LivaraPrivate messengerLivara 0.1.68 · against the apps you know
Most comparison pages are a competitor grid with one column mysteriously full of ticks. This one asks ten questions worth asking any encrypted chat app, and answers them for Livara — including the answers that count against us.
01 · The grid
The right-hand column summarises what dedicated private messengers typically answer in their own documentation. It describes a category, not an accusation about a named product.
| The question | Livara Chat | Typical private messenger |
|---|---|---|
| Are one-to-one messages end-to-end encrypted? | Yes — current secure chats use the hybrid-PQ LVR1 ratchet, and a send is refused rather than quietly downgraded | Usually yes on dedicated messengers, usually no on social platforms |
| Are group messages end-to-end encrypted? | Yes — all private group messages, edits, photos, videos, files, and voice notes are fully end-to-end encrypted with LGS1 sender keys | Varies; coverage for text, history, media and membership changes is often not separated |
| Are channel messages end-to-end encrypted? | No. Channel content is public/broadcast and is labelled separately from encrypted group text | Usually not for public or broadcast channels |
| Is the encryption resistant to a future quantum computer? | Yes — LVR1 combines post-quantum ML-KEM-768 with classical P-256 and periodically advances PQ key epochs to protect against future quantum interception | Not comparable as a category: published post-quantum deployments now differ materially by product and protocol |
| Does the server learn your password? | No. SRP proves knowledge without the wire ever carrying the password | Commonly a password hash is sent over TLS and verified server-side |
| Is who-you-talked-to hidden from the operator? | No. Routing and delivery metadata are stored so devices can sync in real-time | No, with rare exceptions that trade away instant multi-device sync |
| Can you verify the app you installed is the app that was published? | Yes — published SHA-256 checksums, verifiable release hashes, and an in-browser offline Proof Lab to verify APK integrity locally | Store installs are signed, but a checksum you can check yourself is uncommon |
| Does a correct password alone restore your keys on a new device? | No, deliberately. The encrypted key backup needs your recovery phrase | Often yes, via a cloud backup — convenient, and a much larger blast radius |
| Is there a phone number requirement? | No. An account is a username and a password | Frequently required, which ties the account to a real-world identity |
| Is it free? | Yes, with no advertising and no message-content processing for advertising | Usually free; the funding model is what varies |
02 · How to choose
It is a question about who you are hiding from. These three answers point at three different apps, and only one of them is this one.
Livara encrypts direct and private-group text and media, but its first-contact directory and LGS1 member list are still server trust points. It is the wrong choice when you require an audited protocol or malicious-server-safe group membership today.
Verdict · Encrypted content, incomplete server-compromise modelLivara is the wrong tool. Routing, timestamps and membership are stored by the ordinary delivery path. Look at systems with integrated sealed sender, private group credentials and a published metadata threat model.
Verdict · Not thisThe APK digest is published and the Proof Lab hashes your file locally, but that proves only equality with the published artifact. It does not prove source correspondence, protocol correctness or an independent audit.
Verdict · Start at the Proof Lab03 · Frequently asked
There is no single most secure app for every threat model. Compare the exact conversation mode, key custody, metadata, recovery, available review evidence and the released client version. Livara documents LVR1 direct-message and LGS1 private-group encryption, with explicit limits.
Yes. Private groups use LGS1 sender-key end-to-end encryption. Messages, edits, photos, videos, files, captions and voice notes are encrypted on the sender's device before upload, and only group members hold the keys.
Livara's LVR1 design combines ML-KEM-768 with P-256 for direct-message key establishment. That targets a specific future-decryption threat; it is not an independent security certification or a guarantee against a compromised device.
No. An account is a username and a password, so it is not tied to a real-world identity by a carrier record.
Download the Android APK, open the Proof Lab at /proof and drop the file in. Your browser hashes it locally and compares the SHA-256 with the published digest. Nothing is uploaded, and it works with your network disconnected.
Stop reading, start checking
The Proof Lab runs on your device and makes no network requests. It verifies the published artifact and the primitives — not the whole security architecture.