Design goal: if a server can read your messages, they are not private.
Tox Messenger prefers end-to-end encryption and peer-to-peer paths so your words stay yours.
1. Encryption & identity
- Tox protocol cryptography
- Local identity generation on device
- Authenticated friend requests
2. Transport
- P2P first when peers are reachable
- Encrypted local database; keys in platform secure storage
- HTTPS for website and API
3. Relay visibility
relay.toxmessenger.app may see hashes, push tokens, short presence markers, and technical logs — not message bodies or call media content by design.
4. Device features
- App lock, disappearing messages, screenshot awareness where the OS allows