Introducing Graphite Messenger: Private Chat With Nothing to Hand Over

TL;DR: Graphite Messenger is a free, public-beta private messaging app (v1.13.25) from PrivacyPortal, built around one idea — "private messaging with nothing to hand over." It needs no phone number, is designed to encrypt messages end-to-end and to minimise metadata. It's young, so treat it as a promising beta alongside audited options like Signal, SimpleX and Session.

By the PrivacyPortal team. Last updated July 2026. Graphite Messenger is our new private messaging app, and this guide explains exactly what it is, how it compares to the encrypted messengers people already trust, and how to install and use it on your own phone. In short: Graphite is a free public beta that lets you chat without registering a phone number, keeps your messages end-to-end encrypted, and is engineered so there is as little data as possible for anyone — including us — to hand over. Because it's early software, we'll be honest about its limits and show you exactly where it sits next to Signal, SimpleX Chat, Session, Threema and Briar.

What is Graphite Messenger?

Graphite Messenger is a private messaging app made by PrivacyPortal, currently at version 1.13.25 and shipping as a free public beta. Its tagline — "private messaging with nothing to hand over" — doubles as its design brief: collect as little as possible, so there is nothing meaningful to disclose if anyone comes asking. You'll find the download in the Modules, apps & files to try section at the end of this guide.

One point up front, because search engines muddle it: Graphite Messenger is an app, not an operating system. It is not GrapheneOS (a hardened Android OS), not the niche "Graphene Messenger" GitHub project, and not the retired Graphite Docs. If you landed here expecting an OS, you want our de-Googled Android explainer instead.

Graphite Messenger is a free public beta (v1.13.25) from PrivacyPortal, with the tagline "Private messaging with nothing to hand over."

The Graphite Messenger welcome screen during first-run setup on a de-Googled Android phone.

What "nothing to hand over" actually means

The phrase is a promise about data minimisation. A messenger can only surrender what it stores, so the graphite chat app is built to store almost nothing. In practice that means three things working together:

• No phone number to register. You are not tied to a SIM or a real-world identifier, so there is no number on file to request.
• End-to-end encryption (E2EE) by default. E2EE means only you and the person you're messaging hold the keys to read a message — the server carries sealed envelopes it cannot open.
• Metadata minimisation. Metadata is the "envelope" data — who talks to whom, when and how often. It is often more revealing than message content, so Graphite is designed to generate and retain as little of it as possible.

Be realistic about the current stage, though. As a public beta, Graphite Messenger has not yet undergone a published independent security audit. Treat its privacy properties as stated design goals that we expect to harden over time, and check the project's own documentation for the current model before trusting it with anything high-stakes.

The three properties that define a private messenger in 2026

If you're choosing an encrypted messenger in 2026, the whole field comes down to the same three properties above: no phone-number requirement, E2EE by default, and metadata minimisation. The uncomfortable truth is that no single app maximises all three, so every choice is a trade-off between security, anonymity and how many of your contacts you'll actually reach.

Signal is the clearest example of that trade-off. It remains the audited default with the strongest, most-reviewed cryptography and by far the largest user base — but it still requires a phone number to sign up. Signal's usernames hide that number from your contacts; they do not remove it from your account.

Signal still requires a phone number to register; its usernames hide that number from contacts but do not remove it from the account.

Graphite Messenger vs Signal, SimpleX, Session, Threema and Briar

Here is how the main contenders line up against the three properties. We built this table from each project's documented behaviour so you can compare like for like.

Messenger	Works without a phone number?	E2EE by default	Metadata minimisation	Cost & notes
Graphite Messenger	Yes (by design)	Yes (designed for E2EE)	High (core goal)	Free public beta; young, not yet independently audited
Signal	No — phone number required	Yes	Partial (Sealed Sender)	Free; heavily audited; largest network
SimpleX Chat	Yes — no user IDs at all	Yes	Very high	Free, open source
Session	Yes — 66-character key ID	Yes	High (onion-routed)	Free; decentralised
Threema	Yes — random Threema ID	Yes	High	Paid; Swiss-based
Briar	Yes — peer-to-peer	Yes	Very high (over Tor)	Free; works offline/P2P

At a glance: how Graphite Messenger and the leading private messengers compare across the three privacy properties.

The standout for pure metadata resistance is SimpleX Chat, which goes further than everyone else on identifiers.

SimpleX Chat uses no user identifiers at all — not even a random account ID — which as of 2026 makes it unique among mainstream private messengers.

Which private messenger should you choose?

