FAQ
Fair questions.
Straight answers about how Meshtrike works, what it protects and how to get it onto your phone. Missing one? Ask on GitHub.
The basics
No. Meshtrike talks to other phones directly over Bluetooth, Wi-Fi Direct and LoRa radios. The app itself has no internet permission at all. The optional internet route lives in a separate add-on, MeshGRID, and is off by default.
Bluetooth reaches about 10–30 m per hop, Wi-Fi Direct 50–100 m, and a LoRa radio several kilometres. Beyond that, other phones carry your sealed message as people move, for up to 72 hours. Every route explained.
Your message waits safely on your phone and leaves as soon as another phone comes into range. The app tells you it’s waiting and why, so you never mistake waiting for sent.
An optional add-on app that handles Wi-Fi Direct and the private internet route through the Nym mixnet. It only carries messages that were already sealed on your phone, so it can’t read them. Keeping it separate means the main Meshtrike app never needs internet permission. How MeshGRID works.
Not yet. Meshtrike is Android only for now, on Android 10 or newer. An iPhone app that shares the same core and talks to Android phones with the same sealed messages is on the roadmap.
Privacy and security
No. Messages are sealed end to end on your phone. Relays only hold an encrypted envelope and can’t tell who sent it or who it’s for. There is no Meshtrike server.
Not yet. An independent security audit, field tests and a formal model of the protocol are planned before we call it ready for high-risk use. Until then, treat it as beta software. See the honest limits.
Yes: the Rust core, the Android app, the MeshGRID add-on, this website and the build and release scripts are all on GitHub under Apache-2.0. The only thing not published is the private release signing key, which is exactly what lets you tell a real copy from a fake.
No. It sets no cookies, has no analytics and loads nothing from anyone else. It is hosted on GitHub Pages, which may log visitor IP addresses. Read the privacy policy.
Download and install
Yes. One APK file works on any number of Android phones. Share it phone to phone with Nearby Share, Bluetooth or a USB stick; nobody has to download it from here. Each install creates its own keys on that phone. Because the signature travels inside the file, every copy can still be verified, and Android itself refuses to update Meshtrike from an APK signed by anyone else.
Open the verify page and pick the APK. It checks the signature with the same maths Android uses and compares the signing key with the official fingerprint, then tells you whether it’s real. The file never leaves your device. On a computer you can also run sh verify.sh from the repository.
Android shows a warning for every app that doesn’t come from Google Play, and Meshtrike is installed straight from its APK. Allow your browser or Files app to install it once. On newer Android versions this can include a one-time “advanced” confirmation and a short wait. Step-by-step install guide.