Session

You join a private chat room, share a sensitive document, and close the app. Later, you realize you didn't log out. Someone picks up your unlocked phone. With most messaging apps, that person would have access to your entire conversation history, contact list, and metadata showing who you talked to and when. Session eliminates this entire category of risk. This is not a standard messenger with a "privacy mode" toggle; it is a foundational re-thinking of how digital communication should work, designed from the ground up to leave no trace.

Session operates without a phone number or email address. You are identified only by a random, 66-character public key. This single design choice removes the link between your digital identity and your physical identity. The app routes all messages through the Oxen Service Node network, a decentralized system of nodes run by independent operators. There are no central servers to hack, subpoena, or shut down. Messages are encrypted end-to-end by default, and the network does not store metadata—no sender IP addresses, no timestamps of when you were online, no records of who you are talking to.

Core Mechanics and User Experience

The interface is clean and utilitarian, prioritizing function over flash. On first launch, you are given a randomly generated Session ID. There is no onboarding flow that asks for contacts or permissions to your address book. You can either share your Session ID via a QR code or a text string, or you can search for other users by their ID.

• Message Routing and Onion Routing: When you send a message, it is encrypted and then passed through three random nodes in the Oxen network. Each node only knows the previous and next hop. The exit node delivers the message to the recipient, but it does not know the original sender. This is a distinct improvement over traditional messaging systems where a server knows exactly who is talking to whom.

• Disappearing Messages: You can set a per-conversation timer for messages to self-destruct. Options range from a few seconds to a week. Once the timer expires, the message is permanently deleted from the device and the network. This is not a "delete after read" feature; it is a cryptographic deletion where the decryption keys are destroyed.

• Open Group Chat: Session supports public chat rooms called Open Groups. These are hosted on the Oxen network and can be joined via a link. Unlike standard group chats, Open Groups are anonymous by default. You do not need to register or provide any identifying information. The chat logs are stored on the network, but they are encrypted and can be deleted by the group moderator.

Key Advantages Over Competitors

The primary differentiator is the absence of a central authority. Signal requires a phone number. Telegram requires a phone number. WhatsApp requires a phone number. Session requires nothing. This eliminates the possibility of a company being forced to hand over user data or metadata. Furthermore, the decentralized architecture means there is no single point of failure. If a government shuts down a server, the network continues to function on the remaining nodes.

• No Metadata Collection: The network does not log IP addresses, device information, or connection times. Your usage patterns are invisible to external observers.
• Resilient Infrastructure: The Oxen network is permissionless. Anyone can run a node, and the network self-heals if nodes go offline.
• Cross-Platform Consistency: The same codebase runs on Android, iOS, Windows, macOS, and Linux. Your session ID works across all platforms without needing to sync through a central server.

Technical Performance and Limitations

Session is built on the Loki Messaging Protocol, which is an evolution of the Signal Protocol. Encryption is performed using X25519 for key exchange and XSalsa20-Poly1305 for message encryption. The network uses a proof-of-work mechanism to prevent spam. This means that sending a message requires a small amount of computational work on your device. On modern Android hardware (12L and above), this is imperceptible. On older devices, you might notice a one-second delay when sending the first message in a new conversation.

The trade-off for anonymity is speed. Because messages must traverse three nodes, there is a latency of roughly one to three seconds per message. This is acceptable for asynchronous conversation but may feel sluggish for real-time chat. The app also consumes more battery than a standard messenger because the device must maintain a persistent encrypted connection to the Oxen network.

We suggest trying Session if you need a communication tool where the default state is privacy, not surveillance. It is particularly suited for journalists, activists, or anyone handling sensitive information where the cost of exposure is high.

Consider downloading the app if you are tired of apps that treat your data as a product. Session does not have ads, does not track you, and has no revenue model tied to user data.

Heads up: You will need a stable internet connection for all features. The app does not work over SMS. Also, the address book is not synced automatically; you must manually exchange Session IDs with contacts. Some advanced features, like the ability to run your own node for faster routing, require technical knowledge.