Briar

The Briar app represents a specialized, serverless approach to digital communication. Designed to meet the security requirements of activists, independent journalists, and civil rights groups operating in highly monitored environments, the software completely eliminates centralized infrastructure. The platform establishes a decentralized peer-to-peer (P2P) network where client databases synchronize directly with one another. When active internet connections are available, the application routes all traffic through the Tor network. It sets up end-to-end encrypted Tor v3 onion services for each client, effectively masking IP addresses and keeping social relationship graphs secure.

The primary technical innovation of the platform is its multi-transport mesh synchronization system. In regions experiencing localized cellular blackouts or active state-sponsored internet censorship, the software shifts from Tor-based routing to local physical channels. Using the device's built-in adapters, it establishes ad-hoc mesh networks over Bluetooth or local Wi-Fi. When absolute physical isolation occurs, it can even transfer encrypted messages via removable memory cards. This transport-agnostic architecture relies on the Bramble Handshake and Bramble Transport protocols, which enforce forward secrecy across all communication channels. This ensures that even if a future private key is compromised, previous session logs remain secure.

This peer-to-peer model places the responsibility of data availability entirely on the client endpoints. Because there are no intermediate cloud servers to queue messages, a sender and a recipient must be online at the same time to exchange data. To address this, developers created the Briar Mailbox—an auxiliary, low-power app that runs on a secondary device. This mailbox acts as a localized, offline store-and-forward proxy. It safely buffers encrypted messages and delivers them once the primary target device reconnects to the local network.

The software's strict adherence to security principles is evident in how it manages local storage. All local databases, contact profiles, and chat logs are fully encrypted on-device using SQLCipher. Additionally, the platform disables system-level screenshotting and screen recording by default, protecting the interface from local malware or physical surveillance. Finding contacts is also designed to prevent remote discovery; users must either scan physical QR codes in person or exchange unique Bramble links over external secure channels, preventing unauthorized surveillance of contact lists.