No central user profile
Ordinary Channel participation does not require a phone number, email address, or global M2 account.
Private from device to delivery
M2 reduces the identity, network, and server data involved in a conversation.
Your deviceTor routeEncrypted deliveryRecipient device
End-to-end encryption
Messages and supported files are encrypted for their intended recipients before leaving the device. Local history uses encrypted storage.
Tor-routed messaging
Embedded Tor connects to a v3 Onion Service, reducing direct exposure of the sender’s network origin to the messaging service.
Temporary encrypted storage
Encrypted server copies are deleted after delivery is confirmed. Undelivered copies expire within 48 hours.
Trusted updates
M2 checks each compatible Android update before Android asks you to install it.
Security considerations
M2 cannot protect a compromised device or prevent a recipient from copying information they can see. Use an approved records system when conversations must be retained.