Arpokrat | The Ecosystem of Digital Sovereignty on ARPOKRAT

Le Blog Arpokrat

Tue, 26 May 2026 00:00:00 +0000

Secure Password Generator & Strength Analyzer | Arpokrat

Thu, 21 May 2026 00:00:00 +0000

Random Characters Memorable Words Check Your Own

Security Score

Strong Estimated time to crack: ... Entropy: ... bits

Password Length 16

Uppercase (A-Z)

Lowercase (a-z)

Numbers (0-9)

Symbols (!@#$...)

Capitalize Words

Random digit after each word

Word Separator:

Local Strength Analyzer

Type a password above to evaluate its cryptographic strength. It remains entirely local to your browser and is never transmitted anywhere.

Generated locally using window.crypto.getRandomValues().

Time to Crack a Password

Estimated time required to brute-force a password using modern hardware capable of computing 100 billion hashes per second. Note how length drastically multiplies the time required.

Length	Numbers Only	Lowercase Letters	Upper & Lowercase	Mixed (Numbers, Cases, Symbols)
8 chars	Instantly	Instantly	8 Minutes	1 Hour
10 chars	Instantly	23 Minutes	16 Days	5 Years
12 chars	10 Seconds	11 Days	600 Years	35k Years
14 chars	16 Minutes	18 Years	2M Years	250M Years
16+ chars	27 Hours	13M Years	Billions of Years	Billions of Years

Swipe to see more

Mastering Password Security

A strong password is your first line of defense. Here is what you need to know.

Length beats Complexity

A password's strength relies exponentially on its length. An 8-character password with letters, numbers, and symbols can be cracked in minutes. A 16-character password using only lowercase letters would take centuries. Always prioritize length.

What is Entropy?

Entropy is a mathematical measure of unpredictability, calculated in bits. It answers a simple question: How large is the pool of possibilities the attacker has to guess from? An entropy above 80 bits is considered highly secure against modern offline attacks.

Beyond the Password

A good password is useless if it's stolen from a breached database. Never reuse passwords across different sites. Furthermore, always enable Two-Factor Authentication (2FA) (preferably using an authenticator app or hardware key).

Use a Password Manager

Human brains aren't built to memorize dozens of 16-character random strings. A Password Manager securely stores your unique passwords in an encrypted vault, so you only need to remember one master password.

Try Proton Pass

Privacy Policy | Arpokrat

Fri, 08 May 2026 00:00:00 +0000

Last Updated: May 8, 2026

Arpokrat GmbH

Address: c/o Wadsack AG, Bahnhofstrasse 7, CH-6302, Zug, Switzerland.

1. Our Philosophy: Anonymity and Sovereignty

To access our messaging application, you do not need a phone number, and creating a user account is not required. We are committed to ensuring your absolute confidentiality and are dedicated to your effective digital sovereignty.

The fundamental rule of Arpokrat is strict: we do not collect any usage data.
The only exception concerns the purchase of licenses (ArpokratOS): during billing, we only collect your name, email address, and country of residence. This data is collected exclusively to comply with Swiss tax obligations. It is stored in an isolated manner for 10 years and then permanently deleted.
Your personal messages and calls are end-to-end encrypted. No one, not even Arpokrat, can read or listen to them, nor can they access the files sent and/or received.

2. Specifics of ArpokratOS (Operating System)

If you use our secure operating system (ArpokratOS, optimized for Google Pixel devices) in addition to our messaging application, your protections are enhanced at both the hardware and software levels:

Location Disabled: The OS blocks access to GPS tracking modules. You cannot be geolocated, and you cannot share your location, as this function is neutralized at the root level.
NFC and Bluetooth (BT) Disabled: Near-field communication (NFC) and Bluetooth protocols are disabled at the system level to prevent any relay attacks, remote scanning, tracking, or unauthorized pairing attempts without your knowledge.
Data Sovereignty: ArpokratOS enforces privacy by default by disabling physical and location attack vectors at the Kernel level. This technical measure ensures compliance with "Data Protection by Design" (Art. 25 GDPR / Art. 7 FADP), physically preventing any unauthorized data collection and securing the device against data extraction.

3. The Only Information You Provide (Billing)

You do not need to provide any personal information to use our messaging application. You are identified only by a cryptographic key generated locally on your device.

License Purchases (ArpokratOS): If you choose to purchase a license for our OS, we will only ask for your name, email address, and country of residence. This information is collected exclusively to strictly comply with current tax regulations in Switzerland and to issue the corresponding invoice.

Storage and Isolation: This billing data is stored in encrypted form on administrative servers located in Switzerland, completely isolated and disconnected from the communication infrastructure (which is "Zero-Log").
Retention: In accordance with the Swiss Code of Obligations, this accounting data is retained for 10 years and then securely destroyed. It is never cross-referenced with your cryptographic activity or communications.

4. Processing of User Content (Communications)

We provide asymmetric end-to-end encryption (E2EE) for all our Services. Your calls, messages, group metadata, and multimedia files (images, audio, video, documents) are encrypted at the source.

Routing in Volatile Memory (RAM-Only): Your messages are stored exclusively on your device(s) and not on our servers. To ensure transmission from sender to recipient, our relay servers operate solely in random-access memory (RAM). No communication data is written to a physical hard drive. Once the message is delivered to the target device, the encrypted packet is instantly erased from our servers' memory.
Pending Messages: If a recipient is offline and a message cannot be delivered immediately, we store the encrypted packet on our transit servers for a maximum of 30 days to attempt delivery. After this period, if it has not been delivered, the message is permanently purged. As it is encrypted, the content of this pending message is strictly unreadable by us.
Multimedia Files: When a user sends large files, we temporarily store these encrypted packets for a maximum of 30 days to optimize their distribution (for example, for transfers within a group). We cannot view these files or extract their metadata (EXIF).
Groups: You can create, name, and add descriptions or photos to your groups. All this information is also end-to-end encrypted. We do not collect any information regarding the member list, the group size, or its creation or update date.

5. Information We DO NOT Collect

To remove any ambiguity, here is the information that our technical architecture is strictly designed to never collect, analyze, or store:

Usage Information: We do not know how often, at what time, or with whom you use our Services.
Performance and Troubleshooting Information: We do not collect any diagnostics, error logs (crash logs), or performance data.
RAM-Only Infrastructure and No Logs (Zero-Log): Our communication relays (AMP, TURN, xFTP) operate exclusively in random-access memory (RAM). No metadata or connection logs are persistently stored on our hard drives. In accordance with the data minimization principle (Art. 5 of the GDPR), encrypted data packets are destroyed immediately after successful transmission.
Device and Connection Information: We do not collect your IP address, device model, battery level, signal strength, or router identifier.
Location: We do not collect any geolocation data (GPS, Bluetooth, or Wi-Fi access points).
Cookies, Trackers, and Analytics Tools: Our public website (arpokrat.com), our application, and our services use absolutely no trackers, cookies, or tracking pixels. We refuse to use third-party analytics tools (such as Google Analytics). Your browsing on our site is completely invisible and unverifiable by third parties.

6. Sovereign Infrastructure, Anti-GAFAM, and the Tor Network

Unlike traditional messaging services, we do not use any SMS verification providers or any content analysis or automated moderation services.

Exclusive Network: Our application's encrypted data only transits through servers located in jurisdictions we have rigorously selected for their respect for privacy: Switzerland, Malaysia, Panama, South Africa, and Iceland.
Absolute Independence (Anti-GAFAM): Your encrypted data does not transit anywhere else. It will never pass through the infrastructure of web giants (Big Tech) or any third-party company subject to the jurisdiction of the United States.
Tor Network Accessibility (.onion): To ensure total anonymity from your very first visit, our website is natively accessible via the Tor network as a hidden service (.onion).
Hardware Security Limitation: The installation tool for our operating system (Web Installer) is intentionally not made available on the Tor network. Because the Tor network struggles with the download of very large files (heavy system images), its use posed a major risk of packet corruption during transfer. Since corrupted data could permanently brick your phone during the flashing process, we have disabled this option as a strict hardware security measure.
Payments: Cryptocurrency payments are processed through our own self-hosted infrastructure (BTCPay Server), without any financial intermediary capable of linking a transaction to a digital identity.

7. Legal Basis and Compliance with the new Swiss Law (nFADP / GDPR)

Although we do not collect any personal data related to your communications, European (GDPR) and Swiss legislation require us to specify the legal basis for processing the only data we possess: your name, email address, and country of residence, provided when purchasing ArpokratOS.

New Federal Act on Data Protection (nFADP 2023): Our policy is strictly aligned with the new Federal Act on Data Protection (nFADP), which came into force in Switzerland on September 1, 2023. In accordance with its Article 6 (Principle of Proportionality), which states that the collection and processing of data must be limited to what is strictly necessary and justified, our technical architecture applies absolute data minimization.
Performance of a Contract and Legal Obligation: We process the aforementioned administrative information solely because it is necessary for the performance of the sales contract and to comply with mandatory tax and accounting obligations in Switzerland.
No Analysis of Communications: The European Directive 2002/58/EC (ePrivacy) concerning the retention of metadata (call duration, phone numbers) does not apply to our infrastructure, as we do not possess or generate any of this metadata.
Your Rights: In accordance with the nFADP and the GDPR, regarding your billing data (if you have made a purchase), you have the right to request access to or rectification of this data. However, the erasure of this accounting data can only occur after the legal retention period dictated by the Swiss Code of Obligations (10 years) has expired.
Autonomous Exercise of the Right to Erasure: The user has sovereign control over their data via the "Destruction Code." Activating this tool constitutes the immediate technical exercise of the right to erasure (Art. 17 GDPR), rendering the data mathematically irretrievable. Furthermore, the automatic reboot every 4 hours ensures the periodic erasure of encryption keys from RAM.

8. Contacting Us

Since we do not maintain user accounts or any profiling system linking you to our application, any privacy-related inquiries must be submitted in writing to our company's headquarters or through the official encrypted communication channels indicated on our website.

Arpokrat GmbH
c/o Wadsack AG, Bahnhofstrasse 7, CH-6302, Zug, Switzerland.

9. Governing Language (Primacy)

This Privacy Policy may be translated into several languages for the convenience of our users. In the event of any dispute, discrepancy, or conflict of interpretation between the French version and any other translated version of this Policy, the French version shall prevail and be considered the governing version.

Terms of Use | Arpokrat

Fri, 08 May 2026 00:00:00 +0000

Last Updated: May 8, 2026

Arpokrat GmbH

Address: c/o Wadsack AG, Bahnhofstrasse 7, CH-6302, Zug, Switzerland.

If you are an Arpokrat user located in the United States or Canada, Arpokrat GmbH provides the Services to you in accordance with these Terms of Service.

To provide our Services (as defined below) to you through our applications, services, features, software (messaging app; digital asset wallet; OS), or website, we need you to accept these Terms of Service (“Terms”).

1. About Our Services

Since the inception of the Arpokrat application, we have built our services on strong principles of security and privacy to ensure true digital sovereignty in the current historical context.

Communication and Relays: We provide you with ways to communicate with others (messaging, voice and video calls, file sending) and to exchange cryptocurrencies via the integrated wallet. For the routing of your communications, we use relay servers (such as AMP, TURN, xFTP). These servers are blind: they transmit end-to-end encrypted data packets in volatile memory only (RAM-Only), without ever being able to read their content or identify the sender or final recipient beyond the immediate connecting IP address, which is not logged.
Sovereign, Anti-GAFAM, and Zero-Log Infrastructure: To protect you from mass surveillance, the data routing for our messaging application transits exclusively through servers located in jurisdictions we have rigorously selected for their respect for privacy: Switzerland, Malaysia, Panama, South Africa, and Iceland. Your data will not transit anywhere else. Furthermore, we guarantee total technological independence: our relays never use the infrastructure of GAFAM, Big Tech giants, or any other company under U.S. jurisdiction. This entire infrastructure operates under a strict “Zero-Log” policy (no logging) and immediate destruction of encrypted packets after transmission.
Security and Sovereignty: We ensure the security of our Services and combat abusive activities. However, to guarantee total sovereignty: no account creation is required, and no phone number or email is requested. You are identified only by a cryptographic key. We cannot identify you, identify your contacts, suspend your access, or read your messages. We encourage you to use our services responsibly and legally.

NO ACCESS TO EMERGENCY SERVICES: Our services differ significantly from your mobile, landline, and SMS services. They do not provide access to emergency services or their providers (police, fire departments, hospitals, etc.). It is your responsibility to ensure you can contact emergency services through other means.

IF YOU RESIDE IN THE UNITED STATES OR CANADA: OUR TERMS OF SERVICE CONTAIN A MANDATORY ARBITRATION CLAUSE. YOU AGREE TO RESOLVE ALL DISPUTES THROUGH BINDING INDIVIDUAL ARBITRATION AND WAIVE CLASS ACTIONS (SEE THE DEDICATED SECTION BELOW).

2. Anonymity and Access to Services

Guaranteed Anonymity: Arpokrat completely eliminates the concept of a user identifier. You exist only as a set of temporary cryptographic keys. The confidentiality of your communications is guaranteed, and it is impossible to access your geographic location.
Age Requirement: You must be at least 13 years old to use our Services, or the age required in your country. If you are under 18, a parent or guardian must read these Terms with you.
Updates and Fees: You agree to download and install updates (OTA, usually once a month), either automatically or manually. You are responsible for the costs related to your internet plan and your carrier's data fees.

3. Privacy Policy and User Data

Arpokrat places a high value on your digital sovereignty. No personal data is required to use our products.

Your personal data (name, email address, and country of residence) will only be requested when purchasing ArpokratOS, exclusively to comply with Swiss tax and accounting obligations.

This data is not used for marketing purposes.
It is not associated with the messaging application and is not shared with third parties (except for Swiss tax authorities).
It is stored separately from our operating systems and is not linked to your cryptographic keys or your activity.
In accordance with the law, it is retained for 10 years and then securely deleted.

Transparency: Arpokrat periodically publishes a "Warrant Canary" on its official website, attesting that, as of a specific date, no secret surveillance order or data seizure has been received. The failure to update this signal serves as a technical warning to the user regarding the integrity of the infrastructure's jurisdiction.

4. Acceptable Use of Our Services

You must use our Services only for lawful, authorized, and acceptable purposes. Although we have no way to identify you or moderate your encrypted communications, failure to comply with the law or any misuse of our Services is your sole and entire responsibility.

Technical Architecture and Legal Compliance: Due to our Zero-Knowledge architecture, Arpokrat is technically unable to provide "backdoors" or facilitate the interception of communications. In accordance with the limitations set forth by laws such as CALEA (USA), we are not responsible for decrypting data for which we do not possess the cryptographic keys.

5. Liability and Risks

Your use of our Services is entirely at your own risk:

Messaging App: Operating without a centralized account, your communications are end-to-end encrypted. The loss of your private cryptographic keys will result in the irreversible loss of your contacts and history. Arpokrat has no technical means to recover this data.
Digital Asset Wallet: The integrated wallet is non-custodial. You are the sole holder of your private keys (Seed Phrase). Arpokrat does not have access to your funds and cannot recover them in case of loss. The purchase, sale (FIAT), and exchange (SWAP) of cryptocurrencies are provided by third-party companies and are subject to their own terms of service.
Arpokrat Operating System (OS): Installing ArpokratOS replaces your device's original operating system. This technical process modifies the hardware and may void the manufacturer's warranty. Arpokrat disclaims all liability for any hardware malfunction or data loss resulting from the installation.
OS Technical Specifications: You acknowledge that ArpokratOS is designed for defensive privacy. This includes the hardware and software disabling at the Kernel level of the Bluetooth, NFC, GNSS, and front-facing camera modules. The user's activation of the "Destruction Code" or "Panic Button" triggers an immediate and irreversible cryptographic wipe of all data. Arpokrat cannot, under any circumstances, be held liable for the permanent loss of data resulting from the user's use of these security features.

6. Disclaimers and Limitations of Liability

Disclaimers: We provide our services "as is," without any express or implied warranties (merchantability, fitness for a particular purpose, non-infringement, protection from viruses). We do not guarantee that our services will be free of errors or interruptions. We do not exercise any control over how our users use our services.

YOU RELEASE US, AS WELL AS OUR SUBSIDIARIES, EMPLOYEES, AND PARTNERS (THE "ARPOKRAT PARTIES"), FROM ANY CLAIM, DISPUTE, OR DAMAGES, KNOWN AND UNKNOWN, ARISING OUT OF YOUR USE. IF YOU ARE A CALIFORNIA RESIDENT, YOU WAIVE CALIFORNIA CIVIL CODE SECTION 1542.

Limitation of Liability: THE ARPOKRAT PARTIES ARE NOT LIABLE FOR ANY LOST PROFITS OR CONSEQUENTIAL, PUNITIVE, OR INCIDENTAL DAMAGES. OUR TOTAL AGGREGATE LIABILITY WILL NOT EXCEED ONE HUNDRED U.S. DOLLARS ($100) OR THE AMOUNT YOU HAVE PAID US IN THE PAST TWELVE MONTHS.

Indemnity: You agree to indemnify the Arpokrat Parties against any third-party claims arising from your use of our Services, your violation of these Terms, or any misrepresentation made by you.

7. Dispute Resolution and Jurisdiction

Except for users subject to the arbitration clause (United States and Canada), any dispute brought against Arpokrat will be exclusively subject to the jurisdiction of the Court of the Canton of Zug, Switzerland, and governed by Swiss law, without regard to conflict of laws principles.

Statute of Limitations: Any objection or claim must be brought as an action (or arbitration) within one year of its occurrence, or it will be permanently barred.

