Dunes v1.17.2 Out Now

No Phone Number.
No Email.
Absolute Privacy.

Dunes is a secure messenger built for absolute anonymity. No SIM cards, no SMS confirmations, no tracking. Registration is instant, local, and completely free. Optionally bind an email address only if you wish to reserve a human-readable username.

100% E2EE Secured
0 Personal Data Collected
Unlimited Ad-free Secure Chats
9:41
D
Dunes Chat
Fully Secure Session
TODAY

Wait, is it true that Dunes doesn't ask for my email or phone number? 🤯

9:42 AM

Correct! Account keys are generated directly on your device. Zero cloud registration required. 🔒

9:43 AM · Encrypted

Wow! So how does discovery work? Can I have a username?

9:43 AM

Yes, you can register an optional email strictly to verify and bind your @username. Completely private! 🌴

9:44 AM · Encrypted

Designed for True Sovereignty

Traditional messengers force you to verify identity, exposing your phone metadata, contacts, and personal logs. Dunes resets the paradigm.

Device-Centric Registration

No phone numbers. No email verification checks. Account creation generates local cryptographic key pairs on your device instantly. You start communicating instantly with absolute peace of mind.

Optional Username Mapping

Want your friends to find you easily? Optionally add a verified email address to map a unique @username to your device. The email is cryptographic hash mapped, maintaining your complete privacy.

High Performance Secure Calls

Fully integrated peer-to-peer secure audio/video calls utilizing instant Firebase Cloud Messaging (FCM) wakeup service. Enjoy low-latency calls that run reliably even on background Doze mode.

Cryptographic Architecture

Mathematical Sealing of Messages

Dunes doesn't ask for trust because it relies on zero-trust mathematics. Messages are sealed before they leave your antenna.

  • ✓
    Diffie-Hellman Key Agreement

    Keys are established instantly per conversation, ensuring third-party servers never obtain decrypt options.

  • ✓
    AES-256-GCM Encrypted Payloads

    Every packet, image, and text block is wrapped in symmetric authenticated encryption guarding against tamper attempts.

  • ✓
    Zero Metadata Trails

    Server only acts as an encrypted buffer pipeline. Since no profiles are bound to phone numbers, correlation profiling is impossible.

Secure Sideload

Download Dunes

Because privacy apps often face arbitrary censorship on major app stores, we distribute the secure Dunes client as an independent direct APK. Instantly get the authentic, untouched binary straight from our build repository.

Latest Stable v1.17.2

How to Sideload the Dunes APK

Installing a direct APK on Android is safe and takes under 30 seconds. Follow these quick steps:

  1. 1

    Download the APK file

    Click the primary download button to save the dunes_v1.17.2.apk binary to your device.

  2. 2

    Open File Manager / Download

    Tap on the downloaded file in your notification bar or browse to your Downloads folder and tap the file.

  3. 3

    Allow Unknown Sources (If Prompted)

    If Android prompts you with a security message, click Settings and toggle on "Allow from this source" for your browser or file manager.

  4. 4

    Finish Installation & Chat!

    Tap Install, open Dunes, and generate your keys! No SMS codes required.

Frequently Answered Truths

Have questions about the technical structure, username claiming, or server mechanics? Let's clarify.

Dunes shifts identity verification from central servers to cryptography. When you launch the app, a local keypair (public and private keys) is generated directly on your mobile hardware. Your public key acts as your secure address. Servers do not need to register your telephone card or verify email accounts because your device is its own authority.

If you wish to secure a readable handle (e.g. @sandy), you can optionally provide an email address. Dunes performs a secure cryptographic hashing process on your email to register the username link in our database. Your raw email address is never saved in plaintext on servers, protecting you from identity correlation breaches.

Because Dunes operates without central databases, devices must ordinarily be online at the same time to establish direct connections. To ensure reliable delivery, our relays temporarily buffer encrypted message packets in memory for up to 15 minutes while waking the recipient via silent push notifications. Encrypted media files are stored securely for up to 72 hours. Crucially, as soon as the recipient connects and downloads the payload, it is instantly and permanently deleted from the relay server forever. If the contact cannot be reached within these time limits, the encrypted envelopes are automatically and permanently purged.

Dunes was built completely from scratch using AI code generation by a developer who believes that communication must be secure and private.

Absolutely not. Your private keys never leave your device. They are locked securely inside your operating system's sandbox directory. Even the relay servers that queue and dispatch your encrypted message envelopes cannot read the contents, because they lack the private keys required to resolve the mathematical equation.