AENC is a free, offline encryption app. It sits on top of the apps you already have. You encrypt a
message, a file, a photo or a voice note right on your phone, you send it through any messenger, and only the
person you picked can open it.
No servers. No accounts. No tracking. Keep your private keys on a removable USB drive
that you hold. You can keep them on the phone too, that is just a bit less safe. Decrypted content stays in
memory, and AENC wipes it after you are done. We never see what you write, because there is nothing on our side to see.
AENC is free. The standard build makes no network
requests at all. The Google Play build can use the network for Google Play and for an upcoming built in messenger,
but what you write never leaves your phone. There is a full two build breakdown further down the page.
AENC does all the encrypting right on your phone. Both builds use the very same encryption inside.
The only difference is whether the app is allowed online at all, and if it is, what it talks to.
Offline build · direct download
Sealed by the operating system
Free, and no server. The permission to open a network socket is simply not there. Android itself
blocks it, so this is not a promise from us, it is a hard limit.
No INTERNET permission, so the app cannot send anything
Keys, contacts and content live in memory or on your USB drive
Truly offline, with no data leaving the phone
Passkeys integration - 2FA with YubiKey security keys
In development
MDM integration, managed enterprise deployment and policy
Double Ratchet, key rotation for per message forward secrecy
Encrypted video, capture, send and receive
On device malware scanner, built into the app
Play build · Google Play Store
Network for Google Play and the upcoming messenger
Adds INTERNET, which Google Play needs. The offline encryption is still free and stays on your
device. The network path is only for Google Play services and the built in messenger we are working on.
license.aenc.io, our server for accounts and the messenger, coming later
Google Play Billing and Play Integrity , for the future paid messenger
Google endpoints , device and diagnostic data from the Play SDK
Passkeys integration - 2FA with YubiKey security keys
Coming soon
Built in messenger, send straight through our server with no third party app, end to end with the Signal protocol, and files that open right in the chat. This is the one paid feature.
Double Ratchet, key rotation for per message forward secrecy
Encrypted video, capture, send and receive
Never sent, in either build. Your messages, your encrypted files, your contacts and
your private keys stay on your phone. When the app does go online it only sends licence and purchase info, a
random device id, and a little basic device data. The things you encrypt never leave your phone.
Real end to end
X25519 key agreement with AES 256 GCM, Ed25519 signatures, and an
optional post quantum mode (sntrup761). Sealed sender also hides who sent the message.
Removable key
Your key sits in an encrypted .aekey file, protected by a
strong passphrase (Argon2id). It is best kept on a USB drive.
Truly offline
The standard build asks for no network access at all. You share the
encrypted file yourself, over whatever channel you like.
Nothing at rest
Photos and voice notes are encrypted straight from memory. Decrypted
content is view only and wiped when you leave. There is also an emergency wipe for sensitive files.
Post quantum option
Turn on the hybrid post quantum mode (sntrup761 with X25519) and
your messages stay private even against future quantum computers.
Built against forensics
AENC keeps nothing in its own storage or cache. Keys stay on a
removable USB and content lives only in memory. Pull the drive and a forensic tool has almost nothing to find.
Why this matters
Governments and platforms keep pushing for more access to private messages. Those moves miss AENC by
design. The channel only ever carries ciphertext. There is no server, no plaintext in transit, and nothing left
behind for anyone to reach.
Every one of these attacks goes after a server or the
plaintext on a device. AENC has neither. Your message turns into an opaque encrypted file the moment it
leaves the app, and only the person you chose can turn it back into text.
Who it is for
Journalists, activists, lawyers, and anyone who wants strong encryption they hold themselves, without trusting
a server with their keys or their messages.