8. Availability and Miscellaneous Provisions

Availability: Our Services may be interrupted for maintenance, updates, or due to network failures or force majeure events.
Territorial Restrictions: Our services must not be used in countries where doing so would violate local laws.
Changes to the Terms: We may update these Terms. Unless otherwise required by law, you will be notified at least 30 days in advance of any changes. Continuing to use our Services constitutes acceptance.
Severability: If a provision is deemed illegal or unenforceable, it will be modified or severed without affecting the validity of the remaining provisions.
Export Control: The Arpokrat Software contains strong encryption technologies subject to international regulations. You represent and warrant that you are not a government end-user (as defined by 15 CFR § 772.1) and that you do not reside in a country subject to an embargo or export restrictions by the United States, Canada, or Switzerland. You agree not to export or re-export the Software without a prior license from the competent authorities.

9. Special Arbitration Clause (United States and Canada Only)

PLEASE READ THIS SECTION CAREFULLY. IF YOU RESIDE IN THE UNITED STATES OR CANADA, YOU AGREE TO SETTLE ALL DISPUTES THROUGH BINDING INDIVIDUAL ARBITRATION (EXCEPT FOR INTELLECTUAL PROPERTY AND SMALL CLAIMS DISPUTES). YOU WAIVE YOUR RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION.

Federal Arbitration Act: The U.S. Federal Arbitration Act governs the interpretation of this section.
Notice of Dispute: Before initiating a proceeding, you must send us a notice containing: a) first and last name, b) mailing address, c) public cryptographic identifier, d) temporary contact email, e) description of the dispute, f) relief sought.
Mailing Address: Arpokrat GmbH, c/o Wadsack AG, Bahnhofstrasse 7, CH-6302, Zug, Switzerland.
Procedure: If the dispute is not resolved within 60 days, the arbitration will be administered by the American Arbitration Association (“AAA”) under its Commercial Arbitration Rules.
Opt-Out Procedure: You may opt out of this arbitration agreement by sending us a written notification to the address above within 30 days of accepting these Terms.

10. Governing Language (Primacy)

These Terms of Service may be translated into several languages for the convenience of our users. In the event of any dispute, discrepancy, or conflict of interpretation between the French version and any other translated version of these Terms, the French version shall prevail and be controlling.

Buy ArpokratOS License | Secure OS Procurement

Tue, 28 Apr 2026 00:00:00 +0000

Obtain Access

1 License = 1 Device (Unlimited lifetime updates).

Compatible Devices:

Loading compatible devices...

1. Select Payment Method:

Monero (XMR)

Bitcoin (BTC)

Corporate buyer without cryptocurrency? Contact our sales team.

2. Number of Licenses:

3. Billing Details (Mandatory):

Please select your country.

Please enter a valid name.

Please enter a valid email address.

I confirm that I have read and agree to the Terms of Service and understand that digital software licenses are non-refundable.

You must accept the terms to proceed.

Subtotal (1x) $1.00

VAT (0.0% export) $0.00

Total Amount $349.00 USD

Awaiting Payment

30:00

Please send exactly to the address below:

Copied!

Waiting for network confirmation...

Payment Confirmed!

Here are your unique installation links:

WARNING: Save these links immediately. They will bind to the first device connected.

View Receipt

The Arpokrat Protocol | Zero-Knowledge Messaging Architecture

Mon, 05 Jan 2026 00:00:00 +0000

The Problem with IDs.

In standard messengers (Signal, Telegram, WhatsApp), you have a static User ID (usually your phone number).

This ID is your digital fingerprint. Even if the content of your message is encrypted, the server knows who is talking to whom because it maps Sender ID to Recipient ID. It builds a "Social Graph" of your life.

Arpokrat Messenger removes the concept of User IDs entirely. You do not have an account. You do not have a permanent address. You exist only as a set of temporary cryptographic keys.

The Unidirectional Queue System

Instead of sending a message to "The Cat", Schrödinger drops a message into a specific, anonymous queue that The Cat watches.

Schrödinger

Has no global ID.

Queue 1 (On Relay A)

Schrödinger drops the box here.

Queue 2 (On Relay B)

The Cat sends a reply back.

The Cat

Has no global ID.

Key Takeaway: No server possesses enough information to link the sender to the recipient. The path is fragmented.

Inside a Blind Relay.

We utilize what are technically known as Blind Relays (or "Dumb Relays").

In traditional architecture, the server is "Smart": it knows who you are, who your friends are, and routes messages based on this database.

In Arpokrat, the relay is intentionally "Stupid". It acts as a digital dead-drop.

Zero Knowledge: The relay sees an encrypted packet arriving and puts it in a box (Queue). It does not know who put it there, nor who will pick it up.
No Correlation: Since Schrödinger uses Relay A for sending and Relay B for receiving, no single server can correlate the traffic to prove they are talking.
Ephemeral Storage: Once the message is picked up, it is instantly deleted from the relay's RAM.

Blind Relay

NO SENDER ID NO RECIPIENT ID

ENCRYPTED PAYLOAD BLOB

"I simply hold the box. I don't know who owns it."

Why This Matters.

No Social Graph

Since user accounts don't exist, Arpokrat servers simply cannot map who your friends are. The graph data doesn't exist.

No Spam

You have no static address (like a phone number) for spammers to target. To contact you, they need a one-time invite link.

Profile Rotation

You can use a different display name and different relay servers for each contact. Your work colleagues cannot link you to your private life.

Start Communicating Without Trace.

Download the app. Generate your keys. Disappear.

Download Messenger

Arpokrat Messenger | Sovereign Decentralized Messenger & Non-Custodial Wallet

Sun, 04 Jan 2026 00:00:00 +0000

The Future of Sovereign Communication.

Arpokrat Messenger is not just a chat app; it is a sovereign ecosystem. We have fused the metadata-free architecture based on the SimpleX protocol with a native Tor integration and a Non-Custodial Wallet.

This creates a double layer of defense: our decentralized architecture eliminates permanent user IDs so you cannot be mapped, while native Tor integration anonymizes your connection traffic through the onion network. Coupled with a non-custodial crypto wallet, Arpokrat allows you to communicate and transact with total confidentiality. Your keys, your data, and your assets never leave your device.

Available on:

Coming soon:

Your Data is Yours. We Don't Want It.

No phone number. No email.
No real name required. Just download the app and generate your identity locally in seconds. You exist only on your own device, never on our servers.

Native Tor Routing

Anonymity is usually complex, but we made it effortless. With a single tap, you can activate the native Tor integration, forcing all your traffic through the encrypted network without any technical configuration.

Tor (The Onion Router) works by wrapping your data packets in multiple layers of encryption. Your connection is bounced through a decentralized circuit of three random relays globally. This ensures that no single entity—from your ISP to the destination server—can link your physical identity (IP address) to your activity.

Non-Custodial Wallet

True sovereignty includes financial independence. Our integrated wallet is strictly non-custodial: you own the private keys, you own the assets. We never have access to your funds.

Manage your portfolio securely within the same encrypted enclave as your communications. Whether you need to send Bitcoin, swap Ethereum tokens, or transact privately with Monero, you can do it instantly without relying on centralized exchanges or banks.

The Architecture of Freedom

Most "secure" messengers map your Phone Number to a User ID. Arpokrat Messenger removes IDs entirely. But we didn't stop there.

Open Source & Auditable: Trust is earned, not given. The code is fully open-source. Anyone can inspect it to verify there are no backdoors.
Post-Quantum Cryptography (PQC): Native protection against "Harvest Now, Decrypt Later" attacks. Your messages remain mathematically unbreakable against quantum computers.
Zero Identity Metadata (No IDs): Unlike Signal or Telegram, we have no concept of user profiles on central servers. We don't map users to database entries.
Decentralized Blind Relays: Arpokrat utilizes asynchronous, unidirectional message queues. Relays blindly pass encrypted packets without knowing the sender or destination.

Discover the Protocol

Quantum
Immune

Secured against both classic and quantum attacks.

Strategic Decentralized Relay Infrastructure

Our default relays (SMP) act as blind "drop-boxes". They cannot see the sender, the receiver, or the content. We have intentionally distributed these nodes in jurisdictions chosen for their strong digital sovereignty frameworks.

🇨🇭

Switzerland

Renowned for its Federal Act on Data Protection (FADP). Outside EU/EEA, offering independent legal protection.

🇮🇸

Iceland

Home to the International Modern Media Institute (IMMI). Legislation specifically engineered for privacy.

🇵🇦

Panama

No mandatory data retention laws. Aligns perfectly with our data minimization policy.

🇲🇾

Malaysia

Sophisticated digital economy framework. Distinct legal system protecting against extraterritorial requests.

🇿🇦

South Africa

Protected by POPIA, enforcing strict conditions on data processing and privacy rights.

No Compromise on Features

High security doesn't mean low utility. Arpokrat Messenger includes all the modern features you expect.

