How Nodz works
Private by design, explained without jargon
What happens to your messages, what Nodz can and cannot see, and why we built it this way.
Your keys are born on your device
When you create an account, your browser or phone generates your encryption keys. The private half never leaves your device in readable form. Nodz only receives the public half, which others use to start encrypted conversations with you.
Messages travel in sealed envelopes
Every message is encrypted on your device with Messaging Layer Security (MLS), the open internet standard RFC 9420. Our servers pass on sealed envelopes they cannot open, and delete them as soon as they are delivered.
Keys that keep changing
MLS keeps replacing the keys inside a conversation. If a key were ever stolen, it would not unlock earlier messages (forward secrecy), and the conversation heals itself with the next key update (post-compromise security).
No phone number. No email. Just a username.
Most messengers tie your account to a phone number, which links you to your real identity, your SIM card and your address book. Nodz asks for nothing but a username you choose. With invitation links, people can even join a conversation without seeing your username.
Recovery without a back door
Instead of an email reset, you get a recovery code. It unlocks an encrypted backup of your keys that only you can open. That also means we cannot reset it for you, and nobody can make us.
Anonymity, honestly
Pseudonymous by design. Not invisible.
Your username is not linked to your name, phone number or email address. But no messenger can make you completely invisible, and we would rather tell you exactly where the limits are.
What stays hidden
- What you write, send and share
- Your contact list and who you added
- Your real name, phone number and email: we never have them
- Your username from people who join through your invitation links
What the server can still see
- Your username and public keys
- When your devices connect, and roughly how large encrypted messages are
- Your IP address while you are connected (it is not written to logs)
- That an encrypted envelope is waiting for a mailbox, until it is delivered
Want to hide your IP address too? Use a trusted VPN or the Tor Browser. A dedicated Tor (onion) address is planned.
Nodz compared with a typical messenger
| Typical messenger | Nodz | |
|---|---|---|
| Phone number or email required | Usually | Never |
| Address book uploaded | Often | Never; contacts are encrypted on your device |
| Advertising or data sales | Common | None |
| Provider can read messages | Sometimes | No: end-to-end encrypted with MLS |
| Funding | Ads, data or investors | Donations |
A general comparison, not about any specific product.
Frequently asked questions
Is Nodz anonymous?
Nodz is pseudonymous: you sign up with only a username, so your account is not tied to your name, phone number or email. The server can still see connection metadata such as IP addresses while you are online, so for stronger anonymity combine Nodz with a VPN or Tor.
Can Nodz read my messages?
No. Messages are end-to-end encrypted on your device with MLS (RFC 9420). The server only stores and forwards ciphertext it cannot decrypt.
What happens if I forget my password?
Use the recovery code from your recovery kit to set a new password. If you lose both your password and your recovery code, the account cannot be recovered, because there is no back door.
Why doesn't Nodz ask for a phone number?
A phone number links you to your legal identity and your contacts. Nodz is designed to work with only a username, so there is less about you that can leak or be requested.
Is Nodz free?
Yes. Nodz has no ads and never sells data. It is funded by voluntary donations.
Which encryption does Nodz use?
Messaging Layer Security (MLS, RFC 9420) through the open-source OpenMLS library, plus Ed25519 identity keys and Argon2id password hashing.
When can I start using Nodz?
Now: Nodz is in open beta on the web, Windows, Android and Linux. Create an account in the web app or download an app. As in any beta, expect the odd rough edge. An independent security review of the encryption is planned, and an iOS app follows later.
Ready to step in?
Nodz is free, has no ads and is funded by people who care about privacy.