Skip to content

Zerion

F-Droid

Open source

Encrypted chats, calls and channels over Tor. No phone number, no email.

Version
2.0.6
Size
59.8 MB
Updated
Jul 10, 2026
Get from Download APK (v2.0.6)
Signing certificate on record

About this app

Zerion is a private messenger. It runs over Tor, so your IP address stays hidden from the people you talk to and from the network itself. There's no phone number, no email, and no account on anyone's server. Your data lives encrypted on your own device, nowhere else.

Everything is end-to-end encrypted with hybrid post-quantum cryptography: today's proven algorithms together with the new NIST quantum-resistant ones. Keys move forward with every message, so a key uncovered today cannot open yesterday's conversations. If large quantum computers arrive sooner than expected, what you sent in the past stays protected.

WHAT YOU CAN DO

• One-to-one chats, end-to-end encrypted • Group chats up to a few dozen people • Voice calls over Tor, on by default, plus opt-in beta video calling • Send photos, videos, voice notes, and documents • Disappearing messages, with an optional default timer for new chats • Stickers • Introduce two of your contacts to each other, securely • A built-in vault for passwords, notes, and private files, with search and sort • Back up your account to an encrypted file, or move it to a new phone over Tor • Channels, a one-to-many broadcast layer with optional discussion threads • Translated into more than 35 languages

CHANNELS

One person writes, many people read.

• Public channels: anyone with the invite link can subscribe • Private channels: people ask to join and the owner approves • Discussion threads: the owner decides, per channel, whether subscribers can reply • Reactions, pinned posts, and attachments • Editor delegations: let trusted people post without sharing your identity key • Mute notifications for any channel • Subscribers never see one another, so no member list leaks between them

HARDENED MODE (OPT-IN)

Three independent protections under Security settings, all off by default:

• Refuse to start on tampered devices (unlocked bootloader, modified system) • Refuse to start when a debugger, root, or hooking framework is detected • Sign out automatically, or wipe, if USB debugging or file transfer is switched on

PRIVACY AND SECURITY

• Tor-only transport. No Wi-Fi, Bluetooth, or LAN exposure • No phone number, no email, no central server • No telemetry, no analytics, no crash reporting • No logging of any kind, verified at build time • Encrypted at rest with SQLCipher and a key derived from your password • Screenshots blocked inside the app • Notifications never reveal message contents • The clipboard auto-clears after you copy something sensitive • Fully open source, GPL v3, security-reviewed before each release

UNDER THE HOOD

• Hybrid post-quantum key exchange (X25519 + ML-KEM-768) • Hybrid signatures (Ed25519 + ML-DSA) • Forward-secret message ratcheting • Calls encrypted with AES-256-GCM; storage with SQLCipher (AES-256)

SUPPORT THE PROJECT

Zerion is free and open source, with no ads, no trackers, and no investors. If you'd like to help keep it independent, you can donate: https://zerion.chat/donate.html

WHO IT'S FOR

People who want to talk to other people without a third party in the middle. Journalists and their sources, activists, lawyers and their clients, people in countries that block secure messengers. Anyone who doesn't want to hand a phone number to a tech company every time they install a messenger.

WHAT IT WON'T DO

• It won't message people who aren't on Zerion • It won't work without an internet connection (Tor needs one) • It won't restore your account if you forget the password. There is no recovery, and that's the point

LEARN MORE

• Website: https://zerion.chat • Source: https://github.com/zerionproject/Zerion

GPL v3.

Licensed under GPL-3.0-only.

OfficialSignature VerifiedOpen Source

What's New in v2.0.6

Imported from the F-Droid repository index.

  • v2.0.6: reliability and hardening
  • Adding contacts is reliable again and crashes during pairing are fixed. Connections recover faster after a drop so contacts stay online more consistently, voice memos deliver reliably, and joining older channels works again. The per-message post-quantum encryption was audited and hardened, several security issues were fixed, and the app was cleaned up with clearer text and accessibility labels. Both people need this version to add each other. No database upgrad

Version history

v2.0.6Latest
Signature continuous

Jul 10, 2026 · 59.8 MB · Android API 2935 · code 20006

Imported from the F-Droid repository index.