Ephemeral Messages: Auto-destruct timer.
Audio & Video Calls: Fully encrypted.
Global Access: 30+ Languages supported.
App Lock: Secure app with password/biometrics.

File Transfer: Send large files privately.
Voice Messages: Send audio notes.
Markdown Support: Format your text.
Live Typing: See messages as they are typed (optional).

Secret Groups: No central admins.
Incognito Mode: Random profiles per contact.
Stickers & GIFs: Express yourself.
Self-Hosted Relays: Be your own server.

Don't Trust. Verify.

Standard encryption is not enough anymore. Compare the architecture.

Feature	WhatsApp / Telegram	Signal	Arpokrat
Architecture	Centralized Server	Centralized Server	Decentralized (Relays)
Network Anonymity	None (IP Exposed)	Proxy (Optional)	Native Tor Routing
Post-Quantum (PQC)	No (Vulnerable)	Yes (PQXDH)	Yes (Native)
Native Crypto Wallet	Custodial / KYC	Limited (MobileCoin)	Non-Custodial / Multi-Asset
Metadata & User ID	Extensive (Social Graph)	Minimal (Static User ID)	No User ID
Identity Requirement	Phone Number	Phone Number	None

Swipe to compare

Reclaim Your Sovereignty.

Download Arpokrat Messenger today. Communicate freely, transact instantly, and disappear completely.

Android Version iOS Version

Explore ArpokratOS >

Open Source (GPLv3) • Auditable • Community Driven

ArpokratOS | Hardened De-Googled Android Operating System

Sun, 04 Jan 2026 00:00:00 +0000

Your Vault, In Your Pocket.

We built ArpokratOS upon the battle-hardened foundation of GrapheneOS, widely recognized as the gold standard for mobile security.

We believe true security is not just about locking the door; it's about building a room with no doors or windows to the outside world. Your data is created, processed, and stored in a completely isolated environment.

We systematically neutralized Bluetooth, NFC, and GNSS (GPS) at the Kernel level. What remains is a fortress: a device that obeys only you.

Global Ready: Available in 80+ languages.

Native Tor Integration. True Anonymity.

Achieving network anonymity usually requires complex configurations, root access, or unreliable third-party apps. ArpokratOS changes that. We have integrated the Tor network directly into the system core. No setup required—just a single toggle to force all system traffic through the encrypted network.

Tor (The Onion Router) works by wrapping your data packets in multiple layers of encryption. Instead of connecting directly to a website, your connection is bounced through a decentralized circuit of three random volunteer relays globally. The first node knows who you are but not where you are going; the last node knows where you are going but not who you are. This ensures that no single entity can link your IP address to your browsing activity.

Your Digital Footprint, Erased.

We have fundamentally redesigned the hardware and software relationship. Our security model begins at the kernel level—the deepest layer of the operating system.

1. Attack Surface Reduction

We've eliminated the most common digital and physical vulnerabilities at their source. This isn't a "setting" you can change; it's a permanent security feature.

No GNSS / GPS: The hardware driver is removed. Your device acts as if the GPS chip doesn't exist, preventing any app or the OS from calculating your coordinates via satellite.
Bluetooth Disabled: Physical immunity against airborne attacks. Prevents 'Zero-click' exploits, BlueBorne attacks, and invisible tracking by retail beacons.
NFC Disabled: Protects against malicious tags triggers, and blocks proximity fuzzing attacks.
USB Data Disabled: Port restricted to charging only. Neutralizes "Juice Jacking," BadUSB exploits, and wired data extraction.
Front Camera Disabled: Prevents visual eavesdropping by spyware and eliminates the risk of biometric facial harvesting.

2. Immediate Data Destruction

In a high-stakes situation, you need instant reliability. ArpokratOS provides two layers of data destruction, ensuring data is cryptographically irrecoverable.

Nuke Pin: Entering a secondary PIN instantly triggers a full cryptographic wipe.
Panic Button: A dedicated mechanism that initiates the same immediate factory reset. No delay, just instant destruction.
Anti Brute-Force: 3 strikes and it's gone. Entering the wrong password 3 times triggers an immediate cryptographic wipe, rendering brute-force attacks impossible.

3. Anti-Analysis Integrity

Our commitment to security extends to protecting you from physical analysis, even if the device is stolen.

Auto Memory Purge: Reboots every 4 hours to flush RAM and destroy encryption keys held in volatile memory.
100% De-Googled: No Google Play Services, no tracking, no telemetry.
Zero Telemetry: Designed for silence. The OS operates in total isolation from us. It never pings our servers, and sends absolutely no diagnostics or usage data.

4. Cryptographic Integrity

How do you know your device hasn't been tampered with via physical access or a "Evil Maid Attack"?

File-Based Encryption (FBE): Your data is encrypted using profile-based keys. Without your passphrase, the storage is indistinguishable from random noise.
Verified Boot: A strict hardware chain of trust. If a single byte of the OS has been modified or tampered with, the device simply refuses to boot.
Remote Attestation: Cryptographically verify your OS integrity using the Titan M2 secure element. This guarantees protection against "Evil Maid" attacks.

Native Integration: Messenger & Non-Custodial Wallet Included

ArpokratOS includes Arpokrat Messenger pre-installed as a system-level application.

Your device isn't just a vault; it's a command center. The Messenger provides post-quantum secure messaging and a non-custodial crypto wallet right out of the box. No downloads, no account creation, no configuration needed.

Explore Messenger Features >

A New Standard of Security

Compare the architecture of standard devices against ArpokratOS.

Feature	Standard "Secure" Phone	ArpokratOS
Google Services	Embedded / Opt-out	Completely Removed
Location Tracking	On (GNSS/GPS)	Disabled at Kernel Level
Bluetooth / NFC	On by default (Vulnerable)	Disabled at Kernel Level
Remote Servers	Constant cloud connection	Zero Server Communication
Data Destruction	Standard Factory Reset	Instant Nuke Pin & Panic Button
Memory Security	RAM vulnerable until reboot	Automatic 4-Hour Memory Purge
OS Integrity	Standard Boot	Verified Boot & Attestation

Swipe to compare

The Hardware Paradox.

Why we chose Google Pixel to fight Google.

It seems contradictory: building a de-Googled fortress on hardware made by Google. We understand the skepticism. However, security relies on facts, not brand loyalty.

The Reality: Google Pixel phones are currently the only devices on the market that allow full support for Verified Boot with a custom operating system.

Other manufacturers permanently degrade security when you unlock the device. This hardware allows us to replace the OS and re-lock the bootloader with our own cryptographic keys. We use the armor, but we replaced the soldier inside.

The Titan M2™ Chip

A dedicated security vault physically separate from the main processor. It protects your encryption keys and resists advanced physical attacks (voltage glitching) better than any other consumer chip.

Custom Verified Boot

Unlike other custom ROMs that require an open bootloader (a security risk), ArpokratOS re-locks the bootloader. This guarantees that your OS hasn't been tampered with before it even starts.

Hardware Isolation (IOMMU)

Critical components like the Modem and Wi-Fi are isolated in hardware sandboxes. Even if the radio chips are compromised remotely, they cannot access your main memory or your files.

Ready to Become Invisible?

ArpokratOS is built for those who cannot afford to compromise. It is the solution for journalists, executives, legal teams, and high-risk individuals who require absolute digital sovereignty.

Contact Sales Learn about Messenger >

Contact Arpokrat | Secure Support Channels

Sun, 04 Jan 2026 00:00:00 +0000

How to Reach Us

For partnerships, press inquiries, or technical support, use the secure channels below.

Secure Email

PGP Key available below.

Loading secure email...

Swiss HQ

Arpokrat AG
Baarerstrasse 82
6300 Zug, Switzerland

Social / Updates

Public announcements only.

@Arpokrat

Initialize Handshake

Connection Secured via TLS

Alias / Name

Secure Email

Please enter a valid email address.

Subject

Message Payload

Message cannot be empty.

Swiss Hosted & Encrypted.
Incoming emails remain in Switzerland 🇨🇭 and are secured by Proton Mail infrastructure.
For maximum anonymity, use our PGP Key below.

