Features
A private messenger, end to end
Etoki delivers the messaging you expect — chats, groups, files, calls — while minimizing the metadata that other apps leak.
Messaging & groups
Talk, share, and meet — encrypted
End-to-end encrypted messaging
Duplex connections with an automatically rekeying double ratchet. Forward secrecy and post-compromise security on every message.
Groups over MLS
Group E2EE built on MLS (RFC 9420) with admin-gated membership and an out-of-band verification code, carried over your pairwise channels.
Padded file transfer
A chunked file relay pads uploads to size buckets and splits chunks across relays. Descriptions are e2e-encrypted; relays never see content.
No Google or Apple push
The app keeps a persistent, battery-aware connection to its queues for real-time delivery — message alerts never pass through FCM or APNs. A content-free push relay is an optional add-on for deployments that want it.
Transports & privacy
Reach the network without revealing yourself
DNS-free addressing
etoki:// addresses carry IP hints or resolve over DNS-over-HTTPS — the OS resolver is never used, and a pinned fingerprint is the trust root.
TLS camouflage
A gateway makes traffic look like ordinary HTTPS with a browser-like ClientHello; probers hitting the wrong path get a static decoy page.
Pluggable transports
Plain TCP, WebSocket for CDN reachability, or SOCKS5 — point it at Tor and each session gets its own circuit, with onion targets resolved inside the proxy.
Proxy rotation
Pin a single SOCKS5 proxy, or rotate through a pool so every new connection takes the next one — with a strict mode that refuses anything unproxiable.
On your device
Private by default, on the phone too
Voice & video calls
End-to-end encrypted 1:1 calls over WebRTC, declined instantly when disabled or when strict-proxy mode would leak your IP.
Voice notes & Etoki
Record encrypted voice messages inline, or hold to talk live in the Etoki tab — walkie-talkie style push-to-talk over the same private channels.
Private “tap to view” messages
Send a message that arrives hidden behind a tap. View-once deletes itself on both phones five seconds after it is read; view & keep stays locked until you tap. Copying, saving and forwarding are refused, and your own draft masks itself as you type.
Encrypted local history
Chats, media, and keys live in a SQLCipher database whose key is wrapped by the Android Keystore — nothing is readable at rest.
Disappearing messages
Per-chat timers auto-delete messages on both ends, with a periodic sweep so nothing lingers longer than you intend.
Multiple profiles & panic mode
Keep separate identities on one device and switch instantly. A per-profile duress PIN wipes the account on entry.
App-lock & screenshot block
Guard the app with a biometric or PIN lock, and block screenshots and the recents-screen preview.
Want the cryptographic detail?
See exactly what routers can and can't observe, and how the post-quantum ratchet keeps healing.