Overview

Session was created by the Oxen project in 2019 as an encrypted messaging app centered on decentralization and anonymity. Unlike Signal or WhatsApp, which require a phone number, Session uses a random 66-character Session ID as the sole identity, so no phone number or email is ever needed, cutting off the link between identity and communication records at the source.

Session adapts the Signal Protocol and replaces central-server routing with a decentralized network of 1000+ Oxen service nodes (swarms). Messages hop across nodes with multi-layer encryption, so the network cannot correlate senders and recipients, maximizing metadata privacy. The client, server, and protocol are fully open source (GPLv3) and available on iOS, Android, Windows, macOS, and Linux. For journalists, activists, professionals in sensitive industries, and anyone who values anonymity, Session offers a "serverless, verifiable, phone-number-free" way to communicate securely.

Key Strengths

  • Truly no phone number: Registration only requires generating a 66-character Session ID, with no phone, email, or identity binding, avoiding tracking risks from leaked numbers - a strong privacy option in data encryption scenarios.
  • Decentralized architecture: Messages are routed through 1000+ Oxen service nodes in a swarm network with no central server to seize or monitor, giving structural advantages in censorship resistance and anti-tracking over centralized platforms.
  • Fully open source and auditable: Client, server, and protocol are open source (GPLv3), so anyone can review and verify the code, making the security model transparent and trusted by open source-oriented organizations.
  • Anonymous identity with metadata protection: Service nodes only pass along randomly routed encrypted messages and cannot link participants, exposing far less metadata than traditional messengers.
  • Full coverage across 5 platforms: iOS, Android, Windows, macOS, and Linux clients stay in sync, and disappearing messages can be set from 5 seconds to 1 week, balancing usability and privacy.

Product Ecosystem

Session Messenger

The core messaging app offers 1-to-1 encrypted messages, private groups, open communities, file transfer, and (beta) end-to-end encrypted voice calls. All communication is encrypted by default and unreadable by the server.

Session ID Anonymous Identity

A 66-character random string identity that requires no personal information. The same identity syncs across devices, and users can generate new identities and sever ties with old ones at any time.

Session Communities (Open Groups)

Open groups and channels for topic-based discussion with public join and anonymous participation, suited to community building and interest groups that need public yet private discussion.

Session File Transfer

End-to-end encrypted file and media transfer that does not persist on servers by default; only sender and recipient can decrypt the content.

Limitations

  • Limited user base: Session's user count is far smaller than WhatsApp or Telegram, so adoption among friends and colleagues is low, and switching carries real social costs - you may end up with few people to talk to.
  • Voice calling is immature: End-to-end encrypted voice calls are still in beta, with connection rates and stability below Signal and WhatsApp, so they should not be the sole option for important conversations.
  • Message delivery latency: Decentralized routing depends on the service node network; under network fluctuation or high node load, delivery latency can exceed centralized servers, hurting real-time communication.
  • Basic group and search features: Open groups on mobile have limited member management, message search, and pinning, which may fall short for large communities or heavy collaboration teams.

Use Cases

  • Anonymous communication (★★★★★): No phone number required for registration, ideal for scenarios where you want to hide your real identity - the strongest anonymity among mainstream messengers.
  • Journalists and activists (★★★★★): The decentralized network resists censorship, is verifiably open source, and protects metadata well, suited to high-risk environments; see account security hardening for extra protection.
  • Sensitive-industry communication （★★★★☆）: Teams in legal, medical, and finance with strict confidentiality needs can use Session for internal sensitive chats.
  • Complement to Signal （★★★★☆）: Adding an anonymous identity channel on top of Signal covers both "identified secure messaging" and "anonymous secure messaging"; see remote team toolchains for tool selection.
  • Everyday high-frequency social messaging （★★☆☆☆）: Limited friend-network adoption makes it unsuitable as a daily primary messenger.

Pricing

Plan Price Highlights
Session Personal Free End-to-end encrypted messages, file transfer, open communities, disappearing messages; no ads or paywalls

Like Signal, Session follows a non-profit operating model: core features are completely free for individuals, sustained by donations and community support. Users get no traditional commercial SLA or technical support, so enterprises scaling up should assess maintenance costs themselves.

FAQ

  • What is the difference between Session and Signal? Session builds on Signal's end-to-end encryption with two key changes: it replaces phone-number registration with a 66-character Session ID for full anonymity, and it routes messages over a decentralized service node network with no central server to seize. Both are open-source, free privacy tools; Signal is more mature and stable while Session is more anonymous - compare on the Signal page.

  • Does Session really not need a phone number? Yes. Registration only generates a random Session ID and never collects your phone number, email, or contacts - the core difference from WhatsApp, Telegram, and other mainstream apps; see zero trust architecture.

  • Is Session secure? Yes. Session uses end-to-end encryption based on the Signal Protocol, so only sender and recipient can read messages, and the client, server, and protocol are fully open source (GPLv3) for auditing. Combined with end-to-end data encryption principles, Session's threat model is more transparent than centralized platforms.

  • Is Session suitable for enterprises? Suitable for small teams with strong confidentiality and anonymity needs, but note: voice calls are still in beta, and there is no commercial SLA or centralized support. Teams needing full enterprise communication management should evaluate self-hosted options like Mattermost or Element.

  • Is Session free? Will it charge? The personal edition is completely free with no ads or paywalls, sustained by community donations and foundation support. No paid plans for individuals have been announced, though commercial enterprise services may come later; see the open source and commercial software market.