OTPphone

OTPPhone is a private messenger built for people who take confidentiality
seriously. Every message is end-to-end encrypted, so its contents are never
readable by us, by anyone running the infrastructure, or by anyone watching the
network. There are no accounts, no phone numbers, no email, and no tracking.

WHY OTPPHONE

• End-to-end encryption by default. Messages are sealed with modern public-key cryptography (HPKE: X25519 + AES-256-GCM) before they ever leave your phone.

• Optional one-time-pad layer. For your most sensitive conversations, add a
second layer of one-time-pad encryption, the only cipher with information-
theoretic security. Generate true random pads on-device using your camera as an entropy source, and exchange them in person.

• In-person key exchange over Bluetooth. Meet face to face and pair directly,
so no server ever sees your keys. Verify with a short safety phrase to be sure there's no one in the middle.

• Add contacts with a QR code. Share your identity by showing a QR code and
scanning theirs, no usernames to look up, nothing to type.

• Your data stays on your device. Message history, contacts, and keys are stored
locally and encrypted at rest with AES-256 (SQLCipher). Keys live in the
Android Keystore.

• Biometric app lock. Require your fingerprint or face to open the app.

• No accounts. Your identity is a cryptographic key that you control. Nothing to sign up for, nothing to recover, nothing for us to leak.

WHAT THE SERVER CAN AND CANNOT SEE

Our relay only forwards sealed messages between devices. It cannot read your messages, it only ever handles ciphertext. It does not store your message content, and it does not keep advertising or analytics profiles on you.

WHO IT'S FOR

Journalists, activists, lawyers, businesses, and anyone who wants their private conversations to stay private. OTPPhone gives you strong defaults and, when you need it, the strongest encryption that exists.

Privacy policy: https://vernamtechnologies.com
Contact: contact@vernamtechnologies.com