PGP Public Key

Fingerprint: 2EA1 43A3 7188 E5EB 909D 1672 B78F E270 BFDC D9BC

arpokrat.asc

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBGlB3bkBEADif4mujx3aDPRoZ5F3RGRTaO4cs6Zmn8XWh7uHrfwxuwlQN858 XO7V1QnuQo8frIgGirSUbxcY0wl+qILDqQfgfrtIi4V8m6eEVqbTGDiad7Jz8A2a N1Z0DPOcZP3KHN9hIxcVzhwgLJnd5L98OXSnd/BXaPHUyAFFJvyMNDoiU86rmgf3 C6bMt7MELDDacUMTlujjQHtQuJcVI+ThrkFatAaeKjAYxAN385JgtClRxKigNY5s 2JP5CSdl1oO97Ua1I1v97x2KUASR5k8aCn3tiGkpXpXfZKBeP26bbQnZ/el5RFNB v1gqAMKpkaudgNYU+jtwasyr4v9rdOlG2O6/TDE15pAMTcQkpkPI1jGsAN8xf7yS OGPEHzudCv6dk6tbc6NXRBRww0+SF+ptLtUpjrqeHobD7WH2zz51jVTXD80/g6Ii I1CEvfNmPeM20sQvcBWckLZvEZDtn72ZrM0sJiNw+3kAl7Zs8MO0IOgFE6tBLfca nIg52DhDhsj/0/0zYduXbEu7n7MfgvXmigw7dDwH5nsQtcMGaF/vNxA7+u/2cMjO +2M4aSNnlJYZpcKdU+LjclubkUD8MpqKeTLgLsM9Pa4lmu5Y9Lo4API9etZDXAcG 0Om8cnWqvLHqYYDSWuB8qTqM+TaPzsoyTp4egsOJa7HGFVF2iGvSCzDa6wARAQAB tDZBcnBva3JhdCBTZWN1cml0eSAoV2FycmFudCBDYW5hcnkpIDxpbmZvQGFycG9r cmF0LmNvbT6JAlQEEwEKAD4WIQQuoUOjcYjl65CdFnK3j+Jwv9zZvAUCaUHduQIb AwUJACeNAAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRC3j+Jwv9zZvFekD/0X KNKyoA/k9XrRHovhp7F80YP5aM7e21iWq2qj0pPnAuBZvMeC1BAZHLpA2p441OKK /fqoe2RZA0xmoRqfzYoZZgOQavEP2twdGOzPPf/MZfObNCgjP9ncpkKH9Ej8XXJK kjpzUTaZSW3hCGlqlSNnP1yF/2I9T8OGH6qLi92YU11CoDPYL+hkiJdnMGMvOiVF lrLM6AoenpdjVwio+v4OBK5a/suwWpFj2977PndKzYjKJi8l1PO+I844ZMPVdMhq vYazYgIbrZ3Uc4z6uIFecdBEaxcAdgBJzNXR3WDSRQguNf7JPdNXMpHAK37cXg6q PSreweSBUcW2KXh0c0cF+93n2DmH+aF/V4PiGes2f21QR1ZBgYcJCyVpQ7w96lci +m2lC+yxkKBfcbiTIMz7KKWKe1OMrwBf9ce8MuC9PN2juqxjRwQHzFlQLLTSj3yc BCO4LOSRGp3FBGA0+LHSWlKeE0+P8YXwUBRSD+DZ4XJ6F+zg1OlslskPPrKbdlq9 iiJKXBRLv51nu58FWgIupgETF3vHZoBNmSMlS3Eo/HgTTlxhQVbeSb95/j4Ac1fu I9wfxspRQIy7Hovj+abfzCdJGCPOpC2M4wz2YLEFusNiv9RucVS+qe9kIdmo4bEo 75PlnEsZdSYBiJOLolkpcNyNCZ9PK9peqyE93dwBwLkCDQRpQd25ARAAviVL4bpe p+4/GdJCiIorA6J428oL0PIaJtfQqOLHYm1c2vkblZfKMZdvhe41WvrC2tr61IQC qmCzRWwaKC0Wjldz/+z0KxL4TmMefdjwPbHgHEYlnrwuQ+LorpK+lMKbLfoF5qbG pZTJ+Z+pc8N10UmpPOkLepexHKVvHq5CGhZ37rfTlqgAtwp7tKkByV7l9fUERuNA bzWzFUyxyft21kkAy+KbrXLW46v8f2hkfuOJfY7HVxS7BtirPqEL4oXEfaE0wFtV gkMsn/X5+uWXlvUEbeQdUjTGvaZs0DPBthOWNAqPEbszdIL7cLp0wC/GMFXW2LYD 06Mm0nRY0sOF0S+WGARQgpc1CKpvHC3OwomRrcR+EL9iqZA8do9zzOc3wXH6fShH rBjJxErIT/bs/1rVGLlw/vqvBDWiJCGbcZFtkZx03zlE4RiMiTy9jaNuaJTV+hsq tZuTACjS8rEx2SQRA9A5dfaFjX9cnuOgCfKMUMqEdfB5+2glkTZUVkM2vud5rlJ4 8eeba9/xFTinAI5HAbGIC+42JNKj2eK/Kop9Kcf+wlXx6d+nfxYCWissqUcO6NV/ Hq01jIRFlWfzJfpZxb5D8CLa16lqNKMS5/jWlteV75MeS/PN4qDDy/sUm48l7dUX Ba1TxM9fNupMfvcdiIAy3y12nkseLuSyhjkAEQEAAYkCPAQYAQoAJhYhBC6hQ6Nx iOXrkJ0WcreP4nC/3Nm8BQJpQd25AhsMBQkAJ40AAAoJELeP4nC/3Nm8XacP/Rzp IrIfUVAzlMt/Umum8xGqcK0RT2qMCpzIQ7Wy2P1J5SsGnb0doiCIKHzU1lUyXSRl ihKjN8g6H1URLfO2XzPVT5aSobbMjA7/FKfyk8grbftML0bOegcoeSWy30JlWYry rl2nJbzVTHPlvPWqggvXFf/Ne+UIP9sTA3yXhfEHC9YDt2iCDpWthP9u6+cfDm/y nPDlkw54qmxH3Vl9RSaUSk4sF8V8qWg9w17bm28t96yvXd84r8cLGRyya3c3DtSY QHRq/BfPNqz3V8DMX1cvqbkR8LUtGcG9uuTzS6IWLJb6EmnkK5pr8eSze5cuPP3/ 66caC1bqu+NaflZdhhkSNQEqjOSX/+f5hjGv54ium+Pa9VhyCRzNy0t0GNG+dbcv RhgwmLqxkzDKHNOmN6uO913fG+h9JrQzbMAWqC1ar381Mr2e9InmLKdi1UXKIHzS xxrSj2h2NMz/K9nGEQwoomvlQrESEHLgt8DYsi2uFS7Tk3bdRQReam/SL3qKE2cY Ji/7a+ZyiWnxugbFHsakgpeAKEqJajGlD637uQkJPrfBWJesrvvfBuUkF8hG6+MT 3iChC83DY5SJlSmQtJXZY/df6v04yv48X1BtjdujGSemhkfSXmzmzWqntwAi877o ni8gDBQHuBg8k2pFYjMhk3NLuaf44v0nDVlQP678 =0Gb9 —–END PGP PUBLIC KEY BLOCK—–

Download .asc File

FAQ | Common Questions about ArpokratOS & Arpokrat Messenger

Sun, 04 Jan 2026 00:00:00 +0000

General & Philosophy

Who is behind Arpokrat?

We are a private company based in Zug, Switzerland, operating with complete independence. We have no ties to and receive no funding from Big Tech. We believe that personal data should never be used for enrichment. You are the owner of your own data. This is why we build services requiring the absolute minimum amount of personal information.

Why did you choose Switzerland?

Geography is part of our security model. Switzerland offers three critical advantages:

Outside "14 Eyes": Switzerland is not part of the US/EU mass surveillance intelligence alliances.
Legal Protection: The Swiss Federal Data Protection Act (FADP) is one of the strictest in the world.
Neutrality: Political stability allows us to operate without government interference.

Why did you create these products?

Because the current internet is broken. Today, "free" services (like Gmail or Meta) come at the cost of your digital soul. Your location, conversations, and habits are auctioned to the highest bidder.

We believe privacy is a fundamental human right, not a setting to be toggled. We built Arpokrat so you can communicate without being traced, profiled, or sold.

Should I trust Arpokrat?

No. "Trust us" is a security hole. That is why we built a Zero-Trust Architecture. We don't ask for your trust; we prove our integrity through open-source code and mathematics. Our systems are designed so that even if we wanted to spy on you, we couldn't. We cannot read your messages or access your keys.

Do you use Cookies on your website?

No. Absolute Zero. You will not find a "Cookie Banner" on this site because we have nothing to declare. We do not track your behavior, we do not use analytics, and we do not serve ads. Our website is stateless and respects your browser's privacy settings by default.

Do you sell physical phones?

No. We provide the software (ArpokratOS), but you must provide the hardware (Google Pixel). This is a deliberate security choice called Supply Chain Security.

If we shipped you a phone, it could be intercepted and tampered with during shipping (interdiction). By buying a sealed Pixel locally and flashing it yourself via our WebFlasher, you guarantee that the hardware has not been compromised.

What is your Data Privacy Policy?

Our policy is summarized in one sentence: We cannot leak what we do not collect.

We keep zero logs. We know zero metadata. We require zero personal information. Our servers run on RAM-disk and are wiped instantly upon power loss. For the full legal details, please read our Privacy Policy.

Do you offer solutions for Enterprises?

