Why Graphite Messenger Routes Over Tor by Default

TL;DR: A tor messaging app routes your chats through the Tor network so no server or network observer can see your real IP address or easily map who you talk to. Graphite Messenger routes over Tor by default because end-to-end encryption only hides message content — it is onion routing that hides the revealing metadata wrapped around every conversation.

Last updated July 2026 · By the PrivacyPortal team

Graphite Messenger — currently a free public beta (v1.13.25) — is our private messaging app, and it treats Tor as the default transport rather than an optional toggle. Here is the short version of why. Modern messengers already encrypt what you type; that part is largely solved. What most apps still leak is metadata: your IP address, who you message, when, how often and from where. A tor messaging app closes exactly that gap by decoupling your real identity and location from your messages. In practice, encryption protects the "what", and Tor protects the "who, when and where". Graphite builds in the second half by default so you never have to remember to switch it on.

A simple diagram showing message content sealed by encryption while metadata — IP address, timing and contact list — travels exposed unless it is routed over Tor.

Content versus metadata: what encryption cannot hide

End-to-end encryption (E2EE) means only you and the person you are chatting with can read the message body — not the server in the middle, not your network provider, not an eavesdropper on the wire. That is genuinely powerful, and in 2026 it is table stakes. Signal, WhatsApp, Graphite and many others all do it.

But E2EE stops at the envelope. The server still typically sees which account is talking to which account, the size and timing of each message, your IP address (and therefore your rough location), and how often two people communicate. That surrounding data is metadata, and it is frequently enough to reconstruct a relationship, a routine or a source — without ever reading a word.

End-to-end encryption protects the "what" of a message; only network-layer routing like Tor protects the "who, when and from where".

Why metadata is the main privacy battleground in 2026

Among privacy researchers, the consensus now is blunt: metadata is often as revealing as content, and it is the primary battleground precisely because strong content encryption has become widespread. The social graph (who knows whom), timing and frequency patterns, IP addresses, phone numbers and device identifiers together paint a detailed picture. Intelligence practitioners have said for years that they "kill people based on metadata" — the connections matter more than the words.

This is why a genuinely metadata-private messenger has to think beyond encryption. If your app hides the message but hands the server your phone number, your IP and a tidy log of every contact you speak to at 11pm each night, the encryption is protecting the least sensitive part. For a deeper look, see our guide on how metadata leaks even when content is encrypted.

Why Graphite Messenger routes over Tor by default

Tor (The Onion Router) wraps your traffic in layers of encryption and bounces it through several volunteer-run relays, so no single point knows both who you are and what you are doing. Applied to chat, this is the essence of hide-IP messaging: the messaging server sees a connection arriving from a Tor exit, not from your home or mobile IP.

Graphite's tagline is "Private messaging with nothing to hand over" — and running a messenger over Tor by default is how we mean it literally. Because there is no phone number to collect and no real IP reaching our servers, there is very little metadata to log, subpoena or leak in the first place. You can read more about the design on the project's home at graphite.chat.

Graphite Messenger (public beta v1.13.25) routes every message over Tor by default, so the server never sees your real IP address.

Making Tor the default — not a setting buried three menus deep — matters because privacy defaults are the ones most people actually keep. An option nobody enables protects nobody.

A screenshot of Graphite Messenger establishing a Tor circuit on first launch, with the onion connection indicator active.

How Graphite compares with other private messengers

Graphite is one point on a spectrum of tools that fight metadata in different ways. There is no single "best" — the right one depends on your threat model. The table below is our plain-English summary of how the main options handle routing and identifiers, so you can pick the trade-off you want for anonymous encrypted chat.

App	Default network routing	Identifier needed	Who-talks-to-whom hidden from server?
Graphite Messenger (beta)	Tor by default	No phone number	Yes — no real IP reaches the server
Signal	Direct to Signal servers	Phone number	Partly — "sealed sender" reduces, not eliminates
Briar	Tor by default (peer-to-peer)	None	Yes
Cwtch	Tor by default (onion services)	None	Yes
SimpleX Chat	Direct (Tor optional)	None (no persistent user ID)	Yes — no user profiles stored
Session	Its own onion-routing network	No phone number	Yes — via routing nodes

Briar and Cwtch route all traffic over Tor by default; SimpleX Chat removes persistent user identifiers entirely; Session runs its own onion-routing network without phone numbers.

