Olvid

By operating entirely without user identifiers such as telephone numbers or email addresses, Olvid eliminates the threat of metadata harvesting, third-party tracing, and bulk profile scraping. The application does not request permission to access the device's physical contact book. This structural choice shifts the responsibility of identity verification and contact addition directly to the users, who must exchange cryptographic public keys peer-to-peer.

The core architectural engine of Olvid is governed by client-side cryptographic state machines. When two entities establish a chat connection, their devices execute localized state steps to authenticate and securely establish key exchanges. These client-side cryptographic protocols assure message integrity, data confidentiality, and complete metadata encryption, operating under the assumption that all distribution servers are inherently untrusted or compromised.

A major update in early 2026 was the inclusion of Olvid's open-source, Google-free application client in the F-Droid repository. Despite these technical updates, Olvid presents significant operational hurdles. While text communication and file transfers are free for private users, secure outbound voice and video calling require a paid subscription model. This paid tier supports Olvid's independent funding model but restricts consumer-level adoption.

Additionally, users must navigate highly secure peer-to-peer connection rituals, such as entering multi-digit PINs or scanning physical QR codes. This operational overhead, combined with recent bugs in voice message playback navigation, highlights the friction that occurs when prioritising absolute security over user convenience.