PrivacyGear.nl

Briar: encrypted messaging without internet, servers, or a phone number

Briar works without servers and without internet. Messages travel via Tor, Bluetooth, or WiFi Direct — even when the network is down. No registration, no central infrastructure.

Briar: encrypted messaging without internet, servers, or a phone number

Briar: encrypted messaging without internet, servers, or a phone number

Every other messaging app in this series has one thing in common: they need internet. Briar doesn’t.

Briar works peer-to-peer. There are no servers. Messages go directly from device to device — via the Tor network when internet is available, via Bluetooth or WiFi Direct when it isn’t. If the network goes down — through outage, censorship, or emergency — Briar keeps working.

That makes Briar fundamentally different from Signal, Session, or Threema. Not better for daily use — but irreplaceable in situations where the infrastructure itself cannot be trusted.


How Briar works

Briar has no central servers. Messages synchronize as soon as two devices connect — via whatever channel is available.

Online (Tor): Messages travel via the Tor network. Your IP address is hidden from your contact and from anyone observing the traffic.

Offline (Bluetooth): Works within roughly 10-30 meters. No cellular network, no WiFi, no internet required.

Offline (WiFi Direct): Works on a local network without an internet connection. Useful during large-scale outages or in isolated environments.

You make contact by scanning each other’s QR code. This also cryptographically verifies identity — you know with certainty you’re talking to the right person.


Encryption

Briar uses the Bramble Protocol Suite — a fully custom-built stack of cryptographic protocols:

  • Key exchange via Bramble Handshake Protocol
  • Session encryption via Bramble Transport Protocol (BTP)
  • Sync via Bramble Synchronisation Protocol

Messages, files, group conversations, and forums are all end-to-end encrypted. No unencrypted metadata leaves the device.

Perfect Forward Secrecy is implemented: session keys are rotated periodically. If a key ever leaks, earlier messages remain unreadable.


What nobody sees

Briar has no servers and no log files. There is nothing to request from Briar because Briar holds nothing.

  • Message content: End-to-end encrypted
  • IP address: Hidden via Tor (when using internet)
  • Contact list: Encrypted, stored on your device only
  • Who talks to whom: Not visible to ISP, network administrators, or Briar itself

With Bluetooth or WiFi Direct, there is no external traffic at all — the signal only passes between the two devices.


Security audit

In 2023, Radically Open Security conducted an independent audit funded by the Open Technology Fund.

Findings:

  • No critical or high-severity vulnerabilities
  • One moderate finding: overlay attacks on Android (largely mitigated on Android 12+)
  • Five low-severity findings, including a weak pre-shared key in WiFi packet sharing

A 2024 retest confirmed 4 of 6 findings resolved. The remaining two are planned for future releases.

Earlier in 2023, three security issues were found and fixed in versions 1.4.22 and 1.5.3: a denial-of-service via invalid messages, a message duplication attack in forums, and a cryptographic flaw in the handshake.


Installing and getting started

Android: via Google Play, F-Droid (recommended on GrapheneOS), or direct APK from briarproject.org.

Desktop (Linux, Windows, macOS): download from briarproject.org.

iOS: not available. iOS limitations on background processes are incompatible with Briar’s peer-to-peer architecture. There are no plans for an iOS version.

On first launch:

  1. Choose a username (stored locally only)
  2. Set a password (minimum 8 characters — use a strong one)
  3. No email, phone number, or account required

Making contact: go to Add contact → Show my QR code and let the other person scan it, or scan theirs.


Briar Mailbox

Briar synchronizes messages only when both devices are online at the same time. That’s a limitation for daily use: if the recipient is offline, messages are only delivered when they reconnect.

Briar Mailbox partially solves this. It’s a separate app you install on a spare Android device. That device acts as a personal relay: contacts can send encrypted messages to it when you’re offline. When you open Briar, messages sync automatically.

The Mailbox only stores encrypted messages for its owner — the Mailbox operator cannot read the content. It’s your own infrastructure, not Briar’s.


Honest caveats

Battery consumption — Briar has no server receiving messages on your behalf. The app must run actively in the background to receive messages. This uses more battery than apps with central servers. Tip: disable battery optimization for Briar, or limit it to WiFi-only use.

No iOS — Briar is not available for iPhone or iPad. This is an architectural limitation, not a choice.

Small user base — Briar isn’t built for mass adoption. The smaller the network, the less likely your contacts already use it.

More complex contact verification — There’s no search function. You need to be physically near someone or exchange QR codes via another channel to connect.


Who Briar is for

Direct value:

  • Activists in countries with aggressive internet surveillance or censorship
  • Journalists in environments where communication infrastructure cannot be trusted
  • People who need to communicate during internet outages or network failures
  • Anyone who wants to remain reachable via Bluetooth without internet
  • Organizations that want to be completely independent of external infrastructure

Less suitable for:

  • Daily use as a primary messaging app (battery consumption, iOS limitation)
  • iPhone users (not available)
  • Situations where speed and convenience are the priority

Briar vs. the rest

BriarSignalSessionThreema
Phone number requiredNoYesNoNo
Works without internetYes (Bluetooth/WiFi)NoNoNo
Central serverNo (fully P2P)Yes (US)No (decentralized)Yes (Switzerland)
Onion routingYes (Tor)NoYes (own network)No
iOSNoYesYesYes
CostFreeFreeFree€4 one-time
AuditRadically Open Security 2023Multiple auditsQuarkslab 2024-2025Cure53 2024

Briar is the only app that works when there is no internet. For that specific scenario, there is no alternative.


Background

Briar was developed by an internationally distributed team led by Michael Rogers, with the goal of supporting freedom of expression and privacy in environments where infrastructure cannot be trusted. The project is funded by organizations including the Open Technology Fund, NLnet, and Access Now. The source code is fully open source.

See also: