Privacy,
privately.

The messenger with no phone number. Every message is locked on your iPhone and opens only on theirs.

Coming soon to iPhone See how it works

How it works

From your phone to theirs.
Unreadable in between.

9:41
M
Maya@maya
Yesterday
Golden hour from the roof
Unreal 😍
Today
Dinner this week?
Friday works for me
Perfect. Pick a place?
That little Italian spot 🍝
Are we still on for tonight?
9:41
R
Ray@ray
Yesterday
Golden hour from the roof
Unreal 😍
Today
Dinner this week?
Friday works for me
Perfect. Pick a place?
That little Italian spot 🍝
Are we still on for tonight?
Message

You write a message. Just like always.

It's locked before it leaves your iPhone. With keys only the two of you hold.

Then it travels across a peer-to-peer network. Hop by hop, node to node.

Every node passes it on. Not one can read it.

Only one phone can open it.

Theirs.

Identity

No phone number.
Ever.

You're your @handle. Behind it is a wallet that's yours, not ours, and every key your phone publishes is signed by it. If a key ever changes, the chat tells you. Compare safety numbers and you know it's really them.

No number to give outShare your @handle instead. Strangers wait in message requests, and you can block anyone.
No address book uploadPopy never reads your contacts. You find friends by their @handle.
Keys signed by your walletEach phone checks the signature before a single word is exchanged.

Our servers

Your messages
never touch
our servers.

We keep no copy to sell, hand over or leak. Only your phone and theirs can read what you say.

0
phone numbers asked for
0
contacts uploaded
0
messages anyone in between can read

Photos and files wait on Popy's storage only as locked data under random names, and are deleted after 45 days. The key to open them travels inside your message. If you report someone, the messages you choose to include are sent to our moderators. Money you send is USDC on the Polygon blockchain, where every transfer's amount and wallets are public.

Encryption

A new key
for every message.

Popy is built on the design of the Signal Protocol. With every message the ratchet turns and the key changes, so one stolen key can't open the messages that came before it.

#1message key
Key agreement
X3DH over X25519
The first message sets up a secret only your two phones share.
Messages
Double Ratchet
Fresh keys for every message, in both directions.
Cipher
XChaCha20-Poly1305
256-bit authenticated encryption. Any tampering is detected.
Length
Padded to 256-byte blocks
The network sees short, medium or long. Never the exact length.
Verification
Safety numbers
Compare 60 digits in person and know no one sits in the middle.
Foundations
Proven building blocks
Built on @noble cryptography: open-source libraries, independently audited.

Network

Peer-to-peer.

Popy sends your messages over Waku, an open peer-to-peer network run by independent operators around the world. No Popy server carries them, and there's no central switchboard to tap.

The Popy app icon

Popy.

Coming soon to iPhone.

From the makers of popularity