Download APK Session Security Essentials, New Updates & Review
I came to Session for a plain reason: I wanted to message friends without handing over my phone number, and I was tired of apps that treat a contact list as something to harvest. My first week with it was quiet in the best sense. Nothing flashed, nothing begged for attention, and the chats I started stayed where I put them. That calm first impression held up once I started looking at how the app actually protects a conversation.
This review covers what Session does differently from the messengers most people already have, which security settings are worth turning on first, what the recent updates changed, and where the app still asks for patience. I tested it on an ordinary Android phone over several weeks, sending one-to-one messages, joining a closed group, trying disappearing messages, and updating the app twice. If you are weighing a move to a messenger that does not ask for your number, you will get a straight answer here, including the trade-offs.
What Session Is and How Its Onion Routing Works
Session is a private messenger built by the Oxen Project, and its best-known idea is simple: you do not sign up with a phone number or an email address. Instead, the app creates a Session ID, a long string of letters and numbers that acts as your address. You share that ID only with people you choose, and you can create a new one if an old ID ever becomes a problem. For someone who has watched a phone number follow them from app to app for years, that change alone feels like a reset.
Messages travel through onion routing, which means a message is wrapped in layers and passed between several volunteer-run nodes before it reaches the other person. Each node peels off one layer and only learns where the message came from and where it should go next, never the full route and never the content. The content itself is protected by end-to-end encryption, so the nodes in the middle cannot read it either. In practice, sending a message feels no different from any other chat app; the extra work happens out of sight, and delivery usually takes a second or two longer than a centralised messenger.
Your Session ID Instead of a Phone Number
Your Session ID is generated on your device when you first open the app, and it is the only identifier other people need to reach you. You can copy it from your profile screen, share it as a QR code, or send it through another channel you already trust. Because no phone number is attached, a contact cannot look you up by searching their address book, and a data breach at a phone company does not hand your messaging identity to anyone. The trade-off is that friends cannot find you automatically; you have to make the first introduction, which slows down the first day but keeps the circle deliberate.
How Onion Routing Moves a Message
When you press send, your message is encrypted for the recipient and then wrapped so that it hops through a chain of service nodes. Each hop knows only its neighbours, which means no single node can connect you to the person you are writing to. Messages waiting for an offline contact sit in a swarm of nodes until the recipient comes online, instead of sitting on one company server. The design removes the single point where a provider could read, log, or hand over a full conversation history.
What Happens When You Send Your First Message
Your first message to a new contact starts with a short exchange of keys in the background, and the app shows the message as sent once that handshake finishes. The chat screen looks familiar: a text box, a send button, and ticks that confirm delivery. Under the surface, though, there is no phone number attached to either side, and the conversation is not tied to a central account. That is the whole appeal in one screen, and it is why the first message feels oddly ordinary for something built so differently.
Closed Groups Versus Open Groups in Session
Closed groups are private chats for up to 100 members, where only invited people can join and messages are encrypted for the group. Open groups, sometimes called communities, are public rooms hosted on a server run by whoever set the room up, and they can hold far more people. The two kinds of group serve different purposes: closed groups for friends, family, or a work team; open groups for a public topic where anyone may read along. Before you join an open group, check who runs its server, because that host sets the rules and can see the room’s traffic.
Session Security Essentials: End-to-End Encryption, Disappearing Messages and Screens
Every one-to-one chat and closed group in Session uses end-to-end encryption by default, with no toggle to switch it off and no setting to forget. The keys live on your device, and the app uses the Signal protocol’s approach to session keys, which means each conversation gets fresh keys and older keys cannot decrypt later messages even if one key is ever exposed. You do not need to understand the maths to benefit from it, and you do not need to turn anything on: the protection is there from the first message.
Disappearing messages are the next setting worth learning. You can set a timer per conversation, from a few seconds up to a week, and after the timer runs out the message vanishes from both phones. This is useful for sharing a one-time code, an address for a meet-up, or anything you would rather not leave sitting in a chat history. It is not a guarantee, because the other person can still photograph their screen before the timer ends, so treat it as tidy housekeeping rather than a promise that no copy can ever exist.
Screen security adds another layer on Android: turn it on and the app blocks screenshots and hides message content from the recent-apps preview. I switched this on during my second day and left it on. It costs nothing in daily use and it stops a casual glance over your shoulder, or a screenshot shared by accident, from exposing a private chat. Combined with a device lock and a short auto-lock timer in the app, it covers the most common ways a private conversation leaks in real life.
Disappearing Messages and Message Requests Explained
Disappearing messages work per conversation, so you can keep a family group permanent while a chat about a surprise party deletes itself after a day. Set the timer from the conversation menu, pick a duration that fits the topic, and the app shows a small notice in the chat so both sides know the rule. Messages sent before you changed the timer keep their old setting, which is a detail worth remembering if you switch a long-running chat to disappearing mode halfway through.
