Session, developed by the Oxen Privacy Tech Foundation, positions itself as a privacy-first messenger that goes further than most competitors by removing the phone number requirement entirely. When you install Session, the app generates a cryptographic key pair locally and assigns you a Session ID — a long alphanumeric string that serves as your identity. There is no account registration in the traditional sense, and no personally identifiable information is collected during setup.
Security Architecture
Session uses the Signal Protocol as a foundation but modifies it in significant ways. The most notable departure is the removal of the Double Ratchet algorithm's perfect forward secrecy component. Session uses a simpler key exchange model to accommodate its decentralized, asynchronous message delivery system. This is a real trade-off: while it enables offline message storage on the node network, it means session keys do not rotate with the same frequency as Signal. Security researchers have noted this as a meaningful reduction in cryptographic protection, and prospective users should weigh it accordingly.
Messages are routed through the Oxen Service Node Network using a three-hop onion routing system similar in concept to Tor. This obscures IP addresses and makes traffic analysis substantially harder than with centralized messengers. However, the network's size and speed cannot yet match Tor's maturity, and message delivery can feel sluggish during high-load periods.
Usability
The interface is clean and largely familiar to anyone who has used WhatsApp or Telegram. Basic features including text, voice messages, image sharing, disappearing messages, and group chats all function as expected. Voice and video calling are available but have historically been less reliable than the core text messaging experience. The desktop client is functional, though synchronization between devices requires a recovery phrase rather than a QR code scan, which adds friction during setup.
The Session ID system, while excellent for privacy, is a genuine usability barrier. Sharing a 66-character hex string with a new contact is awkward compared to sharing a username or phone number. The app partially addresses this with human-readable ONS (Oxen Name System) usernames that map to Session IDs for a small fee.
Pricing and Value
Session is free to download and use with no subscription tiers or in-app purchases. ONS username registration requires a small amount of OXEN cryptocurrency, which introduces a minor barrier for non-technical users. There is no paid tier that unlocks additional features, keeping the privacy protections uniform across all users.
Privacy Practices
The project is transparent about its data practices. The open-source code allows researchers to verify claims independently, and the foundation publishes documentation about its network architecture. The absence of central servers that store message content or user metadata is a structural privacy advantage over nearly all mainstream alternatives.