Yes, coming soon. We are currently developing a dedicated B2B ecosystem for corporations, journalists, and legal firms requiring defense against industrial espionage. This will include Fleet Management and private hosted nodes. Contact us for early access.

Do I need to create an account?

No. There are no user accounts, no passwords to reset, and no emails to verify.

ArpokratOS & Installation

Which devices are supported?

Currently, we strictly support the Google Pixel 8. We are working on expanding support to the Pixel 8 Pro, 8a, and the Pixel 9 series in the near future.

Why only Google Pixel? Why not iPhone, Samsung, or Xiaomi?

Security requires specific hardware. The Google Pixel 8 is equipped with the Titan M2 security chip, which allows for Verified Boot with custom cryptographic keys. Other brands (Apple, Xiaomi, Samsung) operate as "walled gardens" and do not allow us to fully replace the operating system at the root level without compromising security integrity.

Do I need technical skills to install it?

No. You do not need to be a developer. We have simplified the process into a few detailed steps. If you can follow a recipe, you can secure your phone.

What does "flashing" mean?

"Flashing" is the process of completely wiping the stock Android operating system provided by Google and replacing it with ArpokratOS. It overwrites the internal memory of the phone to ensure no trace of the original software remains.

How do I flash my phone?

You will need a computer and a USB cable. Simply follow our step-by-step guide available here: How to Install.

Is my data encrypted?

Yes. The entire disk is encrypted using high-entropy keys derived from your password and the Titan M2 chip. Without your password, the data is mathematically indistinguishable from random noise.

What happens if I lose my phone?

Consider it a brick. Since we do not hold your keys, no one can decrypt it. Your data remains inaccessible forever.

What type of password should I choose?

We recommend a strong alphanumeric password (letters, numbers, symbols) of at least 8 characters. A simple 4-digit PIN is not sufficient against modern brute-force attacks.

What happens after 3 wrong password attempts?

The device initiates a Security Wipe. All data on the phone is instantly and irreversibly cryptographically wiped. This protects you if someone tries to force-guess your password.

What is the Nuke PIN?

The Nuke PIN is a duress code. If someone forces you to unlock your phone under threat, you enter this specific password. All data on the phone will be instantly and irreversibly wiped.

What is the Panic Button?

This is a physical trigger (a specific combination of button presses) that allows you to wipe the phone instantly from your pocket, without needing to look at the screen.

Why does it reboot automatically every 4 hours?

If the phone is not unlocked for 4 hours, it reboots. This flushes the RAM (volatile memory) where encryption keys are temporarily held while the phone is active. This puts the phone back into a "Before First Unlock" (BFU) state, which is the most secure state against extraction.

Can I track/locate the phone?

No. The GNSS (Global Navigation Satellite System, commonly known as GPS) driver is disabled at the Kernel level. The Kernel is the core program that manages the phone's hardware. By disabling it there, we ensure that the hardware simply cannot communicate your location to the software.

How do I update ArpokratOS?

You cannot update via the internet (OTA). To update, you must re-flash the phone. We disabled Over-The-Air updates because they represent a significant remote attack vector. Security requires effort.

Can I browse the internet?

Yes, using the pre-installed privacy browser and the search engine DuckDuckGo. We strongly advise against using Google or Bing, as this defeats the purpose of the phone.

Can I install apps?

Technically, yes, by downloading the APK file (Android Package Kit, the installer file for apps) directly. However, we strongly advise against installing third-party apps. Every app you install increases your attack surface and potential for data leakage.

Can I make calls and send SMS?

Yes, standard GSM calls and SMS work if you insert a SIM card. However, these are not encrypted and can be intercepted by telecom providers. We recommend using the native Arpokrat Messenger for all communication.

Can I receive emails?

Not yet. We are currently developing a secure, metadata-free email client. For now, ArpokratOS is focused on instant communication.

What if I change my phone?

The license is tied to the device to ensure security integrity. If you switch to a new phone, you will need to purchase a new license.

Arpokrat Messenger

Is Arpokrat Messenger available on iPhone and other Androids?

Yes. While ArpokratOS is exclusive to Pixel, the Arpokrat Messenger application is available on the iOS App Store, Google Play Store and F-Droid. It is compatible with all modern smartphones. We are also developing desktop versions for Windows, Mac, and Linux, coming soon.

What is Post-Quantum Encryption (PQC)?

Standard encryption used by apps like Signal or WhatsApp will likely be broken by future Quantum Computers (a threat known as "Harvest Now, Decrypt Later"). Arpokrat Messenger protects you against this future threat today by using next-generation algorithms (Kyber/Dilithium) that are mathematically resistant to quantum attacks.

Do I need a phone number or email?

No. Absolutely nothing. Your identity is a cryptographic key pair generated locally on your device. We do not know who you are, and we do not link your account to any real-world identity.

Is everything encrypted?

Yes. Every message, file transfer, voice call, video call, and transaction is End-to-End Encrypted (E2EE). Only you and the recipient can decrypt the content. Even we cannot see it.

What metadata do you store?

None. We use the SimpleX protocol, which changes the paradigm entirely. Unlike other apps, Arpokrat Messenger has no user identifiers (no phone numbers, no emails, not even random user IDs). The relays only see temporary, anonymous message queues. They cannot build a "social graph" of who is talking to whom.

How do I add a contact without a phone number?

Since there are no phone numbers, you connect via a Direct Exchange. You can scan your contact's QR Code in person, or generate a unique "Deep Link" inside the app and share it via another secure channel.

What happens if I am offline?

If you are offline, messages sent to you are temporarily stored on our decentralized blind relays. These relays hold encrypted "blobs" of data they cannot read. Once you come online, the message is delivered and instantly deleted from the relay.

Does it have the same features as WhatsApp or Telegram?

Yes. You do not have to sacrifice usability for security. Arpokrat Messenger supports voice messages, file sharing, stickers, replies, and group chats, just like the apps you are used to.

Can I use the Tor network?

Yes. You can route all traffic through the Tor network by simply enabling the option in the settings. This masks your IP address from the relays and your internet provider.

Can I lock the app?

Yes, you can secure the app with a separate PIN, adding a second layer of defense even if your phone is unlocked.

Can I backup my chats?

Yes, you can create a local encrypted backup of your conversations to transfer them to a new device. However, you are responsible for storing this backup securely.

Is the Wallet a separate app?

No. The Wallet and Swap features are built directly into the Arpokrat Messenger application. You do not need to download or manage a separate app. You can chat and send funds in the same secure environment.

Is the built-in wallet non-custodial?

Yes. "Not your keys, not your coins." You possess the private keys (Seed Phrase) to your wallet. Arpokrat has absolutely no access to your funds and cannot freeze your account.

Which cryptocurrencies are supported?

Currently, we support Monero (XMR) for privacy and USDT for stability. We plan to add more assets in future updates.

Can I send fiat currency (USD, EUR)?

No. We only support cryptocurrencies. Integrating fiat currency would require partnerships with traditional banks and enforcing KYC (identity verification), which strictly violates our zero-data policy.

Can I send money to contacts?

Yes, you can send crypto directly within the chat interface, as easily as sending a photo. Transfers are settled instantly on the blockchain.

Can I swap currencies?

Yes, the integrated Swap feature allows you to exchange XMR for USDT (and vice versa) instantly without leaving the application.

Do I need to provide personal info (KYC)?

No. There are no KYC (Know Your Customer) checks, no ID scans, and no transaction limits. You have total financial sovereignty.

What are the fees?

We charge a flat fee of 0.25% per swap and 0.25% per transfer to support the development of the ecosystem. These are among the lowest fees in the industry for non-custodial services.

Infrastructure & Blind Relays

What is a decentralized relay network?

Unlike centralized apps (WhatsApp/Signal/Telegram) where all data flows through one company's servers, Arpokrat uses a mesh of independent relays. These are secure "drop-off points" for messages. If one node goes down, the network routes around it. There is no central point of failure or control.

Why do we need relays?

Mobile devices cannot always maintain a direct connection to each other (due to firewalls, NAT, or being offline). Relays act as blind intermediaries. They hold encrypted data packets temporarily until the recipient comes online to retrieve them, ensuring 100% delivery reliability without central storage.

How do "Blind" relays work?

The relays are 'blind' because they operate on a Zero-Knowledge basis. They receive a cryptographically locked box and drop it into a temporary anonymous queue. They do not have the keys to open the box, and critically, they do not know the identity of the sender nor the recipient. They simply route encrypted data packets without understanding the social graph.

Where are your servers located?

Our nodes are strategically distributed in jurisdictions that prioritize data sovereignty: Switzerland, Iceland, Panama, South Africa, and Malaysia. Learn more about our locations on our Infrastructure Page.

Why did you choose these jurisdictions?

We selected these countries for their strong legal frameworks regarding privacy, their political neutrality, and their independence from the "14 Eyes" intelligence alliances. This legal diversity prevents any single government from pressuring the entire network. Full details available at Infrastructure.

Are the servers secure?

