PBKDF2-SHA-256, so brute-force speed is capped by SHA-256 throughput. Even Earth's largest SHA-256 hashing power — the entire Bitcoin network (~6×1020 hashes/sec) — aimed at one account would need ~2.2×1016 years: about 1.6 million times the age of the Universe.
The honest weak point is never the cipher — it's key theft (malware, phishing, a carelessly stored recovery phrase). That's why keys live in a hardware secure chip and are wrapped under your PIN. See the full breakdown →
Every message, file, photo, voice note and call is encrypted on your device. The server relays sealed envelopes it can never open.
No phone number, no email, no personal data — you join with an invite code and a username you make up. A rare pairing with post-quantum forward secrecy.
Session setup mixes ML-KEM (Kyber-1024) with classic X25519 — protection against "harvest now, decrypt later" quantum attacks.
A second, "panic" PIN instantly wipes your keys and revokes the session — protection when you're forced to unlock under pressure.
On Android the local database (SQLCipher) encrypts even metadata. Media is stored as encrypted bytes; plaintext lives only in RAM.
1:1 calls over WebRTC (DTLS-SRTP), plus group video conferences with end-to-end encryption — not just one-to-one.
The server stores avatars as ciphertext only — decrypted on the client. Most mainstream messengers keep avatars in plaintext.
TOTP two-factor auth, a live list of your devices, remote session revocation, and login alerts with IP and country on every device.
Even a fully-rooted, unlocked phone can't reveal your chats: with a PIN set, your keys are wrapped under a PIN-derived key that is never stored on the device.
A side-by-side look across 15 messengers on the security properties that matter — a good-faith summary from public sources, including where Frendy still trails (open-source, independent audit).
See the full comparisonKotlin / Jetpack Compose. SQLCipher at-rest, StrongBox keys, Play Integrity, R8 hardening.
Kotlin / Compose Multiplatform. Full v2 group participant, inline audio & video, local history storage.
Swift / SwiftUI. Auth, dialogs, chat and E2EE in place; media and calls landing next.
No phone number. No email. No personal data. To create an account you need just two things: an invite code and a username you make up. That's it.
To get an invite code, for now write to inviteme@frendy.im.
Frendy exists to protect the private conversations of ordinary people — families, friends, journalists, activists, professionals — anyone who believes privacy is a right, not a crime. It is not a tool for the shadows: we do not provide Frendy for drug trafficking, child sexual abuse, terrorism or any other criminal activity, and such use has no place here. Access is invite-only precisely so this stays a network for people, not predators.
Frendy is free. The only "condition" to join is an invite. We don't charge for private conversations — that's a right, not a paid feature. Optional add-ons (like extended media storage) may cost money later, but secure messaging stays free, always.
Frendy is in testing and free to use. Your conversations stay yours — always.
Frendy is young and moving fast. Android and Windows are available today, iOS is actively in development, and we're open to building for other platforms.