Encrypted chats, calls and channels over Tor. No phone number, no email.
About this app
Zerion is a private messenger. It runs over Tor, so your IP address stays hidden from the people you talk to and from the network itself. There's no phone number, no email, and no account on anyone's server. Your data lives encrypted on your own device, nowhere else.
Everything is end-to-end encrypted with hybrid post-quantum cryptography: today's proven algorithms together with the new NIST quantum-resistant ones. Keys move forward with every message, so a key uncovered today cannot open yesterday's conversations. If large quantum computers arrive sooner than expected, what you sent in the past stays protected.
WHAT YOU CAN DO
• One-to-one chats, end-to-end encrypted • Group chats up to a few dozen people • Voice calls over Tor, on by default, plus opt-in beta video calling • Send photos, videos, voice notes, and documents • Disappearing messages, with an optional default timer for new chats • Stickers • Introduce two of your contacts to each other, securely • A built-in vault for passwords, notes, and private files, with search and sort • Back up your account to an encrypted file, or move it to a new phone over Tor • Channels, a one-to-many broadcast layer with optional discussion threads • Translated into more than 35 languages
CHANNELS
One person writes, many people read.
• Public channels: anyone with the invite link can subscribe • Private channels: people ask to join and the owner approves • Discussion threads: the owner decides, per channel, whether subscribers can reply • Reactions, pinned posts, and attachments • Editor delegations: let trusted people post without sharing your identity key • Mute notifications for any channel • Subscribers never see one another, so no member list leaks between them
HARDENED MODE (OPT-IN)
Three independent protections under Security settings, all off by default:
• Refuse to start on tampered devices (unlocked bootloader, modified system) • Refuse to start when a debugger, root, or hooking framework is detected • Sign out automatically, or wipe, if USB debugging or file transfer is switched on
PRIVACY AND SECURITY
• Tor-only transport. No Wi-Fi, Bluetooth, or LAN exposure • No phone number, no email, no central server • No telemetry, no analytics, no crash reporting • No logging of any kind, verified at build time • Encrypted at rest with SQLCipher and a key derived from your password • Screenshots blocked inside the app • Notifications never reveal message contents • The clipboard auto-clears after you copy something sensitive • Fully open source, GPL v3, security-reviewed before each release
UNDER THE HOOD
• Hybrid post-quantum key exchange (X25519 + ML-KEM-768) • Hybrid signatures (Ed25519 + ML-DSA) • Forward-secret message ratcheting • Calls encrypted with AES-256-GCM; storage with SQLCipher (AES-256)
SUPPORT THE PROJECT
Zerion is free and open source, with no ads, no trackers, and no investors. If you'd like to help keep it independent, you can donate: https://zerion.chat/donate.html
WHO IT'S FOR
People who want to talk to other people without a third party in the middle. Journalists and their sources, activists, lawyers and their clients, people in countries that block secure messengers. Anyone who doesn't want to hand a phone number to a tech company every time they install a messenger.
WHAT IT WON'T DO
• It won't message people who aren't on Zerion • It won't work without an internet connection (Tor needs one) • It won't restore your account if you forget the password. There is no recovery, and that's the point
LEARN MORE
• Website: https://zerion.chat • Source: https://github.com/zerionproject/Zerion
GPL v3.
Licensed under GPL-3.0-only.
What's New in v2.0.6
Imported from the F-Droid repository index.
- v2.0.6: reliability and hardening
- Adding contacts is reliable again and crashes during pairing are fixed. Connections recover faster after a drop so contacts stay online more consistently, voice memos deliver reliably, and joining older channels works again. The per-message post-quantum encryption was audited and hardened, several security issues were fixed, and the app was cleaned up with clearer text and accessibility labels. Both people need this version to add each other. No database upgrad
Version history
Jul 10, 2026 · 59.8 MB · Android API 29–35 · code 20006
Imported from the F-Droid repository index.
- v2.0.6: reliability and hardening
- Adding contacts is reliable again and crashes during pairing are fixed. Connections recover faster after a drop so contacts stay online more consistently, voice memos deliver reliably, and joining older channels works again. The per-message post-quantum encryption was audited and hardened, several security issues were fixed, and the app was cleaned up with clearer text and accessibility labels. Both people need this version to add each other. No database upgrad
SHA-256 94ba836e6ef1093bc394567b7b0f88f2279ae577ebf2271774638b063a7ecbb5
Jun 24, 2026 · 59.7 MB · Android API 29–35 · code 20005
Imported from the F-Droid repository index.