Yes. We use a high-grade setup:

Read-Only OS: The operating system is immutable. Even if a hacker gained access, they could not install malware or backdoors.
RAM-Only: The servers have no hard drives for storage. All data lives in the volatile memory (RAM). If the power is cut all data vanishes instantly.

Do you keep server logs or IP metadata?

No. We have disabled logging at the server daemon level. We do not record IP addresses, connection timestamps, or routing history. Since the architecture is RAM-only, there is physically nowhere to write these logs.

Can I launch my own private relay?

Yes. For enterprises or organizations requiring total sovereignty, we offer a bespoke service to deploy dedicated private relays. This allows you to keep all encrypted traffic within your own infrastructure. Please Contact Us for a quote.

Payment & License

What payment methods do you accept?

We primarily accept cryptocurrencies (Bitcoin, Ethereum, Monero, USDT, USDC, POL) for speed and maximum privacy.

However, we also accept secure credit card payments (Visa/Mastercard). Card transactions are processed by a fully regulated Swiss PSP (Payment Service Provider) to ensure your financial data remains under strict Swiss legal protection.

How long does delivery take?

Instantly. As soon as the transaction is confirmed, our system automatically generates your license key and grants you access to the WebFlasher. You can install the OS on your phone immediately after paying.

I don't have crypto. Where can I buy some?

If you are new to crypto, we recommend using Mt Pelerin. It is a regulated Swiss intermediary that allows you to buy crypto via bank transfer with No KYC (no identity verification) for amounts up to CHF 1,000 (approx. €1,000) per day, or by card with minimal KYC. It aligns with our values of Swiss reliability and privacy.

Still have questions?

Contact Support

How to Install ArpokratOS | Secure Flashing Guide & Setup

Sun, 04 Jan 2026 00:00:00 +0000

Our Installation Process

Follow these steps to install your OS.

Prerequisites:

A Google Pixel 8
A computer with Google Chrome (or Chromium)
A good internet connection
A high-quality USB cable

Purchase ArpokratOS

Once you have purchased your version of ArpokratOS, you will receive a unique link via email. Access this page in Google Chrome to begin the process.

Prepare Your Pixel 8

You must enable Developer Options and OEM Unlocking to allow the OS replacement:

Go to Settings > About phone and tap "Build number" 7 times.
Go back to Settings > System > Developer options.
Enable the "OEM unlocking" toggle.

Install ArpokratOS

Plug your Google Pixel 8 into your computer via USB. From the install page provided in your email, click the "Install ArpokratOS" button and follow the on-screen prompts.

WARNING: This process will completely and irreversibly erase all data on your device. Back up any important files first.

First Start

Once the installation is complete (WebFlasher will confirm "Success"), unplug your phone and boot it up. The first-time setup takes only a minute. Your device is now secure and ready to use!

Ready to secure your device?

Get your license key and start the installation instantly.

Purchase License

Infrastructure | Sovereign Hardware & Strategic Jurisdiction

Sun, 04 Jan 2026 00:00:00 +0000

The Swiss Core.

Our public web platform operates exclusively on independent Swiss infrastructure. No AWS, No Azure, No Google Cloud, No Cloudflare. Our legal entity benefits from the Crypto Valley framework in Zug, while our web servers are secured in Geneva.

HQ: Zug, Switzerland

Legal domicile. Known globally for its progressive regulatory framework for cryptography.

Web Servers: Geneva, Switzerland

Hosted by Infomaniak in Tier III+ ISO-certified data centers. Protected by the strict Swiss Federal Act on Data Protection (FADP).

Strategic & Decentralized Relay Locations

Our relay network transports your encrypted messages globally. These nodes are strategically positioned in sovereign jurisdictions selected for their strong neutrality and strict digital privacy frameworks.

Switzerland

Protection: Strict FADP law. Not part of EU/EEA, ensuring complete legislative independence.
Log Retention: No mandatory data retention for mere conduit (relay) services.
Infrastructure: Direct peering at CERN (CIXP). High-bandwidth capacity.
Coverage: Ultra-low latency hub for all Central and Western Europe.

Iceland

Protection: IMMI laws specifically engineered to protect whistleblowers.
Log Retention: Data Retention Directive declared invalid. Zero logging required.
Infrastructure: 100% renewable energy fiber grid with massive throughput.
Coverage: Strategic mid-Atlantic bridge connecting Europe and North America.

Panama

Protection: Law 81. Offshore jurisdiction providing robust legal isolation from US/EU frameworks.
Log Retention: No legal obligation to record traffic logs or user IPs.
Infrastructure: Connected to 7 major submarine cables (Hub of the Americas).
Coverage: Critical gateway serving North, Central, and South America.

Malaysia

Protection: PDPA 2010. Distinct legal system outside of "14 Eyes" alliances.
Log Retention: No retention requirements for transit data or OTT services.
Infrastructure: Cyberjaya MSC Status. Tier-IV data centers compliant with ISO 27001.
Coverage: High-speed access point for the entire Asia-Pacific (APAC) region.

South Africa

Protection: POPIA Act. Constitutional right to privacy enforced by high courts.
Log Retention: RICA applies to ISPs, not to private encrypted relay nodes.
Infrastructure: Home to NAPAfrica, the continent's largest Internet Exchange Point.
Coverage: Provides critical geo-redundancy in the Southern Hemisphere.

Hardware Manifesto.

Security is not just software. It's how the machine behaves when physically compromised.

Hybrid Architecture: While our static website runs on secure VPS in Geneva, our sensitive Relay Nodes are designed to run on dedicated Bare Metal.
Read-Only OS: The operating system on our Relays is mounted as "Read-Only". Even if compromised, an attacker cannot permanently modify the system files. A simple reboot restores purity.

Volatile RAM Storage: We enforce a strict no-log policy. Messages pending delivery are held temporarily in volatile memory (RAM), never touching the hard drive.
Power-Off Wipe: Because data lives in RAM, pulling the plug instantly wipes all traces of activity. Analysis of the disk yields zero user data.

Immutable
System

Transparency is our Weapon.

We operate with total transparency to guarantee your absolute privacy.

View Warrant Canary

Philosophy | Why We Build Defensive Tech

Sun, 04 Jan 2026 00:00:00 +0000

The Digital Age is Broken.

The internet was built to connect us, but it has been repurposed to monitor us. Today, "free" services come at the cost of your identity. Your conversations, your location, and your habits are auctioned to the highest bidder.

At Arpokrat, we reject this model. We believe that privacy is not a feature you verify in settings—it is the foundation of a free society. We don't ask for your trust; we build systems where trust is unnecessary.

Our Core Principles

Math > Trust

"Trust us" is a security hole. We use Zero-Knowledge Architecture. We encrypt your data on your device before it ever touches our relays. Even if forced, we cannot decrypt your data. We trust mathematics, not policy.

Defensive Jurisdiction

Technology needs legal protection. We are headquartered in Switzerland 🇨🇭. We operate outside of the "14 Eyes" surveillance network.

Aligned Incentives

We don't monetize your data; we monetize our utility. Our ecosystem is sustainable through **ArpokratOS sales**, optional **Premium features**, and transparent **exchange fees on crypto swaps**. We profit when you transact securely, never by selling your profile.

Transparency is Security

Proprietary cryptography is dangerous. You cannot verify what you cannot see. Our core encryption libraries are open source. Real security withstands the scrutiny of the global community.

Self-Contained Resources

Most privacy sites leak your IP via third-party CDNs (Google Fonts, FontAwesome, JQuery). Not us. Every asset is self-hosted on our own servers. When you visit Arpokrat, you talk only to Arpokrat.

Zero Cookie Policy

We do not track you. This website does not use cookies, pixels, or analytics tags. We respect your session privacy completely. You can audit our site: we leave zero traces on your browser.

Code is Virtual. Servers are Physical.

Philosophy must be backed by hardware. We don't just talk about privacy; we built a physical infrastructure to guarantee it.

Independent Infrastructure: We operate strictly outside the Big Tech oligopoly. No reliance on Google Cloud, AWS, Azure or Cloudflare.
Immutable Systems: Read-Only OS & Volatile storage. No logs are ever written to the disk.
Anti-Censorship: Global decentralized relay network.

Explore Our Infrastructure >

Decentralized
Network

We prove our Integrity Everyday.

Words are cheap. Proof is everything. Check our cryptographically signed Warrant Canary to verify we have not been compromised.

View Warrant Canary

Warrant Canary | Transparency Report & Cryptographic Proof

Sun, 04 Jan 2026 00:00:00 +0000

CURRENT STATUS: VALID & UNCOMPROMISED

Why This Page Exists.

In many jurisdictions, governments can force service providers to hand over data while simultaneously issuing a "Gag Order" that legally prevents them from disclosing the existence of the request.

We cannot legally tell you if we have been compromised. However, we can voluntarily update this page to tell you that we have NOT been compromised.

WARNING: If this page is ever removed, not updated by the deadline, or if the PGP signature fails to verify, you must assume that Arpokrat has been compromised.

