Direct, private,
peer-to-peer messaging.
Orpal opens an encrypted WebRTC channel directly between two devices. Messages and files travel peer-to-peer — the board just introduces you, then steps aside.
A relay that introduces you — then steps aside.
The board's only job is to help two devices find each other. The moment they connect, traffic flows directly between them — it can't read anything and stores nothing.
Six skins. Same untrusted board underneath.
Orpal ships with a wardrobe of classic skins. Steel Blue is the default — swap to amber CRT, phosphor green, synthwave magenta and more. Every skin is the exact same secure core.
Messages and files ride a WebRTC datachannel opened directly between two devices — no message server in between.
A relay board only helps two peers find each other. It can't read traffic and stores nothing once you're connected.
Add contacts by scanning a QR identity card, with anti-substitution binding validation on every scan. Requests & blocking built in.
Every payload is sealed to your contact's verified key — readable by them, and by no one else.
Large files stream in verified chunks, each checked with SHA-256, so what lands is exactly what was sent.
A full device backup, encrypted end to end. Restore your identity and history on a new device with confidence.
Peer-to-peer doesn't mean fragile. Compose anytime; messages wait safely on your device and send the instant a peer reconnects.
Designed to be trusted with the relay assumed hostile.
When the device supports it, private keys are sealed to secure hardware — Secure Enclave, Android Keystore, or TPM via WebAuthn — and never leave it.
Orpal assumes the relay is fully hostile. Even a compromised board learns nothing — no keys, no plaintext, no usable connection data.
Every line is open. The full client and the Open Relay Protocol are released under Apache-2.0 — read it, fork it, run your own board.
Open it in any modern Chromium browser and install to your home screen or desktop. No store, no waiting.
▶ Launch at orpalPrefer a native build? Install the signed APK, packaged with Capacitor from the exact same shared core.
⬇ Download the APKReady to crack the crab's back?
No accounts to create, nothing to trust but the math. Open Orpal and scan your first contact.