Alpha: what works, what's missing

Last updated 2026-11-13

YGOOW is not released yet. This page shows where it stands: the interface of the current build, what already works and what is still missing. There is no download here, and nothing to buy yet.

The current build on 13 November 2026: unlocking, one-to-one chats, groups, a contact, your profiles and the tips. Recorded on an Android emulator, with a development build that allows screen capture and demo contacts, sped up 1.6 times; the interface is the real app. No sound.

What already works

Contacts without accounts. Scan each other's QR code in person, or add someone remotely and compare a safety number on another channel.
One-to-one chats and group rooms, end-to-end encrypted, over Tor by default.
Several identities behind one app-lock.
App-lock with a password, a file, a link or a quorum, plus biometrics. A YubiKey as a second factor over NFC; over USB it is in testing.
A decoy profile for coercion, and a panic lock.
Dead Drop: one-time notes, in the app and at /d.
Conditions: a key per message, disappearing messages, open-after, burn after reading.
Delivery without Google: no Firebase, no push broker.
A sealed backup file that restores your profile on another phone.
A self-test that re-runs the cryptography on your own phone.

Each line in more detail, with what it does not protect against: progress.

The current build · 9 screens →

App-lock with password, file, link and quorum tiles — **App-lock**Pick how you unlock: a password, a file, a link or a quorum of people.

Home screen with Tor on and tiles for quick start, messages, profiles, tips and chats — **Home**Tor is on before the first screen is drawn. One-to-one chats and groups have separate tiles.

List of one-to-one chats with their protection and last activity in .beat time — **Direct chats**Each conversation with its protection, and a plain note on what background delivery costs.

A one-to-one conversation with demo messages — **A conversation**Times in .beat, so the screen doesn't give away your time zone.

List of group rooms with member counts — **Groups**Each room shows how many members it has and how many hold your current key.

Contacts grid with trust shields — **Contacts**White shield: met in person or number compared. Amber: added remotely, not checked yet.

A contact with channel tiles and the fingerprint digits — **A contact**How the key was sealed, which of your profiles they know, and the digits to compare.

Dead Drop: writing a one-time note with an expiry — **Dead Drop**A one-time note behind a link or QR code, for someone who isn't a contact.

Settings with language and settings templates: Everyday, Careful, Under pressure — **Settings templates**Everyday, Careful or Under pressure: each changes only what happens on your phone.

What’s still missing

We won’t release without these:

The Double Ratchet and the post-quantum hybrid in every conversation. Both are built and tested; live conversations don’t run them yet.
The other security fixes within our reach, from our own reviews and measurements.
A signed release, with the signing key kept off the build machine and its fingerprint published on the security page and in the canary.

Also still missing:

Less for the relay to read from timing. The encrypted message header and a steady channel per device are being built and measured. What the relay can infer today is written down on the progress page.
Delivery on real phones, measured. How messages fare on phones that save battery by sleeping is being measured right now. Until we publish the result, treat a late or missing message as possible.
Photos and voice messages. Text only for now.

Not audited: we have committed to an independent audit when it can be paid for, and nothing on this site calls YGOOW audited.

Licensing

Still open, and settled before the first release:

Licensing: how YGOOW is licensed and what a license covers.
License validity: how long a license is valid.
Updates and new features in paid licenses: what a paid license includes.

Until then there is nothing to buy and no download. When it is settled, it will be on this page.

Planning to use YGOOW on GrapheneOS? The step-by-step guide covers the phone, the system, a YubiKey and checking the app’s signature.

Report a problem

Questions, ideas, problems with this site or Dead Drop: kontakt@ygoow.com. Say what you did, what you expected and what happened.
Security vulnerabilities: security@ygoow.com, encrypted with our PGP key if you can. Scope and our commitments are in the security policy.
Illegal content in a Dead Drop note: AGB, section 6.

Write in English, German or Polish.