The only technical page of the site
Everything Layergram protects. And everything it can't protect.
Primitives, formats, migration, threats, and platform boundaries, gathered in one verifiable place.
For older version users only. This guide is exclusively for those who used Layergram before August 25, 2026, in versions prior to 2.0.0 (27).
Local architecture
Layergram does not use its own accounts, central directories, or servers to deliver messages. Identity, encryption, decryption and history remain on the device.
Identity and verification
People exchange full identities and verify contact. No Layergram server decides which key belongs to whom.
LMF v3 hybrid
Identity establishment and conversation setup use both X25519 and ML-KEM-768. The resulting security properties depend on the correct implementation of both components and on the complete threat model.
Ratchet and Forward Secrecy
The state evolves over time to limit how much a later compromise can reveal about earlier messages. The protection provided depends on the selected mode and the state of the devices.
Transport formats
Direct payload, link and cover message are different containers. The link identifies Layergram; cover text can reduce visual evidence but is not invisible to every analysis.
Migration v2 → v3
The new public identity must be redistributed and verified for all users who were already using Layergram before August 25, 2026, in versions prior to 2.0.0 (27). No silent migration magically preserves trust and previous sessions.
Storage and app lock
Data and state remain on the device and are protected by the app's security controls. An unlocked, compromised, or observed device remains a risk, as it does with any secure app.
Screen protection
Android can block screen captures using system protections. iOS, macOS, and Windows have different capabilities and limitations. An external camera remains outside the app's control, but enabling the Premium Keyboard's randomized layout can make typing patterns harder to recognize.
Premium Backups
The backup uses a separate 24-word phrase, distinct from the 24-word phrase used for the identity. Depending on the platform you can use iCloud, Google Drive, OneDrive or Dropbox; the provider stores encrypted data and its own metadata.
Threat model
Layergram does not protect an already compromised endpoint, recipient behavior, external notifications, uncontrolled clipboards, cameras, or transport metadata.
LMF v3 combines classical and post-quantum primitives, progressively updates the conversation state and declares boundaries that remain outside its control.
Start free
Protect your first message
Start free. Choose one person. Invite them in a few steps.