- v2.0.5: backup fix
- This release fixes a bug where creating an account backup could fail on many phones, leaving an empty file with no message. The backup now uses a lighter key-derivation setting with more memory headroom, so it works across devices, and it reports a clear error if anything goes wrong. Backups made with earlier 2.0 versions still open normally. There is no protocol change and no database upgrade.
- Full notes: https://github.com/zerionproject/Zerion/releases/tag/v2.0.5
SHA-256 3619edfa0dc67d03def9076c382099c9c86342c48366a4dc28f8386cde191f78
Jun 16, 2026 · 59.6 MB · Android API 29–35 · code 20003
Imported from the F-Droid repository index.
- v2.0.3: calls fixed, video beta, and a lighter app
- Voice calls now work reliably in both directions. An audio framing bug that could make one side sound robotic, or leave a call one-way, is fixed. Calls are now on by default. You can still turn them off in Settings, under Security.
- Video calling is available as an opt-in beta. When you enable it, a short notice explains that audio quality can drop on a slow Tor circuit while video is running.
- Calls now show a clear Reconnecting status and rec
SHA-256 3ed77ac215193fb3424b5f9d926ccf66b27c6aa5c53bbcb421047cefe5b7f489
Will it run on your device?
74%
- Targets newer Android builds, so legacy devices may be excluded.
- Multiple CPU architectures are covered.
- Aligned with the latest Android target SDK expectations.
Installation Guide
Open Settings on your Android device
Go to Security → Unknown sources (or Install unknown apps)
Enable "Allow from this source" for your browser or file manager
Open the downloaded APK file from your Downloads folder
Tap "Install" and wait for installation to complete
Launch the app from your home screen
Make sure to re-enable Unknown Sources restrictions after installation for security.
How to install this safely
How to verify the file you downloaded
Before you install anything, confirm the file is the one described here. On a computer, run shasum -a 256 your-download.apk (macOS or Linux) or certutil -hashfile your-download.apk SHA256 (Windows), then compare the output character-for-character with the SHA-256 on this page. If a single character differs, the file is not the build we recorded — delete it.
What the signing certificate proves
Every Android app is signed with a private key that only its developer holds. The fingerprint on this page is a hash of the matching public certificate, and it proves continuity rather than identity: it tells you a build came from whoever signed the earlier ones. Android enforces this at install time — if a package claiming to be com.professor.zerion is signed with a different key, the system will refuse to install it over your existing copy. A fingerprint that changes between releases is worth pausing on, because a repackaged app that has been modified by someone else cannot keep the original signature.
How to roll back to an earlier version
If the current release misbehaves, 2.0.5 is the last build before it. Android will not install an older version code over a newer one, so you must uninstall Zerion first — which clears its local data unless you have a backup. Reinstall the older APK only if its signing fingerprint matches the build you already trust, and check the API range: an older release may target an Android version your device has moved past.
Why we list sources instead of hosting everything
The official store channel is almost always the right choice: it updates automatically and carries the publisher's own distribution guarantees. A direct APK is useful when a device has no store access, when a rollout has not reached your region, or when you need a specific version — and only when the publisher has authorized that copy. APKBrowse does not list pirated, cracked, or unauthorized rebuilds of Zerion, and a listing is removed when the evidence for it stops holding up.
Get Zerion
Every source we list for com.professor.zerion is legality-reviewed. Pirated or cracked builds are never offered.
Other sources
F-Droid listing
officialF-Droid builds this app from source and signs it. This is its official listing, with older builds and full release notes.
Source code
verified publisherThe upstream repository this build is compiled from.
We check legality and signature continuity, but device behaviour still varies. Install at your own discretion.
App Information
Security Verification
We record provenance; we do not run malware scans. Verify the hash yourself before installing.
SHA-256 Hash
94ba836e6ef1093bc394567b7b0f88f2279ae577ebf2271774638b063a7ecbb5
Signing certificate
d7fdb11125890d133ae89d8ba4f4331d9045e21ef01d9899a7cdee6888f704c8
Permissions Required
What each permission lets Zerion do. A highlighted one is worth a second look — not necessarily wrong, just worth asking whether this app needs it.
Previous Versions
The signing certificate fingerprint for this release is on record, so a build that does not match it did not come from this publisher.
More Social apps
More from F-DroidReport a problem with this listing
A listing is only as good as its corrections. If a source is broken, a signature looks wrong, or this app should not be here, tell the moderation team.