End-to-end encrypted · identity is a key, not a SIM
Updated 20 October 2026
Sendant is end-to-end encrypted messaging where your identity is a key that lives on your device. Our servers move sealed envelopes they cannot open. Use it in your browser with nothing to install, or get the app for the best experience — push notifications, video calls, voice notes, groups and encrypted backup. Either way, there is nothing to hand over.
Need bigger files? See Pro Relay
FreeNo accountNo phone numberNo emailNo ads
01 — How we differ
Signal, SimpleX, Session and Threema are all serious, well-regarded choices. The difference is what you hand over to start, and where you can use it. Honest rows included: they have independent audits, and we do not yet.
| What you need | Sendant | Signal | SimpleX | Session | Threema |
|---|---|---|---|---|---|
| A phone number | Never | Required | No | No | No |
| An email or account | Never | Phone-anchored | No | No | Threema ID |
| An app installed | No — browser works | Yes, phone + desktop | Yes | Yes | Linked web client |
| Money | Free, no ads | Free | Free | Free | Paid app |
| Independent audit | Not yet | Yes | Yes | Yes | Yes |
As far as we know, Sendant is the only identifier-free messenger with a persistent no-install browser client. Competitor facts were last re-verified against primary sources on October 18, 2026; the living comparison carries the detail and the corrections.
See the full comparison02 — Why it is more private
Encryption happens on your device before anything touches the network. The server that stores and forwards your messages is useful for delivery and useless for reading.
On your screen
In our mailbox
to 7f3a…c2e1 # a routing key, not a person from sealed # sender header the server cannot open body 1.2 KB # ciphertext 3f8c 91ab e02d 7c44 5a1e b9f0 0c73 d6a2 88e1 4f0b c3d9 2a67 e5b4 19cc 7d3f a0e8 6b2d f4a1 … expires 30 days phone — email — contacts — profile —
What any server still sees: that a device connected, when, and from which network address. Sendant does not claim to hide network-level metadata; it claims that content stays ciphertext and that no phone number, email, or contact list exists on the server to begin with. The full threat model →
Creating an identity generates key material on your device. There is no registration, no directory to mine, and no account record that maps to a person.
X3DH key agreement and the Double Ratchet — the same primitives Signal uses — written once in Go and shipped native on Android and iPhone and as WebAssembly in the browser. No second implementation to drift.
Android keeps key material in the platform Keystore, hardware-backed where available; iPhone uses this-device-only Keychain items; the browser encrypts state under a non-extractable WebCrypto key.
Every conversation has a safety number you can compare digit by digit, in person or out loud on a call. Trust states are plain words — “Verified”, “New device added”, “Safety number changed” — never a vibe.
03 — What that gives you
Not a feature list — the situations where a messenger that asks for nothing changes what you can do.
Share a link or scan a code. A source, a buyer on a marketplace, a new acquaintance: neither side reveals a number, an email, or a username that follows you around.
A locked-down work laptop, a library computer, a borrowed phone. Open app.sendant.io and the same encryption runs in the tab — compiled to WebAssembly, not watered down.
Throttled, restricted, or intermittent connections are what the encrypted mailbox is for: your message waits as ciphertext and delivers when your contact reconnects. It is not Bluetooth mesh — Briar owns that lane.
There is no account record that maps to a person, no server-side contact list, and no stored plaintext. The mailbox holds encrypted envelopes with an expiry, nothing more.
Safety numbers are derived from both identity keys and are identical on Android, iPhone, and web. Compare them over any channel we do not control and you have ruled out a machine in the middle — ours included.
Sendant is not funded by advertising, a token, or your data. It is free, and the free limits do not change; the one paid product is the optional Pro Relay subscription ($3/month or $29/year, on the web client and Android, not iPhone), which raises relay limits for bigger files and a longer offline mailbox. There is no analytics SDK profiling how you use the app.
04 — Optional upgrade
Pro Relay is for the days you need to send the real document or go offline for a few weeks. It raises the relay limits — not the privacy — with the same end-to-end encryption, no account, and no ads.
Free stays free. Pro Relay is available on the web and Android today; iPhone is not included. Cancel anytime; 7-day refund.
05 — What we don't claim
Privacy claims are only worth what you can verify. These are the limits we state in the same breath as everything above.
06 — Get Sendant
The browser is the real thing with nothing to install: text, photos, files and voice calls, fully end-to-end encrypted. The app is the recommended way in for the best experience.
Browser
Desktop, iPhone, Android — any modern browser with WebAssembly. The fastest way in, and the only way onto a device you cannot install on. Messages arrive while the tab is open; one tab at a time.
No account required
Android
The recommended way in. On Google Play, or as a direct APK for de-Googled phones and GrapheneOS, with a signing fingerprint you can check yourself.
iPhone
New in August 2026, so it has less field history than the Android build. Keys live in this-device-only Keychain items, never synced through iCloud Keychain.
iOS 17 or later
The app adds push notifications and calls that ring when it is closed, video calls, voice notes, groups, larger files and encrypted backup. The browser is the convenience tier, not the highest-assurance one. Why, honestly
Built for everyday privacy without centralized trust · journalists, NGOs and civil-society teams · advisers and client work · communities and operators who run relay and storage nodes
Questions
The questions people ask before trusting a messenger. Longer versions live on the FAQ page.
Related privacy tools
Two sibling products from the people behind Sendant cover what email still leaks. Each is a separate product with its own privacy policy; Sendant shares no data with either.
Sendant never asks for an email address. For every other service that does, Emcognito gives you an alias per signup, keeps your real inbox out of breach lists, and lets you switch an alias off the moment it leaks or fills with spam.
Email hosting for founders running more than one business: every domain lands in a single inbox, replies go out from the matching address, and each domain is signed with its own DKIM key.
Private by default. Calm by design.
Device-held keys, no phone-number identity, and no tracking-driven business model. Open it in the browser you already have.
FreeNo accountNo phone numberNo emailNo ads