X3DH + Double Ratchet
Sessions start with an Extended Triple Diffie-Hellman handshake; then every message gets a fresh key. Forward secrecy protects the past, break-in recovery heals the future.
Private messenger · end-to-end encrypted
Your conversations.
Nobody else’s.
Messages, voice and video calls, groups and disappearing chats — encrypted on your phone before they leave it, built on the X3DH & Double Ratchet protocol family. No phone number. No e-mail. One payment of €8.88, then it’s yours.
Android 8.0+ · verified download
- End-to-end encrypted by default
- No phone number required
- Hosted in the EU
- No ads · no trackers
Identity
No phone number.
No e-mail. No compromise.
Hexagon never asks who you are. When you create your identity, your phone generates your keys and a random Hexagon ID — something like HXG-KZJJ-K89J. That is all anyone ever needs to reach you.
Create
Pick a passphrase. Your keys are generated on your device and never leave it.
Share
Show your QR code or send your Hexagon ID. Nothing is tied to your SIM, your contacts or your name.
Verify
Compare safety numbers or five symbols during a call, and you know nobody is in the middle.
Encryption
State-of-the-art encryption.
On by default. Always.
There is no unencrypted mode to forget to switch off. Every message, photo, voice note and call is encrypted on your device with audited, open primitives from libsodium — and only the people in the conversation hold the keys.
Your phoneencrypts
Serversees only ciphertext
Their phonedecrypts
XChaCha20-Poly1305
Authenticated encryption for every message and attachment. Tampering is detected, and each ciphertext is bound to the two identities in the session.
Curve25519 & Ed25519
Separate keys for agreeing on secrets and for signing them, as the protocols intend. Private keys never leave your phone.
Argon2id
Your passphrase protects your keys with a memory-hard derivation that makes guessing slow and expensive.
Encrypted at rest
On Android your messages live in a SQLCipher-encrypted database, and app lock adds a PIN or fingerprint on top.
Verified calls
Voice and video run over encrypted WebRTC media (DTLS-SRTP). Say five symbols to each other and you have proof the call is end-to-end.
Content-free push
Notifications only wake your phone. They carry no text, no name and no sender — those are decrypted on your device.
Media without metadata
Location and camera data are stripped from photos by default. If stripping fails, the photo is not sent.
What our server can see — honestly
To deliver messages, the server has to know your Hexagon ID, the IDs you have added, who a message goes to, when, and how large it is. It never sees what you write or say, your photos and files, group names, locations — or who you are. Call records are deleted about an hour after the call. Servers in the European Union.
On the roadmap
Post-quantum key agreement
We are designing a hybrid post-quantum handshake so that today’s messages stay private even against tomorrow’s computers. It will ship when it is reviewed — not before.
Features
Everything you need.
Nothing that watches you.
Voice & video calls
HD Opus audio and video, end-to-end encrypted, with a verification ritual built in.
Groups
Plan the weekend with everyone. Group names and messages stay end-to-end encrypted.
Disappearing messages
Set a timer per chat and messages delete themselves after the time you choose.
Voice messages & photos
Send voice notes, photos and files. Metadata is stripped before anything is encrypted.
App lock
PIN, passphrase or fingerprint. Block screenshots and previews in the task switcher.
Encrypted backups
Export your account and chats as an encrypted file you keep — not us.
Privacy controls
Read receipts, typing indicator, unknown-sender blocking — your call.
Soft sounds
Original ringtones and message tones with a gentle ramp-up. No more jump-scare ringing.
Data
What we never collect
The best way to protect data is not to have it.
- Your phone number
- Your e-mail address
- Your real name
- Your address book
- Message content
- Call audio or video
- Photos and files
- Your location
- Group names
- Advertising IDs
- Analytics or trackers
- Website cookies
In the app and on this website. This page loads no scripts, no cookies and nothing from third parties.
Design
Three looks. One promise.
Switch the whole app — and its icon — in Settings → Appearance. Every look has the same features, the same accessibility and the same encryption.
Calm Glass
Soft light from your contact, controls on frosted glass.
Minimal
Black, typographic, every state spelled out.
Living Hexagon
The hexagon breathes with the call.
Pricing
€8.88. Once.
No subscription. No in-app purchases. No ads. You pay once and Hexagon is yours — the same price on every channel.
€8.88one-time
- Unlimited messages, calls and groups
- All three looks and every sound
- Updates included
- No account, no personal data
Android · direct
APK from hexagon.pm, unlocked with a licence key you buy with Bitcoin or Lightning.
Google Play
The same app as a paid download from Google Play.
iPhone
Hexagon for iPhone is in development.
Buy with crypto
A licence key. No account. No name.
Pay on our own BTCPay Server — no payment company in between — and get a licence key that works without ever creating an account.
Pay
Bitcoin on-chain or Lightning, on pay.hexagon.pm. We never ask for an e-mail or a name.
Get your key
Your key appears on screen, like
HXL1-…. Save it — it is the only copy.Download
Install the APK and check the SHA-256 and signing certificate against /download.
Activate
Enter the key. The app verifies its signature offline; the key contains no personal data.
Purchases open soon. Until then you can follow the release on this page.
Download
Verify before you install.
Every APK is published with its SHA-256 checksum and the fingerprint of our signing certificate. Updates are signed with the same key and checked by the app.
Go to the download pageVerifiable
Don’t trust us. Check.
The Hexagon client source code is licensed under the AGPL-3.0, so anyone can read how your messages are protected.
Source code: published at launch.
FAQ
Questions, answered
Can Hexagon read my messages?
No. Messages are encrypted on your phone with keys that only you and the people you talk to have. Our server stores and forwards ciphertext it cannot decrypt.
Why don’t you need my phone number?
Because your identity is a pair of keys generated on your device and a random Hexagon ID. Without a phone number there is nothing linking your account to your SIM, your name or your address book.
What happens if I lose my phone?
Restore from the encrypted backup you exported. Without a backup your identity cannot be recovered — not even by us. That is the price of nobody else holding your keys.
Why is it paid?
Because you should be the customer, not the product. A one-time €8.88 keeps Hexagon free of ads, trackers and data deals.
Why pay with crypto?
For the direct Android version it lets you buy without an account, a card or a name. If you prefer a store, Hexagon is coming to Google Play and the App Store at the same price.
Does the licence key contain personal data?
No. It holds a licence ID, the product and an issue date, signed by us. The app checks the signature offline.
Is there an iPhone or a web version?
The iPhone app is in development. There is no public web version at launch.
Can I read the source code?
Yes, at launch. The Hexagon client will be published under the AGPL-3.0 licence, so anyone can check how messages are protected.
How do I delete my account?
In the app under Settings → Backup & Delete, or follow the steps on hexagon.pm/delete-account. Your profile, contacts and messages are removed from our server right away; that page lists the few records kept for a limited time.