HopNet
Private. Serverless. Secure.
Only for iPhone
Free · Designed for iPhone. Not verified for macOS.
No accounts. No phone numbers. No message database. HopNet is private messaging with nothing to breach — just you and the people you trust.
HopNet is a private messenger with nothing to breach.
HopNet lets you exchange end-to-end-encrypted messages, photos, videos, voice messages, and calls — one-to-one or in small private groups — with people you add yourself, so no one, including us, can read your conversations.
You're only ever in touch with people you choose. You add a contact by scanning their QR code, in person. HopNet has no random matching, no "chat with strangers" mode, and no public directory — only the people you've added can reach you.
Why HopNet is different
• No phone number, no email, no account — your identity is a key that lives only on your phone.
• End-to-end encryption — the same proven design used by leading secure messengers (X3DH and the Double Ratchet).
• Voice & video calls — end-to-end encrypted, and they connect even on restrictive networks.
• Photos & voice notes in groups — shared with the same end-to-end encryption as your messages.
• Private offline delivery — when your contact is offline, your message waits in an encrypted "blind mailbox" that no one, not even us, can read, and is deleted once delivered.
• You're in control — verify contacts with safety numbers, lock the app with Face ID, block or report anyone, and wipe everything instantly.
Safety
HopNet has zero tolerance for objectionable content and abusive users. You can block or report any contact at any time from the chat menu, and reports are reviewed within 24 hours.
How it works
1. Open HopNet — a private identity is created on your device.
2. Scan a friend's QR code (or have them scan yours).
3. Start chatting, privately.
HopNet is in active development. We'd love your feedback — Settings, then Send Feedback.
Note: when you're connected to a contact, they may see your IP address, as with other direct-connection messengers. Use a VPN if that matters to you.
more Messages now find their way home.
• Fixed a rare case where a chat could go quiet in one direction after a reconnect — your messages sent, theirs never arrived (or the reverse). Several separate causes, all closed.
• A photo or video that finished arriving now always shows up in the chat — no more received-but-invisible pictures.
• Photos and videos sent while you're both on the same Wi-Fi go straight phone-to-phone, and a transfer that already finished no longer keeps uploading in the background.
• The direct connection between two phones now comes back within seconds after you reopen the app, instead of taking a minute.
• Declining a call is final — no second ring, and no "missed call" note for a call you deliberately declined.
• Contact names now reach the other person even without a direct connection — and restoring from an identity backup keeps your name.
• Faster, quieter delivery: fewer redundant network writes and fewer duplicate notifications.
1.3.5 4d ago
Reconnecting is now something you decide together.
• Someone you removed can ask to reconnect. You'll see a quiet request in Contacts — Accept, Ignore, or Block. No notification, no pressure, and the other person is never told which you chose.
• Accepting restores the chat without scanning a QR code again.
• Reconnecting is more reliable: one tap now converges, even after a lot of adding and removing.
• If one of you reinstalls the app, the connection now repairs itself — no re-scanning, no lost chat.
Photos and videos tell you the truth.
• A photo that didn't finish uploading now resumes by itself instead of claiming it was sent.
• If a photo really is gone from the relay, you're told plainly — instead of waiting forever on "Receiving…".
• Sending on a slow connection works: large photos and videos no longer give up too early.
• Tap to retry now works for photos in one-to-one chats.
Far fewer notifications.
• Only messages, photos, videos and calls will interrupt you. Reactions, reconnects and the app's own housekeeping stay silent.
• Several messages from one chat now arrive as a single notification.
Clearer contact status.
• "Waiting for them" and "Unreachable" replace the old permanent "Reconnecting…", so you can tell the difference between slow and gone.
1.3.4 Jul 28
Reconnection, made effortless:
• Removed a contact and added them back? One QR scan now reconnects you completely — no more scanning twice or restarting the app.
• Tap Reconnect on a stuck chat and it rebuilds the secure connection in one go, with a clear note about what happens next.