As of May 19, 2026, we confirm:

No Warrants

We have NOT received any secret warrants or National Security Letters.

No Gag Orders

We have NOT been subject to any court order preventing us from speaking.

No Backdoors

We have NOT been forced to modify our software to insert backdoors.

No Seizures

No Arpokrat infrastructure or user data has been seized by any entity.

Signed Statement

Next Update Due: In 30 Days

canary-2026-05-19.txt.asc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ARPOKRAT WARRANT CANARY Date: 2026-05-19 We, the undersigned founders of Arpokrat, solely confirm that: We have NOT received any National Security Letter. We have NOT received any gag order. We have NOT received any warrant from any government agency. We have NOT installed any backdoors in our software. To prove this message was generated recently and not pre-written, here is the latest Bitcoin block hash: Block Height: 950099 Block Hash: 0000000000000000000025a3d2017567a14caa4e0af63ef525a0ec0401237489 This canary is valid for 30 days. —–BEGIN PGP SIGNATURE—–

iQIzBAEBCgAdFiEELa0ek94a3Y+iSMk5uVkdYiZKV84FAmoMe1wACgkQuVkdYiZK V85XTBAAsn6miLbX6Dokj6K6Ry1C/tUoQuwNMSj02ssPOAievj53MVThxcF3/NUH DDe6nVCfrhPE43ko8h7d6VQ2NqfRS/vytwpDiVaQdQ4BbKG5yPfpswSenkr+PA13 NCyugKTl8wAa03jqm6WTBR/yZIzWj685DCKOFcqCEiK2Q8qW6W8a1KY4IP/olan7 lcEG7uGM5tyX7Z38rPY8Dk1KJ9mhzX+v3lcF7nQLy9aUBpZh+7orRmpwQZ/S59ii f3ypkNEZdURI9Gf5Ex+S8epd0PmJoJV4J3oCSLxAWd/NyWm58eDylVI6Jcp147ME DgOzx+xhL51XTFQKfhZJy9OwB3Bsl+KR1CqVcjTTNIIVplTU9lHi6jZ9qnT0CgI3 CsWtZZxkRZnsG7jJiIyFTeV04W9/wYokrGfvmifw7oKXBgVmQ20oiKZ0Sl+4DOqE SJ0unCMlEZ2LbrEKndV4pQ/sKbNASXRUOF4BIHcHjnNbNjcT+qAPRwcv0612LyUh 6FvzzUoR/TnOcKr61xuJpW250IS2DApQNPDufPJQdfZZTlZIJGuYKvZHnX58q3Ar +v+Arl01j14H75wGC9xSTYfD3raXMZLYcQihna+3JeKbAHkzteNNmpUu935pRiqt a+zYlkaVEwl5mhet+hbmTGfR4/FoTEYrhTfqgyfGzVGwDjFcF58= =3PnX —–END PGP SIGNATURE—–

Verify this signature using our Public Key.

Download Canary Download Public Key

Who Is Arpokrat For? | Advanced Privacy for High-Risk Threat Models

Sun, 04 Jan 2026 00:00:00 +0000

Beyond Consumer Privacy.

Arpokrat is engineered for those whose digital footprint carries physical, financial, or geopolitical consequences.

Standard privacy tools are designed to shield you from advertisers. Arpokrat is designed to shield you from adversaries. Our ecosystem is built for individuals and organizations operating in high-threat environments. We understand that for you, a data leak is not merely an inconvenience—it is a critical failure that can compromise your mission, your assets, or your liberty.

If your safety depends on absolute confidentiality, Arpokrat is built for you.

Protecting Those Who Cannot Be Compromised.

Executives & Legal Counsel

The Threat: Your conversations are the market's most valuable asset. A leaked merger strategy or legal defense can destroy billions in value instantly.

ArpokratOS: Hardened Attack Surface. Front camera, Bluetooth, and NFC are disabled to prevent close-range hacking and visual spying.
Arpokrat Messenger: Negotiate in the shadows. Without permanent User IDs, your contact list and social graph remain invisible.

Journalists, Whistleblowers & Activists

The Threat: Protecting the story means protecting the source. In hostile regimes, a compromised phone doesn't just kill the story—it endangers lives.

ArpokratOS: The "Nuke Option". Trigger a cryptographic wipe instantly via a panic code if detained or seized.
Arpokrat Messenger: Route through Tor. Hide your location from state-level ISPs and keep your sources in the dark.

Diplomats & Officials

The Threat: In the age of Pegasus and Zero-Click exploits, your standard smartphone is a listening device for foreign intelligence agencies.

ArpokratOS: A digital fortress abroad. Zero transmission to Google or Apple servers eliminates "home-phoning" telemetry.
Arpokrat Messenger: A sovereign back-channel. Bypass compromised local networks and communicate outside the 14-Eyes dragnet.

High-Net-Worth Individuals

The Threat: Wealth attracts predators. Digital tracking facilitates physical kidnapping, blackmail, and targeted financial theft. Privacy is your physical safety.

ArpokratOS: Even if physically stolen, the hardened encryption makes your device a useless brick.
Arpokrat Messenger: Financial Sovereignty. Hold and move significant assets in a non-custodial wallet that guarantees exclusive control over your funds.

Security Over Convenience.

Arpokrat is a specialized, professional security tool. Our design philosophy prioritizes isolation above all else.

If you require full integration with Google services, access to the public App Store (Instagram, TikTok), or cloud backups, ArpokratOS is not the right choice for you. We deliberately removed these conveniences to close the attack vectors they create.

We are built for the 1% of users who cannot afford the 99% solution.

Legal Disclaimer: Arpokrat provides neutral technologies designed specifically for defensive privacy and security. Due to our zero-knowledge architecture, we possess no technical ability to access user data, decrypt communications, or moderate content. Arpokrat bears no responsibility for any unlawful or malicious use of its software. Users are solely responsible for ensuring their use complies with all applicable laws in their jurisdiction.

Do You Recognize Your Threat Model?

Standard solutions are built for standard risks. We are built for the exceptional. Contact our team to discuss your specific security needs.

Contact Sales Review Our Solutions >

Arpokrat | The Ecosystem of Digital Sovereignty on ARPOKRAT

Le Blog Arpokrat

Secure Password Generator & Strength Analyzer | Arpokrat

Local Strength Analyzer

Time to Crack a Password

Mastering Password Security

Length beats Complexity

What is Entropy?

Beyond the Password

Use a Password Manager

Privacy Policy | Arpokrat

Arpokrat GmbH

1. Our Philosophy: Anonymity and Sovereignty

2. Specifics of ArpokratOS (Operating System)

3. The Only Information You Provide (Billing)

4. Processing of User Content (Communications)

5. Information We DO NOT Collect

6. Sovereign Infrastructure, Anti-GAFAM, and the Tor Network

7. Legal Basis and Compliance with the new Swiss Law (nFADP / GDPR)

8. Contacting Us

9. Governing Language (Primacy)

Terms of Use | Arpokrat

Arpokrat GmbH

1. About Our Services

2. Anonymity and Access to Services

3. Privacy Policy and User Data

4. Acceptable Use of Our Services

5. Liability and Risks

6. Disclaimers and Limitations of Liability

7. Dispute Resolution and Jurisdiction

8. Availability and Miscellaneous Provisions

9. Special Arbitration Clause (United States and Canada Only)

10. Governing Language (Primacy)

Buy ArpokratOS License | Secure OS Procurement

Obtain Access

Awaiting Payment

Payment Confirmed!

The Arpokrat Protocol | Zero-Knowledge Messaging Architecture

The Problem with IDs.

The Unidirectional Queue System

Schrödinger

The Cat

Inside a Blind Relay.

Blind Relay

Why This Matters.

No Social Graph

No Spam

Profile Rotation

Start Communicating Without Trace.

Arpokrat Messenger | Sovereign Decentralized Messenger & Non-Custodial Wallet

The Future of Sovereign Communication.

Your Data is Yours. We Don't Want It.

Native Tor Routing

Non-Custodial Wallet

The Architecture of Freedom

QuantumImmune

Strategic Decentralized Relay Infrastructure

Switzerland

Iceland

Panama

Malaysia

South Africa

No Compromise on Features

Don't Trust. Verify.

Reclaim Your Sovereignty.

ArpokratOS | Hardened De-Googled Android Operating System

Your Vault, In Your Pocket.

Native Tor Integration. True Anonymity.

Your Digital Footprint, Erased.

1. Attack Surface Reduction

2. Immediate Data Destruction

3. Anti-Analysis Integrity

4. Cryptographic Integrity

Native Integration: Messenger & Non-Custodial Wallet Included

A New Standard of Security

The Hardware Paradox.

Why we chose Google Pixel to fight Google.

The Titan M2™ Chip

Custom Verified Boot

Hardware Isolation (IOMMU)

Quantum
Immune

Immutable
System

Decentralized
Network