  • v2.0.6: reliability and hardening
  • Adding contacts is reliable again and crashes during pairing are fixed. Connections recover faster after a drop so contacts stay online more consistently, voice memos deliver reliably, and joining older channels works again. The per-message post-quantum encryption was audited and hardened, several security issues were fixed, and the app was cleaned up with clearer text and accessibility labels. Both people need this version to add each other. No database upgrad
ACCESS_NETWORK_STATECAMERARECORD_AUDIOFOREGROUND_SERVICE_MICROPHONEINTERNETRECEIVE_BOOT_COMPLETEDUSE_BIOMETRICVIBRATEWAKE_LOCKPOST_NOTIFICATIONSUSE_FULL_SCREEN_INTENTHIDE_OVERLAY_WINDOWScom.professor.zerion.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

SHA-256 94ba836e6ef1093bc394567b7b0f88f2279ae577ebf2271774638b063a7ecbb5

v2.0.5
Signature continuous

Jun 24, 2026 · 59.7 MB · Android API 2935 · code 20005

Imported from the F-Droid repository index.

  • v2.0.5: backup fix
  • This release fixes a bug where creating an account backup could fail on many phones, leaving an empty file with no message. The backup now uses a lighter key-derivation setting with more memory headroom, so it works across devices, and it reports a clear error if anything goes wrong. Backups made with earlier 2.0 versions still open normally. There is no protocol change and no database upgrade.
  • Full notes: https://github.com/zerionproject/Zerion/releases/tag/v2.0.5
ACCESS_NETWORK_STATECAMERARECORD_AUDIOFOREGROUND_SERVICE_MICROPHONEINTERNETRECEIVE_BOOT_COMPLETEDUSE_BIOMETRICVIBRATEWAKE_LOCKPOST_NOTIFICATIONSUSE_FULL_SCREEN_INTENTHIDE_OVERLAY_WINDOWScom.professor.zerion.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

SHA-256 3619edfa0dc67d03def9076c382099c9c86342c48366a4dc28f8386cde191f78

v2.0.3
Signature continuous

Jun 16, 2026 · 59.6 MB · Android API 2935 · code 20003

Imported from the F-Droid repository index.

  • v2.0.3: calls fixed, video beta, and a lighter app
  • Voice calls now work reliably in both directions. An audio framing bug that could make one side sound robotic, or leave a call one-way, is fixed. Calls are now on by default. You can still turn them off in Settings, under Security.
  • Video calling is available as an opt-in beta. When you enable it, a short notice explains that audio quality can drop on a slow Tor circuit while video is running.
  • Calls now show a clear Reconnecting status and rec
ACCESS_NETWORK_STATECAMERARECORD_AUDIOFOREGROUND_SERVICE_MICROPHONEINTERNETRECEIVE_BOOT_COMPLETEDUSE_BIOMETRICVIBRATEWAKE_LOCKPOST_NOTIFICATIONSUSE_FULL_SCREEN_INTENTHIDE_OVERLAY_WINDOWScom.professor.zerion.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

SHA-256 3ed77ac215193fb3424b5f9d926ccf66b27c6aa5c53bbcb421047cefe5b7f489

Will it run on your device?

CompatibilityLikely to run

74%

  • Targets newer Android builds, so legacy devices may be excluded.
  • Multiple CPU architectures are covered.
  • Aligned with the latest Android target SDK expectations.
What changed in this release
Size delta
+0.1 MB
Added permissions
None
Removed permissions
None

Installation Guide

1

Open Settings on your Android device

2

Go to Security → Unknown sources (or Install unknown apps)

3

Enable "Allow from this source" for your browser or file manager

4

Open the downloaded APK file from your Downloads folder

5

Tap "Install" and wait for installation to complete

6

Launch the app from your home screen

Make sure to re-enable Unknown Sources restrictions after installation for security.