Use this quick decision framework rather than chasing a single "best" app:

• You want the audited default everyone already has → Signal. Accept the phone-number requirement.
• You want the strongest possible anonymity and metadata resistance → SimpleX Chat.
• You want no phone number plus onion routing → Session.
• You want a paid, Swiss-based option with no account linking → Threema.
• You want off-grid, server-less messaging for high-risk situations → Briar.
• You want a PrivacyPortal-native app with nothing to hand over, and you're comfortable running a beta → Graphite Messenger, ideally as a second messenger while it matures.

How to install and set up Graphite Messenger

The PrivacyPortal messenger is Android-first during the beta. Before you start: back up your phone, and be aware that installing beta software from outside an app store is your decision on your own device. Nothing here wipes your phone, but you are responsible for keeping your recovery details safe.

Prerequisites: a modern Android phone, roughly 50 MB free, and permission to install apps from outside the Play Store (standard on a de-Googled handset).

1. Back up first. Make sure your device backup is current so setting up a new app never risks existing data.
2. Download the installer for Graphite Messenger from the Modules, apps & files to try section at the end of this guide.
3. Allow the install. Go to Settings → Apps → Special app access → Install unknown apps, and permit your browser or file manager to install. If you want automatic updates without the Play Store, add Graphite Messenger to Obtainium — see our guide on how to sideload Android apps safely.
4. Install and open the app, granting only the permissions it asks for at first run.
5. Create your identity. Graphite sets you up without a phone number and issues a recovery key. Save that key somewhere offline and secure — it is how you prove the account is yours.
6. Add a contact by sharing your Graphite handle or QR code with someone who also runs the app.
7. Verify it works. Send a test message and confirm it arrives with the encryption indicator shown. Where possible, compare your safety/verification code with your contact in person or over another channel.

You'll know the setup succeeded when a message round-trips both ways and the app displays your conversation as end-to-end encrypted. Graphite Messenger runs happily on the de-Googled Android phones we build at PrivacyPortal, where there's no Google account in the loop to begin with.

Creating a Graphite Messenger identity — no phone number, just a handle and a recovery key to store offline.

Common pitfalls to avoid

• Don't confuse the names. Graphite Messenger (the app) is not GrapheneOS (an operating system) or the old Graphite Docs. They are unrelated projects.
• Remember it's a beta. Expect occasional bugs, a small early network, and features that change between releases.
• No phone number isn't anonymity. What you write, and any photos or links you share, can still identify you. Encryption protects the pipe, not your judgement.
• Guard your recovery key. Lose the key and the device, and there's no phone number to reset with — the account may be unrecoverable by design.
• Watch your contacts' habits. Metadata and content can still leak through an insecure cloud backup or a compromised device on the other end.
• Keep it updated. On a de-Googled phone there's no Play auto-update, so use Obtainium or check for new beta builds regularly.

Frequently asked questions

Is Graphite Messenger the same as GrapheneOS?

No. Graphite Messenger is a private messaging app from PrivacyPortal. GrapheneOS is a separate, hardened Android operating system. Search engines conflate the two because the names look similar, but they do different jobs and are made by different teams.

Is Graphite Messenger free?

Yes. Graphite Messenger is a free public beta (v1.13.25). There is no purchase required to try it.

Does Graphite Messenger need a phone number?

No. Graphite is designed to work without a phone number, which is central to its "nothing to hand over" philosophy. You get a handle and a recovery key instead of registering a SIM.

Is Graphite Messenger as secure as Signal?

Not yet proven to the same degree. Signal has years of independent audits and the largest user base. Graphite is a young beta designed for E2EE and metadata minimisation but without a published independent audit so far. For maximum assurance today, Signal or SimpleX Chat are the safer picks; run Graphite as a promising second messenger while it matures.

Which is more private, Graphite Messenger or Signal?

It depends on your threat model. Graphite avoids a phone number, which Signal cannot; Signal has stronger audit history and reach. If avoiding any phone-number link matters most, Graphite (or SimpleX/Session) wins; if verified, battle-tested cryptography matters most, Signal wins.

What happens if I lose my phone?

You restore access with the recovery key you saved during setup. Because there is no phone number tied to the account, that key is essential — store it offline and treat losing it as losing the account.

Can I use Graphite Messenger on iPhone or desktop?

The beta is Android-first. Check the project's own site for the current list of supported platforms before assuming iOS or desktop availability.

Graphite Messenger is an honest attempt at a private messaging app with nothing to hand over, and we're building it in the open as a beta. Try it, compare it against Signal, SimpleX, Session, Threema and Briar using the table above, and keep your most sensitive conversations on whichever encrypted messenger best fits your own risk — that's the privacy-first way to choose.