• Old leftover duplicate contacts are cleaned up automatically.
• New in Settings: "How HopNet works" — a plain-language, illustrated explanation of the technology protecting your chats.
• Faster, leaner message delivery: your phone now fetches exactly the mailbox that has news, the moment it has it.
• Plus smaller reliability and security improvements throughout.
1.3.3 Jul 25
Reliability update:
• Remove and re-add a contact as often as you like — every reconnection now gets a fresh, clean channel. No more stuck conversations or leftover connection debris after repeated re-pairing.
• Messages written while offline arrive more reliably: instant retry the moment you're back online, plus a safety net that re-sends anything left behind — even after restarting the app.
• Renamed yourself? Your new name now reaches your contacts even while they're offline.
• Notifications keep working correctly after removing and re-adding a contact.
• Behind the scenes: tightened access to our relay and call servers, and security hardening throughout.
1.3.2 Jul 23
Reliability update:
• Invite links now open the app directly when tapped — including from WhatsApp, Telegram, and email. Sharing a link into HopNet adds the contact instead of opening the send picker.
• When a contact disconnects you, the chat now locks (no typing or calling into the void) — use Reconnect instead. Deleting a contact fully cleans up: no more stray notifications afterwards.
• Calls set up silently — no more "New message" banners during connection. You're only notified for real messages, incoming calls, missed calls, and disconnects.
• Reconnecting at the same moment from both phones now settles instantly.
• "Delete Everything" removes all traces, including relationship metadata.
• Security hardening throughout (signed-signal replay protection extended).
1.3.1 Jul 19
Connection clarity update:
• You now see when a contact disconnects: if someone removes you, the chat shows "Disconnected" instead of silently going quiet. Your chat history stays on your device.
• One-tap Reconnect: open a disconnected chat and tap Reconnect — no new QR scan needed. If the other person re-adds you, the connection restores by itself.
• Deleting a contact now informs the other side, securely (signed and protected against tampering and replay).
• Fixed a rare case where a connection could get stuck on "Pairing…" after a reset or restore.
• Scanning the same QR code repeatedly no longer causes connection churn — repairs are coalesced into one.
• Cleaner status messages and security hardening throughout.
1.3.0 Jul 17
Reliability and security update:
- Fixed: adding a contact by QR code or invite link could fail with an "Invalid signature" message on a phone restored from a backup. This now repairs itself automatically the next time you open the app.
- Unsend now works even if the other person's phone is offline: the message is removed when their phone reconnects.
- Clearer media labels: a photo or video that isn't on this device now says so, instead of showing "Transfer failed".
- One simpler Backup and Restore screen, with a clear "Uploaded to iCloud" status.
- A gentler reconnect notice that no longer repeats itself.
- Security hardening in message editing, unsend, and group controls.
1.2.7 Jul 13
Security, backup, and clarity improvements.
• Redesigned Backup & Restore: one place for your identity and chat history. Restore now shows live progress and your chats appear immediately — no restart
• The app tells you when a backup is safely uploaded to iCloud, and clearly says when none exists yet
• Stronger group security: reactions and edits — like messages before them — are accepted only from verified current members
• Photos and videos that aren't stored on this device (restored from a backup, or older than 7 days) now say so clearly instead of showing a false "failed"
• "Delete for everyone" is now "Unsend," with an honest note that a copy already seen may remain
• A full reset can now optionally keep your encrypted iCloud backup for a future device
As always: no accounts, no phone numbers, no servers that can read your messages.
1.2.6 Jul 10
New: back up your chat history to iCloud — plus security hardening.
