White Noise Messenger – Why Signal Isn't Enough and Nostr Is the Future

We are in a digital arms race. On one side: states and intelligence agencies that want to scan every private message under the guise of "child protection" (chat control, client-side scanning). On the other side: us, the citizens, who have a right to privacy.

In this video I show you why Signal is no longer enough and how we can protect our privacy with White Noise.

For a long time, Signal was considered the gold standard. But Signal has a problem: it is centralized and normally knows your phone number. It sees your IP address and could infer who is talking to whom. In an era where metadata can be more dangerous than the content itself, that is no longer enough.

Enter White Noise. A messenger built on the Nostr protocol, published by a nonprofit organization and built so that relays learn as little about you as possible.

1. The Problem: Walled Gardens and the Metadata Trap

Even with WhatsApp or Signal, your messages are "end-to-end encrypted" (E2EE). That's good, but not enough.

• The server sees more than it should: Even if Signal can't read the content, there is still a central server that sees your IP address and usually knows your phone number as well. Signal technically hides the sender ("sealed sender"), but whoever monitors the server could infer from IP addresses and timing that you're messaging an investigative journalist at 2 a.m. That metadata is often more valuable to intelligence agencies than the text itself.
• Identity coercion: Normally you need a phone number, which ties your digital identity to your SIM registration. Since October 2026, the Android app has let new accounts sign up without a number, a feature Signal still describes as a beta. The small one-time fee for it can so far only be paid through Google Play.
• Censorship risk: A central server can be shut down or blocked. An app in the Apple App Store can be removed under government pressure.

2. The Solution: White Noise & Nostr

White Noise is not a corporate platform. It is software that uses a protocol: Nostr (Notes and Other Stuff Transmitted by Relays).

• No phone number: Your identity is a cryptographic key pair. Without a number or email the key is not tied to your person, but that does not make you anonymous, because relays see your IP address.
• No central server: Messages travel through "dumb" relays. If one relay blocks you, you simply use another. There is no kill switch.
• Freedom tech: The project is published by a nonprofit organization, not by investors who want to sell your data.

"White Noise is a technical attempt to shift the power balance between state and individual back in favour of the individual."

3. The Technical Foundation: MLS and the Marmot Protocol

Nostr was originally not built for private chats. White Noise changes that with MLS (Messaging Layer Security), integrated via the Marmot Protocol. In its early form the standard was called NIP-EE. In the official Nostr registry, NIP-EE has been marked "unrecommended" since December 2025 and points to Marmot, while the Marmot specification itself carries the status "adopted."

Why MLS Changes Everything

In conventional messengers, group communication is inefficient. White Noise uses MLS (IETF RFC 9420). Participants are organized like leaves on a tree.

• Scalability: Even groups with thousands of participants can be encrypted efficiently.
• Forward secrecy: Even if your key is stolen today, old messages cannot be decrypted.
• Post-compromise security: The system "heals" itself through automatic key renewal.

Cloak for Metadata: One-Time Keys and Gift Wraps

So that the relay cannot see who is talking to whom, White Noise signs every chat message with a fresh one-time key, never with your Nostr identity. Even a one-on-one conversation is technically a group in Marmot. The relay sees a random group ID, a timestamp and encrypted content. Who wrote the message and who reads along is not part of it.

Invitations to a group travel as a "Gift Wrap" (NIP-59). The wrapping hides the sender and the content, and only the invitee's inbox is addressed. To the relay, the traffic therefore looks largely like white noise. One gap remains, though: your IP address.

4. Infrastructure: Tor & Blossom

Even the best app is useless if the server can see your IP address.

• Tor via Orbot: White Noise has no built-in Tor feature. The project's FAQ states openly that a relay operator can see connection information such as your IP address. If you want to separate your IP from your Nostr identity, route the app through Orbot in VPN mode and select White Noise under "Choose apps." VPN mode does occupy the only VPN slot, so no other VPN, such as Mullvad, can run at the same time.
• Blossom server (media): Images and voice messages are encrypted before upload. The server hosts only scrambled data. For now the app decides which Blossom servers it uses. The Android app has no setting for your own server yet, only the relays are freely configurable.
• Notifications: Real push notifications on Android run through Google's push service, relayed by a service of the publisher, and on GrapheneOS they only work with Sandboxed Google Play. If it is installed, White Noise turns this route on at first launch, and you can switch it off at any time. Without Google Play, the app instead keeps a persistent connection to the relays and announces new messages locally, with no Google involved. Telemetry is off by default.

5. Where to Get It: Zapstore and GitHub

White Noise was rebuilt from the ground up in 2026. Instead of the earlier Flutter app, there have been native apps for Android and iOS since September 2026, both still in beta. The publisher is the Internet Privacy Foundation (IPF).

The project publishes the Android app in the Zapstore itself, with its own Nostr key. The app page therefore marks it as "Published by Developer", and the publisher is the White Noise Nostr profile. As long as at least one relay hosts the manifest, you can install the app, past the gatekeepers in Silicon Valley. The finished APKs are also available from the project's GitHub releases, and Obtainium keeps the app up to date from there. White Noise is offered on Google Play as well, but on GrapheneOS you do not need that route. On the iPhone, White Noise is so far only available through TestFlight.

⚠ Switching from the old app: The new app has a new package name (dev.ipf.whitenoise.android instead of org.parres.whitenoise). The old app will not receive any more updates, and the new one carries over neither chats nor groups. Back up your private key (nsec) before switching, unless it already lives in Amber. Install the new app alongside the old one, and remove the old one only once everything works.

6. Alien Verdict: Sovereignty Is Not a Feature — It's Work

White Noise is currently one of the strongest answers to the surveillance state. If the EU rolls out chat control, White Noise cannot comply by design. There is no central server that messages depend on, and no executive who could hand over chats.