Is PaperPhoneLite safe?

PaperPhoneLite is a private messaging client for self-hosted PaperPhoneLite onion services. It bundles Tor and supports private and group chats, attachments, offline data, disappearing messages, safety numbers, optional text-appearance encryption with startup unlocking, and optional ntfy notifications. A compatible self-hosted server is required. PaperPhoneLite contains no Google Play services, F…

Developer: 619dev
Category: Messaging
Earliest archived version: 14 Oct 2026
License: AGPL-3.0-only (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

14 Oct 2026

3.0.24

Remove unused Maven repository and permissions. Disable app backup and device transfer. Restrict attachment sharing to cache files. Disclose direct Tor bridge discovery and fallback.

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.fm619.paperphonelite

Latest APK SHA-256de33c326456527b86e72ed5d06c0bc2c8fbcbca858a7331a96e6bc66241eba44

Signing certificate39:C1:4B:94:2F:92:52:07:23:29:2A:32:75:9F:56:44:63:8E:41:23:EC:E9:6E:D8:FC:E5:17:75:45:C3:99:52

MIN ANDROID24TARGET36ARCHITECTUREarm64-v8a

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

3.0.2414 Oct 202624+arm64-v8a→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions5 declared · 2 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessCAMERARECORD_AUDIO

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.CAMERA android.permission.INTERNET android.permission.RECORD_AUDIO com.fm619.paperphonelite.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