DUNNO is an ultra-secure, peer-to-peer messenger for Android. All communication runs over Tor v3 hidden services — completely without central servers. End-to-end encrypted, screenshots blocked by default, and if threatened, the app wipes itself in 12 phases.
Every feature is built from the ground up around one principle: your data belongs to you — and to no one else.
Text messages with true end-to-end encryption between peers. No relays, no logs, no middlemen.
NaCl crypto_box_sealSend files end-to-end encrypted. Every attachment is protected with AES-256-GCM, with the data key wrapped in the Android Keystore.
AES-256-GCMWebRTC video calls over Tor, with an optional TURN relay behind NAT. No central media servers.
WebRTC over TorWalkie-talkie style voice, fast and lightweight. Perfect for situations where typing isn't an option.
PTTMandatory PIN (6+ digits) on cold start, plus biometric unlock via BIOMETRIC_STRONG. It cannot be turned off.
Argon2id + TEEOne panic PIN and the app wipes itself in 12 phases: database, attachments, keys, Tor hidden service and more. Idempotent — even after a crash.
12 phasesFLAG_SECURE is always on, on every screen. No screenshots, no screen recordings, no recents previews. Autofill is blocked too.
FLAG_SECURE always-onAll communication via .onion addresses. Bridge support (OBFS4) for censored networks.
No central serverVISIBILITY_PRIVATE on every channel: no content on the lock screen, contact names hidden. Not switchable — security first.
VISIBILITY_PRIVATEFrom transport to database, from hardware keys to runtime detection: every layer is designed defensively.
crypto_box_seal — X25519 + XSalsa20-Poly1305crypto_secretbox, 256-bit key via X25519 ECDH + SHA-256 KDFFive separate keystore aliases, all hardware-backed in the TEE / StrongBox:
/proc/self/statusIndependently scored categories for on-device security.
| Category | DUNNO | Signal | Briar |
|---|---|---|---|
| Data-at-rest encryption | 9 | 7 | 6 |
| Key storage (TEE) | 9 | 4 | 5 |
| App-level lock | 9 | 7 | 6 |
| Screen security | 9.5 | 6.5 | 3 |
| Anti-tampering | 9 | 4 | 3 |
| Wipe / data destruction | 9 | 2 | 1 |
| Notification privacy | 8 | 7 | 4 |
| Backup encryption | 8 | 8 | 1 |
| Maturity & external validation | 2 | 10 | 6 |
| Total | 8.4 | 6.1 | 4.9 |
DUNNO scores 8.4/10 — significantly higher than Signal (6.1) and Briar (4.9).
DUNNO communicates peer-to-peer over Tor v3 hidden services. There is no message server, no account database, no metadata mine. The only server-side component is an optional TURN server for video calls behind NAT — and it only provides connectivity, never content.
🔒 End-to-end encrypted. Tor-routed. Frida-proof.
DUNNO v1.1.0 for Android. Currently in closed testing on Google Play — sign up as a tester to get access.