A text travels in clear
Your operator, a fake cell tower, anyone listening to the network: a text reads like a postcard, all along its way.
PGP SMS and MMS on Android
Your texts, signed.
Your secrets, encrypted.
foomms is an SMS and MMS messenger that signs and encrypts your messages with PGP, with foodjis and your security key. Your operator's network carries them without being able to open them.
Free software · No account · No advertising
What a text message does not guarantee
Any number can lie
The number displayed proves nothing. Fake courier, fake bank, fake relative: text-message scams all rest on that blind trust.
Encrypted messengers want your account
To encrypt, they ask for an account, a central server and often your address book. Should the service change its rules or close, your conversations go with it.
The text message you know, with a signature and a lock
foomms keeps SMS and MMS, which every phone receives, and adds PGP: each message is signed by your security key and encrypted for the certificate of the number’s holder. The application does no cryptography itself: it asks foodjis, which relies on your key. No account, no server of ours.
What foomms does
A colour for each message
Green encrypted and certified, blue signed and certified, yellow encrypted, red in clear and not certified, grey closed: you know at a glance what a message is worth.
Know who wrote
A signed message is verified as soon as it is shown, and says who signed it. A spoofed number cannot imitate a signature.
Encrypt for one person only
The message is encrypted for the certificate tied to the number: only your correspondent's security key can open it.
Open, read, close again
A single presentation of the key opens the chosen message and those before it. They close again by themselves after the time you chose.
One number, one certificate
Tie a contact's number to their PGP certificate, in your address book. foomms then knows whom to encrypt for and whom to verify.
Photos, files, voice
Attach a photo, a picture, a contact, where you are or a file; record a voice message by holding the empty field. Attachments are encrypted like the text.
Your everyday messenger
foomms can become the phone's messaging application: search, notifications, backup and restore in the "SMS Backup & Restore" format.
Share with one person or several
A text, a picture or a file shared from another application goes to one person, or to each of several, separately.
Getting started
A security key
A YubiKey 5 NFC. The foopgp association provides them to its members. See the key offer →
foodjis
foodjis holds your PGP ID identity and does the cryptography foomms asks for. Install it first, and make your key known to it. Discover foodjis →
foomms
Install foomms, let it become your messenger, tie your contacts to their certificates, and write.
For the curious, and the sceptics
foomms does not ask to be taken at its word. Here is what it does, and how.
- PGP, armoured. Messages travel as ordinary PGP messages, in text: any other PGP application can read them.
- No cryptography in foomms. The application asks foodjis to sign, encrypt, decrypt and verify, through Android’s OpenPGP interface.
- The private key never leaves the card. foodjis hands your security key what must be signed or decrypted, and the phone never sees the secret.
- No Internet access. foomms does not ask for that permission: your messages go through your operator’s network, and through no server of the association.
- A long message goes as an MMS. An encrypted message is longer than its text; foomms can warn you before sending an MMS, which your operator may charge for.
- Free software, under the GPL-3.0 licence. Its source code is given to anyone who holds the application and asks for it.
foodjis, the application that holds your key → Our tools on Codeberg →
Who is behind foomms?
foopgp, a non-profit association that promotes the use of PGP technologies among individuals, businesses and policymakers. foomms is developed for its members, and for everyone who wants their messages to stay between them and the people they write to.
Discover foopgp →
Install foomms
Android 8 or later, foodjis, an NFC reader and a contactless OpenPGP security key.
Rather avoid Google Play’s surveillance or other malfunctions?
Download the application: foomms-dev_1.0.2.apk
Check the fingerprint or the signature: SHA-256 · PGP signature