• Chat history backup (optional): keep an encrypted copy of your chats and groups in your own iCloud and restore it on a new iPhone. Apple only ever stores ciphertext — the key stays in your iCloud Keychain
• Restore shows live progress and your history appears immediately — no restart needed
• The app now tells you when a backup is safely uploaded to iCloud
• Group security hardening: group messages are accepted only from verified current members
• "Delete Everything" now erases truly everything — including group data, media files on disk and this identity's iCloud backup
• Faster and lighter: notifications tell the app exactly where new mail is waiting, so it checks far less often — noticeably lower battery and data use
• Unified chat list and clearer photo/video labels
As always: no accounts, no phone numbers, no servers that can read your messages.
1.2.4 Jul 9
Stability release: chats, groups and calls stay fast and reliable — for good.
• Fixed the root cause of delayed messages, "stuck" group photos and slow call connects: a rare timing bug in the encryption engine that could briefly desynchronize a conversation
• Calls now connect in about a second, even right after switching networks or waking the app
• Group photos and videos arrive within seconds, in both directions
• Missed messages from the past days are delivered automatically after updating
• Noticeably lower battery and data use — the app no longer re-sends old traffic in the background
As always: no accounts, no phone numbers, no servers that can read your messages.
1.2.3 Jul 8
Reliability release: your photos and videos arrive — every time.
• Incoming photos and videos now survive app restarts and network changes: transfers pick up where they left off instead of showing "failed"
• A transfer that resumes shows live "Receiving…" progress again — no more finished downloads hiding behind a failure label
• New groups and their photos now reach every member reliably, even on flaky connections
• Delivery checkmarks for photos and videos are accurate in both 1:1 chats and groups
• Much lower battery and data use: fixed a background loop that re-sent old read receipts on every reconnect
• Diagnostic logging is now off by default (saves battery) — turn it on in Settings only if support asks for logs
• Security hardening based on an internal review
As always: no accounts, no phone numbers, no servers that can read your messages.
1.2.2 Jul 7
Video in groups — and a much faster, tougher media engine.
• Share videos in your groups, end-to-end encrypted like everything else
• Media transfers are up to 10x faster and resume where they left off — even if you close the app mid-transfer
• Share photos and videos into HopNet from any app: a clear "Saved — open HopNet" handoff replaces the silent share sheet
• Large videos now deliver reliably, and group photos reach every member — including people who join the group later
• Transfers that can't complete say so clearly — tap to retry, on either end
• Many speed, battery and reliability fixes throughout
As always: no accounts, no phone numbers, no servers that can read your messages.
1.2.1 Jul 4
What's new in 1.2.0:
• Voice & video calls that just connect — calls now set up through HopNet's encrypted delivery network, so they work even when a direct connection between your phones isn't possible, and they survive brief network drops instead of hanging up.
• Photos & voice notes in groups — share them in your group chats with the same end-to-end encryption as everything else. (Group video is coming in a follow-up update.)
• Conversations that heal themselves — if two phones ever fall out of sync, HopNet quietly repairs the secure session in the background. No more re-adding contacts; your chats and history always stay put.
• Honest presence — see whether a contact is Online, Reachable (messages deliver right away), or Offline.
• Delivery you can trust — checkmarks and "read" now update reliably even when you're never online at the same time.
• Help us squash bugs — Send Feedback can attach a technical log that's encrypted so only the HopNet team can read it. Off by default, with a preview of exactly what's included.
• Faster photo delivery and many reliability fixes.
As always: no phone numbers, no accounts — and updates never erase your existing chats, photos, or contacts.
1.2.0 Jul 3
What's new in 1.1.6:
• Share to HopNet — send photos, videos, links and text straight from other apps using the iOS Share button.
• Edit messages in groups — long-press one of your own group messages to fix a typo; it updates for everyone, marked "edited."
• One-tap invite & reconnect links — a link you share now opens HopNet directly, so adding or reconnecting with someone takes a single tap.
• Smoother reconnecting — if a conversation ever gets stuck, re-scanning a contact's QR code in person cleanly restores it, and nothing you already sent is lost while it reconnects.
• An unread count on the app icon, plus reliability fixes and polish across chats and groups.
