DarkMesh, Explained: How Blockd Minimizes Metadata

Most messaging apps win the wrong argument. They tell you the contents of your messages are end-to-end encrypted, and they are right. But the content was never the easy thing to expose. The trail around it is: who you talk to, when, how often, from where, on what device. That trail is metadata, and for most "encrypted" apps it leaks freely.

Encrypted isn't private. The pattern is.

DarkMesh is the architecture we built to attack that pattern instead of just the message body. It is not one feature. It is six layers, each closing a different gap that encryption alone leaves open. Here is the whole stack, in plain language, with what each layer does and does not claim.

Layer 1: Identity. Anonymous by default

The single biggest leak in mainstream messengers is the sign-up screen. A phone number is a permanent, real-world identifier: it ties to your SIM, your carrier records, your government ID in most countries, and your social graph. Email is nearly as bad.

Blockd asks for none of it. No phone number, no email, no KYC. Your account is a cryptographic identifier, recoverable with a seed phrase, like a crypto wallet. Because we never collect an identity, there is not one to leak, correlate across services, or be compelled to hand over. This is free, in the base app.

Layer 2: Transport. Post-quantum end-to-end encryption

Messages, voice, and video are end-to-end encrypted, and the encryption is post-quantum by default (a hybrid of X25519 and ML-KEM), so conversations stay protected even as computing advances. Only the people in the conversation can read it. This is the table-stakes layer, and it is free, but it is the layer most apps stop at.

Layer 3: Storage. Your choice, cloud or device

You decide where your messages live. Sync to Blockd's cloud for convenience across devices, or keep them strictly on-device for maximum control. Both are supported, and the choice is always yours. We do not force a single model, and we do not pretend there is no cloud option. We give you the switch.

Layer 4: Network. Tor-routed traffic (Premium)

Standard connections expose your IP address to the servers you talk to. With Blockd's network layer, your traffic is routed through Tor before it reaches our infrastructure, so what we see is a Tor exit node, not your IP. That is a meaningful reduction in what your network path reveals about you. This is a Premium capability, free for all users during early access. We describe it precisely on purpose: it changes what we can see at our edge, and we do not overstate it beyond that.

Layer 5: Media. Automatic EXIF stripping (Premium)

Every photo your phone takes is stamped with metadata: GPS coordinates, device model, exact timestamp. Most apps pass that straight through. Blockd strips it automatically from shared images, so the location and device fingerprint do not ride along with the picture. Premium capability, on by default for those users, free during early access.

Layer 6: Blinded Routing. The social graph stays unlinkable

This is the layer most apps will not even attempt. Blockd's relay uses rotating, blinded routing tokens instead of stable account IDs as recipient identifiers. The practical effect: even an observer watching traffic across the relay cannot easily reconstruct who is talking to whom, how often, or when, and map it back to an account. Your message content was already encrypted. This layer is about making the pattern harder to read. It is included in the base app.

The honest part: how much do you have to trust us?

Every messaging service that uses servers asks you to trust someone. Signal asks you to trust the Signal Foundation. WhatsApp asks you to trust Meta. The honest question is not whether you trust them. It is how much trust the architecture forces on you, and whether you can lower it.

Blockd's answer is a ladder, and you choose your rung:

• Mode 1, the free app on Blockd relays: you trust us organizationally. We say we do not store what we say we do not, and you take our word, the same as any server-based app.
• Mode 2, Premium with Tor: you trust the architecture more than the organization. Your traffic routes through Tor before it touches us, so we see an exit node, not your IP.
• Mode 3, Blockd Home: the design goal is to need no organizational trust at all. When you and your contacts run the hardware, peer-to-peer routing is attempted first, and messages never touch our servers, so there is nothing for us to read, leak, or be compelled to produce.

We do not think trust is a privacy strategy. We think architecture is. DarkMesh is how we put that in writing.

Why this matters now

Encryption became table stakes years ago, which is exactly why metadata is where the real exposure moved. Your communication patterns say more about you than your words. The Stanford metadata studies showed researchers inferring medical conditions, affiliations, and relationships from call patterns alone, with no message content required. If your identity is wired into the app through a phone number, all of that is permanently anchored to the real you.

DarkMesh is built so there is less to anchor in the first place. Not a promise that nothing is ever knowable, but an architecture designed to leave less behind at every layer.

Try it. Blockd is in free public beta on iOS and Android, and Blockd Pro is free for everyone through the end of 2026. Download at blockd.ai.