Almost every messaging app starts the same way: enter your phone number, verify a code, upload your contacts, and agree to a privacy policy you do not have time to read. That single step links your identity, your social graph, and your communication history to a company you cannot control. If the goal is real privacy, the first question should not be "which app is safest?" It should be "which app needs the least from me?"
CipherPigeon was built around a different premise. You do not need an account, a phone number, an email, or even an internet connection. The app is an encryption tool that lives on your device. You choose the passphrase, you choose the channel, and you choose who gets the key. The result is a private message that does not depend on trusting any platform.
Why "no phone number" matters
A phone number is an identity. It can be tied to your name, your carrier, your billing address, and your location history. When a messaging app requires it, the service knows who you are before you send a single message. That creates several risks most users never think about:
- SIM swap attacks: a stolen or reassigned number can give an attacker access to your accounts and message history.
- Carrier records: your mobile provider keeps logs of who you message and when, even if the contents are encrypted.
- Data breaches: phone numbers are common leak targets and are hard to change once exposed.
- Platform lock-in: if your number is banned or your country blocks the service, you lose your ability to communicate on that network.
Removing the phone number requirement removes an entire category of trust. You are no longer a user record in someone else's database. You are just two people with the same key.
How CipherPigeon works without an account
Instead of registering you, CipherPigeon registers the math. When you encrypt a message, the app uses a hybrid autokey cipher that runs entirely on your phone. The only secret is the passphrase you and your recipient agree on outside the app. There is no server to sign into, no contact list to upload, and no cloud backup to configure.
- Agree on a passphrase with your recipient in person, over a call, or through a trusted channel.
- Open CipherPigeon and type your message or select a photo.
- Enter the passphrase and tap encrypt.
- Copy the resulting VS//PACKET text or .cpg file and send it through any app you already use.
- Your recipient pastes it into CipherPigeon and decrypts it with the same passphrase.
The app carrying the message does not matter. SMS, email, WhatsApp, Signal, Telegram, or a paper note all work the same way, because the privacy is in the payload, not the pipe.
What the app never sees
- Your phone number or email address.
- Your contacts or social graph.
- The plaintext of your messages or photos.
- Your passphrase or encryption keys.
- Any metadata about when, where, or how often you communicate.
Because nothing is uploaded, there is nothing to subpoena from a server and nothing to breach in a cloud database. The only copies of your secrets are the ones you and your recipient choose to keep.
What encryption does not hide
CipherPigeon hides the content of your message, but it cannot make you invisible. If you send the ciphertext through your carrier's SMS network, the carrier still sees that a message was sent, its size, and the phone numbers involved. If you send it through a social network, the platform still sees that you messaged someone.
For the strongest privacy, pair CipherPigeon with a messenger that protects metadata too, like Signal. Encrypt with CipherPigeon first, then send through Signal. The content is protected before it leaves your device, and the channel is protected in transit.
The vision behind CipherPigeon
Privacy tools should not ask you to trade identity for security. They should give you control and then get out of the way. CipherPigeon is designed to be a small, offline utility that turns any channel into a secure one. No accounts, no phone numbers, no servers, and no fine print. Just a key, a message, and math that fits in your pocket.
If you are tired of handing over your identity every time you want to talk privately, this is the alternative. Your messages belong to you. The key belongs to you. And the app never needs to know who you are.