AENC is a free, offline encryption app. It sits on top of the apps you already have. You encrypt a
message, a file, a photo or a voice note right on your phone, you send it through any messenger, and only the
person you picked can open it.
No accounts. No tracking. Keys you hold. Keep your private keys on a removable USB drive
that you hold. You can keep them on the phone too, that is just a bit less safe. Decrypted content stays in
memory, and AENC wipes it after you are done. We never see what you write — offline there is no server at all, and the messenger's relay only ever handles ciphertext it cannot read.
AENC is free. The standard build makes no network
requests at all. The Google Play build can use the network for Google Play and for its optional built-in messenger —
but your messages are end-to-end encrypted before they ever leave your phone. There is a full two-build breakdown further down the page.
AENC does all the encrypting right on your phone. Both builds use the very same encryption inside.
The only difference is whether the app is allowed online at all, and if it is, what it talks to.
Offline build · direct download
Sealed by the operating system
Free, and no server. The permission to open a network socket is simply not there. Android itself
blocks it, so this is not a promise from us, it is a hard limit.
No INTERNET permission, so the app cannot send anything
Keys, contacts and content live in memory or on your USB drive
Truly offline, with no data leaving the phone
Passkeys integration - 2FA with YubiKey security keys
In development
MDM integration, managed enterprise deployment and policy
Encrypted video, capture, send and receive
On device malware scanner, built into the app
Onion routing, hide network metadata for the messenger
Play build · Google Play Store
Network for Google Play and the built-in messenger
Adds INTERNET, which Google Play needs. The offline encryption is still free and stays on your
device. The network path is only for Google Play services and the optional paid messenger.
license.aenc.io, our licence server and the messenger relay (ciphertext only)
Google Play Billing and Play Integrity , for the paid subscription
Firebase push , contentless "new message" wake-up (opt-out)
Passkeys integration - 2FA with YubiKey security keys
Live now
Built-in messenger, sends straight through our relay with no third-party app — end-to-end encrypted, with files that open right in the chat. This is the one paid feature.
Double Ratchet, rotating keys and mailbox addresses for per-message forward secrecy
Post-quantum, hybrid X25519 + ML-KEM / NTRU Prime across messages and files
Plaintext never leaves, in either build. Your contacts and your private keys never
leave your phone, and nothing you write is ever sent in the clear. Offline, you share the encrypted file yourself.
With the messenger, your message leaves only as end-to-end-encrypted ciphertext relayed to the
recipient — our relay handles ciphertext and minimal delivery metadata (never plaintext or keys). Licence checks
send only purchase info, a random device id, and a little basic device data.
Real end to end
X25519 key agreement with AES 256 GCM, Ed25519 signatures, and an
optional post quantum mode (sntrup761). Sealed sender also hides who sent the message.
Removable key
Your key sits in an encrypted .aekey file, protected by a
strong passphrase (Argon2id). It is best kept on a USB drive.
Truly offline
The standard build asks for no network access at all. You share the
encrypted file yourself, over whatever channel you like.
Nothing at rest
Photos and voice notes are encrypted straight from memory. Decrypted
content is view only and wiped when you leave. There is also an emergency wipe for sensitive files.
Post quantum option
Turn on the hybrid post quantum mode (sntrup761 with X25519) and
your messages stay private even against future quantum computers.
Built against forensics
AENC keeps nothing in its own storage or cache. Keys stay on a
removable USB and content lives only in memory. Pull the drive and a forensic tool has almost nothing to find.
Why this matters
Governments and platforms keep pushing for more access to private messages. Those moves miss AENC by
design. The channel only ever carries ciphertext. There is no plaintext in transit, no server that can read your
content, and nothing left behind for anyone to reach.
Every one of these attacks goes after a server or the
plaintext on a device. AENC exposes neither: no readable content on any server, no plaintext in transit.
Your message turns into an opaque encrypted file the moment it leaves the app, and only the person you chose can turn it back into text.
Who it is for
Journalists, activists, lawyers, and anyone who wants strong encryption they hold themselves, without trusting
a server with their keys or their messages.
