DUNNO is an ultra-secure, peer-to-peer messenger for Android. All communication runs over Tor v3 hidden services — completely without central servers. End-to-end encrypted, screenshots blocked by default, and if threatened, the app wipes itself in 13 phases.
Every feature is built from the ground up around one principle: your data belongs to you — and to no one else.
Text messages with true end-to-end encryption between peers. No relays, no logs, no middlemen.
NaCl crypto_box_sealSend files end-to-end encrypted. Every attachment is protected with AES-256-GCM, with the data key wrapped in the Android Keystore.
AES-256-GCMPeer-to-peer WebRTC voice & video calls, end-to-end encrypted. Calls do not run over Tor — your IP address is visible to your ISP. Explicit consent required.
Explicit consent requiredWalkie-talkie style voice, fast and lightweight — and fully encrypted over Tor. The safe alternative to regular calls.
100% over TorMandatory PIN (8+ digits) on cold start — and deliberately no fingerprint unlock. The PIN screen can never be bypassed, which keeps the wipe code effective.
No biometric bypassOne panic PIN and the app wipes itself in 13 phases: database, attachments, keys, Tor hidden service and more. Idempotent — even after a crash.
13 phasesFLAG_SECURE is always on, on every screen. No screenshots, no screen recordings, no recents previews. Autofill is blocked too.
FLAG_SECURE always-onAll communication via .onion addresses. Bridge support (OBFS4) for censored networks.
No central serverVISIBILITY_PRIVATE on every channel: no content on the lock screen, contact names hidden. Not switchable — security first.
VISIBILITY_PRIVATEVoice and video calls are a service DUNNO deliberately offers. We first built them over Tor — but the latency made them unusable. That is why calls work differently from messaging:
This trade-off is necessary to keep calls fast and reliable. If you want fully anonymous voice, use push-to-talk: it runs entirely encrypted over Tor.
In short: chat and push-to-talk offer maximum privacy, audio calls reduced, video calls minimal.
Because calling exposes your IP address, it is off by default. Before your first call, the app asks for your explicit consent. If you do not accept, calling stays disabled.
From transport to database, from hardware keys to runtime detection: every layer is designed defensively.
crypto_box_seal — X25519 + XSalsa20-Poly1305crypto_secretbox, 256-bit key via X25519 ECDH + SHA-256 KDFFour separate keystore aliases, all hardware-backed in the TEE / StrongBox:
/proc/self/statusIndependently scored categories for on-device security.
| Category | DUNNO | Signal | Briar |
|---|---|---|---|
| Data-at-rest encryption | 9 | 7 | 6 |
| Key storage (TEE) | 9 | 4 | 5 |
| App-level lock | 9 | 7 | 6 |
| Screen security | 9.5 | 6.5 | 3 |
| Anti-tampering | 9 | 4 | 3 |
| Wipe / data destruction | 9 | 2 | 1 |
| Notification privacy | 8 | 7 | 4 |
| Backup encryption | 8 | 8 | 1 |
| Maturity & external validation | 2 | 10 | 6 |
| Total | 8.4 | 6.1 | 4.9 |
DUNNO scores 8.4/10 — significantly higher than Signal (6.1) and Briar (4.9).
DUNNO communicates peer-to-peer over Tor v3 hidden services. There is no message server, no account database, no metadata mine. The only server-side component is an optional TURN server for video calls behind NAT — and it only provides connectivity, never content.
🔒 End-to-end encrypted. Tor-routed. Frida-proof.
DUNNO v1.3.0 for Android — available now on Google Play. Try it free for 14 days, then keep it for €5.99 per year via Google Play Billing.
Install DUNNO straight from the Play Store with your existing Google account. Try the full version free for 14 days — after that it renews at €5.99 per year via Google Play Billing. Cancel anytime in your Play Store subscriptions.
⬇ Get it on Google PlayPrivate APK download link for a one-time Bitcoin payment. No Google account, no subscription. Your personal link stays valid for all future updates — no extra costs. Checkout runs on our own self-hosted BTCPay server.
₿ Pay with BitcoinPromote DUNNO and earn up to 50% on every settled Bitcoin sale — paid in Bitcoin, only on real payments. No costs to join.