How to install this safely

How to verify the file you downloaded

Before you install anything, confirm the file is the one described here. On a computer, run shasum -a 256 your-download.apk (macOS or Linux) or certutil -hashfile your-download.apk SHA256 (Windows), then compare the output character-for-character with the SHA-256 on this page. If a single character differs, the file is not the build we recorded — delete it.

What the signing certificate proves

Every Android app is signed with a private key that only its developer holds. The fingerprint on this page is a hash of the matching public certificate, and it proves continuity rather than identity: it tells you a build came from whoever signed the earlier ones. Android enforces this at install time — if a package claiming to be com.professor.zerion is signed with a different key, the system will refuse to install it over your existing copy. A fingerprint that changes between releases is worth pausing on, because a repackaged app that has been modified by someone else cannot keep the original signature.

How to roll back to an earlier version

If the current release misbehaves, 2.0.5 is the last build before it. Android will not install an older version code over a newer one, so you must uninstall Zerion first — which clears its local data unless you have a backup. Reinstall the older APK only if its signing fingerprint matches the build you already trust, and check the API range: an older release may target an Android version your device has moved past.

Why we list sources instead of hosting everything

The official store channel is almost always the right choice: it updates automatically and carries the publisher's own distribution guarantees. A direct APK is useful when a device has no store access, when a rollout has not reached your region, or when you need a specific version — and only when the publisher has authorized that copy. APKBrowse does not list pirated, cracked, or unauthorized rebuilds of Zerion, and a listing is removed when the evidence for it stops holding up.

Get Zerion

Every source we list for com.professor.zerion is legality-reviewed. Pirated or cracked builds are never offered.

Other sources

F-Droid listing

official

F-Droid builds this app from source and signs it. This is its official listing, with older builds and full release notes.

Source code

verified publisher

The upstream repository this build is compiled from.

We check legality and signature continuity, but device behaviour still varies. Install at your own discretion.

App Information

Developer
F-Droid
Category
Social
Android
10+
Architectures
arm64-v8a, armeabi-v7a
Version
2.0.6 (code 20006)
Size
59.8 MB
Updated
Jul 10, 2026
Package name
com.professor.zerion

Security Verification

File integrity
SHA-256 recorded
Signing certificate
Fingerprint on record
Official source
Download APK (v2.0.6)

We record provenance; we do not run malware scans. Verify the hash yourself before installing.

SHA-256 Hash

94ba836e6ef1093bc394567b7b0f88f2279ae577ebf2271774638b063a7ecbb5

Signing certificate

d7fdb11125890d133ae89d8ba4f4331d9045e21ef01d9899a7cdee6888f704c8

Permissions Required

What each permission lets Zerion do. A highlighted one is worth a second look — not necessarily wrong, just worth asking whether this app needs it.

ACCESS_NETWORK_STATECheck whether the device is online and on what kind of connection.
CAMERAUse the camera to take photos or video.
RECORD_AUDIORecord audio with the microphone.
FOREGROUND_SERVICE_MICROPHONE
INTERNETSend and receive data over the internet.
RECEIVE_BOOT_COMPLETEDStart automatically when the device finishes booting.
USE_BIOMETRICAuthenticate with a fingerprint or face.
VIBRATEMake the device vibrate.
WAKE_LOCKKeep the device awake, e.g. to finish a download or play media.
POST_NOTIFICATIONSShow notifications.
USE_FULL_SCREEN_INTENTShow full-screen alerts, such as alarms or incoming calls.
HIDE_OVERLAY_WINDOWS
com.professor.zerion.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Previous Versions

Signature verified

The signing certificate fingerprint for this release is on record, so a build that does not match it did not come from this publisher.

More Social apps

More from F-Droid

Report a problem with this listing

A listing is only as good as its corrections. If a source is broken, a signature looks wrong, or this app should not be here, tell the moderation team.

Report a problem