If you want to compare the whole field in more depth, see our guide to private messaging apps. For the underlying technology, the Tor Project explains onion routing, while Briar's "how it works" page and the SimpleX Chat repository document two contrasting metadata-minimising designs.

How to install and use Graphite Messenger over Tor

Before you start: Graphite is a public beta, so treat it as a promising second channel rather than your only lifeline for anything critical yet. Back up first — in a messenger, that means saving any recovery detail the app gives you somewhere safe and offline. You will need an Android phone with a working internet connection and a little patience on first launch while Tor builds a circuit.

1. Get the app. Download the current Graphite Messenger build from the "Modules, apps & files to try" section at the end of this article (the same build is linked from graphite.chat). Use the official source so you know you have the genuine app.
2. Install it. If you are sideloading the APK, Android will ask you to allow installs from this source — grant it just for the installer, then open Graphite.
3. Let Tor connect. On first launch the app bootstraps a Tor connection. This can take anywhere from a few seconds to around half a minute on a slow network. Wait for the connection or onion indicator to show it is active before continuing.
4. Create your identity. There is no phone number or email to enter. Follow the prompts to generate your account.
5. Save your recovery details. If Graphite shows you a recovery phrase or account identifier, write it down and store it offline. This is your backup — without it, you may not be able to restore your identity on a new device.
6. Add a contact. Share your Graphite address or QR code with the other person over a channel you already trust, and add theirs. Verify it in person or over a separate trusted line where you can.
7. Send a test message and verify. Send a short "hello" and confirm it arrives. Check the connection status screen still shows the session routing over Tor — that is your sign that hide-IP messaging is working as intended.

Graphite also pairs naturally with a de-Googled Android phone, where the whole device is built to leak as little as the messenger does.

Pitfalls and honest limits of a tor messaging app

Routing over Tor is a real, meaningful upgrade — but it is not magic, and we would rather you understand the edges than be surprised by them.

• Tor adds latency. Messages travel through several relays, so expect slightly slower delivery and connection setup than a direct app. This is the cost of hiding your IP.
• Some networks block Tor. Certain workplaces, campuses and countries filter Tor. You may need a bridge or an alternative connection to get through.
• It cannot fix what you reveal. If you share your real name, photo, or a linked account inside the chat, no amount of onion routing keeps that private. Anonymity is a discipline, not just a network.
• No tool defeats a determined global adversary. Tor raises the cost of correlation enormously, but a well-resourced attacker who can watch large parts of the internet at once may still attempt traffic-analysis attacks. We will never claim any app makes you invisible.
• Beta means bugs. v1.13.25 is early software. Keep it updated, and do not delete a working backup channel until you have tested Graphite for your own use.

Frequently asked questions

Is a tor messaging app the same as end-to-end encryption?

No — they solve different problems. End-to-end encryption hides the content of a message from everyone except the recipient. A tor messaging app hides the metadata: your IP address and the pattern of who you talk to. The strongest privacy comes from having both, which is why Graphite combines E2EE with Tor by default.

Does routing over Tor make me completely anonymous?

It makes you much harder to identify and locate, because your real IP never reaches the server. But anonymity also depends on your behaviour — the information you share, the accounts you link, and whether your network allows Tor. Treat Tor as a powerful layer, not a guarantee.

Is Graphite Messenger free?

Yes. Graphite Messenger is a free public beta from PrivacyPortal, currently at version 1.13.25. You can download it from the section below or from graphite.chat.

Will Tor make Graphite noticeably slower?

There is some added latency, especially when a circuit is first built. For text messaging this is usually a small delay rather than a dealbreaker, and it is the direct trade-off for hiding your IP and location.

Do I need to give a phone number to use Graphite?

No. Graphite is designed around the idea of "nothing to hand over", so there is no phone number to register. That removes one of the most common and revealing identifiers other messengers collect.

Can I use Graphite if my network blocks Tor?

Possibly, but not always out of the box. Networks that filter Tor may require a bridge or a different connection to reach the network. If Tor is blocked where you are, that restriction applies to any messenger over Tor, not just Graphite.