A complete messenger, minus the surveillance.
Every capability ships in the box. No premium tier, no data resale, no asterisks.
Conversations
4 capabilities1:1 & group chats
Direct and group threads with verified badges and live presence.
Encrypted attachments
Photos, video and files end-to-end encrypted before they leave the device.
Voice notes
Record and send audio messages with waveform playback.
Video circles
Round, Telegram-style video notes from the front camera.
Privacy controls
4 capabilitiesDisappearing messages
Read-and-burn timers from 1 minute to 12 hours, per conversation.
Per-chat passwords
Lock any single conversation behind its own password.
App lock
Require a password or biometrics to open Blink at all.
Screenshot blocker
FLAG_SECURE blocks screenshots, recording and the app-switcher preview.
Identity & sync
4 capabilitiesDID:key identity
An on-device keypair — no phone number, no email, no account.
QR key verification
Scan a contact's QR to verify keys face-to-face.
12-word recovery
Restore your identity from a recovery phrase you control.
Add by DID or QR
Find people without handing your contact list to a server.
Polish
4 capabilitiesFive themes
Cypherpunk dark plus light and dark messenger-style palettes.
60fps + haptics
Native-feel motion and tactile feedback throughout.
Works offline
Out-of-order delivery and store-and-forward survive flaky networks.
Verifiable downloads
Every release ships a SHA-256 you can check before installing.
Experimental
off by defaultTwo ways to deliver a message without our relay. They ship in v1.5.0, but they are off until you turn them on in Settings, and we don't consider them proven yet — read the limits below before you rely on either.
Nearby Bluetooth
When your contact is a few metres away, the message goes straight to their phone over Bluetooth — no internet, no relay, no server. Still end-to-end encrypted. It is not a mesh: messages don't hop through other people's phones, so the recipient has to be in range themselves. Both phones need v1.5.0, and while it's on, your phone advertises a stable identifier that someone nearby with a scanner could track.
Reticulum transport
A second delivery path that routes over the Reticulum network instead of our relay, so getting a message through doesn't depend on Cloudflare staying up. It runs against a public gateway today; a fallback, not yet a replacement.