HopNet stays serverless and end-to-end encrypted, and updates never erase your existing chats, photos or contacts.
1.1.6 Jul 1
What's new in 1.1.5:
• Photos now send reliably — even on a weak or restricted connection. A photo is delivered through your secure mailbox when there's no direct link, and only shows "Sent" once it's truly on its way.
• Unread badge — a count on the app icon shows how many messages you haven't opened yet.
• Hand off group admin — an admin can now pass the admin role to another member.
• Clearer contact trust — each contact shows how you know them: verified in person, known but unverified, or introduced by a group admin.
• Group activity is visible — the chat notes when someone joins, leaves, or becomes admin.
• Tidier blocking — blocking someone you share a group with no longer leaves them lingering there.
• Smaller fixes and polish across groups, contacts and media.
Everything stays end-to-end encrypted, and updating never erases your chats, photos or contacts.
1.1.5 Jul 1
What's new in 1.1.3:
• More reliable photos & videos — they keep retrying on a weak connection and show clearly if one fails, so you can resend.
• Quieter notifications — one notification per message, instead of several.
• Self-healing chats — a conversation that ever got stuck now recovers on its own, with no need to re-add anyone.
• Group fixes — someone you block stays out of your shared groups, and members you haven't added yourself show a short code instead of just "Unknown".
• Reliability and polish improvements.
1.1.3 Jun 29
What's new in 1.1.2:
• Replies — tap a message to quote-reply, in one-to-one and group chats (including replies to photos and videos).
• Group admin tools — rename a group, remove a member, or delete a group.
• Freeze or Block — take a reversible break from a contact (Freeze keeps the chat) or Block & delete; both can be undone.
• Simpler backup — one tap saves an encrypted backup you can keep in Files / iCloud; restore by picking the file.
• Faster and quieter — quicker message recovery on weak networks and far fewer duplicate notifications.
• Reliability and polish improvements.
1.1.2 Jun 27
What's new in 1.1.0 — private group chats:
• Create a small, private group with people you've already added. Group messages are end-to-end encrypted to each member, exactly like your one-to-one chats.
• Private by design — no group server, no public groups, and no way for strangers to find or join. You choose who's in, verify each member with safety numbers, see who added you, and can leave anytime.
• This release covers group text messages. Photos, voice messages, reactions, and disappearing timers inside groups are coming in upcoming updates — they already work in your one-to-one chats today.
• Reliability and accessibility improvements.
1.1.1 Jun 27
What's new in 1.0.2:
• Voice messages — record and send audio, end-to-end encrypted.
• Disappearing messages — set a per-chat timer; messages auto-delete on both sides.
• Rename a contact privately — a name only you see, never sent to them.
• Invite a contact by link — add someone you can't meet in person, no phone number.
• Tappable links in messages, plus reliability improvements.
1.0.2 Jun 24
What’s new in 1.0.1:
• React to messages with emoji
• Edit a message after you’ve sent it
• Delete a message for everyone
• Support HopNet with an optional, voluntary donation
• Performance and stability improvements
1.0.1 Jun 23
Messages now find their way home.
• Fixed a rare case where a chat could go quiet in one direction after a reconnect — your messages sent, theirs never arrived (or the reverse). Several separate causes, all closed.
• A photo or video that finished arriving now always shows up in the chat — no more received-but-invisible pictures.
• Photos and videos sent while you're both on the same Wi-Fi go straight phone-to-phone, and a transfer that already finished no longer keeps uploading in the background.
• The direct connection between two phones now comes back within seconds after you reopen the app, instead of taking a minute.
• Declining a call is final — no second ring, and no "missed call" note for a call you deliberately declined.
• Contact names now reach the other person even without a direct connection — and restoring from an identity backup keeps your name.
• Faster, quieter delivery: fewer redundant network writes and fewer duplicate notifications.
more Version 1.3.5 4d ago
Data Not Collected The developer does not collect any data from this app.