Locking the App and Hiding Notification Previews
Checking a Contact With the Safety Number
Each conversation has a safety number, a string of digits that should match on both phones when the encryption is set up correctly. You can compare it in person or read it aloud over a call if you want to be sure nobody has tampered with the exchange. Most people will never need this check, and the app does not force it on you, but it is the right tool when something feels off, for example after a contact restores their account on a new phone and the safety number changes.
New Updates in Session: What Changed and What to Check After Updating
Recent Session updates have focused on call quality, group reliability, and a cleaner settings layout rather than new gimmicks. Voice and video calls, which run peer to peer where possible, connect faster than they did a year ago, and closed groups sync more reliably when a member returns after days offline. The settings screens now group privacy controls together, so the lock, disappearing messages, and screen security options sit in one place. After any update, check three things: your disappearing message timers are still set, your notification preview setting is still as you left it, and your recovery phrase still matches the copy you stored. Updates have never reset these for me, and a thirty-second check keeps it that way.
Session Features in Daily Use: Calls, Groups, Attachments and Search
Voice and video calls work one to one, and the sound quality on a stable connection is clear enough for a long call. Closed groups support text, images, voice notes, and files, and the search box inside a chat finds old messages by keyword without scrolling for minutes. Attachments send at their original quality when you choose to share a file rather than a compressed photo, which matters for documents and screenshots of tickets. Onion-routed messaging without a phone number is the feature that shapes everything else in this app, and it is the reason the contact list stays small and deliberate. The interface stays plain on purpose: chats, groups, and settings, with no stories feed or shop pulling your attention away.
Session vs Signal vs Telegram vs WhatsApp: A Head-to-Head Comparison
Each of these messengers trades one strength for another. Session leads on anonymity, Signal leads on audited encryption for everyday users, Telegram leads on large public groups and media, and WhatsApp leads on reach, because nearly everyone you know already has it. Badoo is a natural next app to try if your circle uses dating and social apps more than private messengers, though it serves a different purpose entirely.
| Messenger | Needs phone number | Encryption and metadata |
|---|---|---|
| Session | No, Session ID only | End-to-end encrypted, onion routing hides routes |
| Signal | Yes, for registration | End-to-end encrypted by default, minimal metadata |
| Telegram | Yes, for registration | Secret chats encrypted, cloud chats stored on servers |
| Yes, tied to number | End-to-end encrypted, backups may be unencrypted | |
| Session groups | No, invite only | Closed groups encrypted, open groups public |
How to Set Up Session Step by Step
- Install the app, open it, and tap Create Account to generate your Session ID.
- Write down the recovery phrase on paper and store it away from your phone.
- Open Settings, turn on the app lock and screen security, and set notification previews to sender only.
- Share your Session ID or QR code with one trusted contact and send a test message.
- Set a disappearing message timer on chats that carry sensitive details.
After setup, BeReal covers that need neatly if you also want a small, close-friends app for daily photos, while Session stays your private messaging home.
Session Review: Pros, Cons and Who It Is For
Private by design, with no phone number and no central contact map, Session earns its place for people who value privacy over convenience. The review below is the honest balance from weeks of daily use.
Session Features
Onion routing, end-to-end encryption, disappearing messages, closed and open groups, voice and video calls, voice notes, file sharing, message requests, app lock, and screen security cover the core of private messaging without extras you did not ask for.
Pros of Session
- No phone number or email needed, so your messaging identity stays separate from your real-world identity.
- Onion routing and encryption protect both content and the route a message takes.
- Disappearing messages and screen security give practical control over what stays on a phone.
- Open source code lets independent reviewers check how the app handles your data.
Cons of Session
- Far fewer contacts use it than WhatsApp or Telegram, so you must persuade friends to join.
- Messages can arrive a little slower on weak connections because of the extra routing hops.
- No cloud backup of chats, so a lost recovery phrase means a lost identity.
Who Session Is For
Session fits journalists, activists, small private groups, and anyone who wants chats that are not tied to a phone number. It fits less well for large family groups where everyone already lives on WhatsApp, or for people who want video calls with dozens of participants and heavy media features. Disappearing messages with a per-chat timer tip the balance for readers who share sensitive details and want them gone after the conversation ends.
Troubleshooting Session: Common Problems and Fixes
If messages arrive late, check your connection first, then check that battery optimisation is not pausing the app in the background. If a call will not connect, check microphone permission and try voice before video. If a contact’s safety number changed, ask whether they restored their account on a new phone.
Frequently Asked Questions About Session
What is a Session ID and how do I share it safely?
A Session ID is the long address the app creates for you instead of using a phone number. Share it only with people you trust, through a channel you already use, and create a new ID if one ever spreads further than you intended.
How do disappearing messages work in Session?
You set a timer per conversation, and messages delete themselves from both phones once the timer ends. Earlier messages keep their old setting, and the other person can still photograph the screen, so use the timer for tidy housekeeping rather than absolute secrecy.
Is Session really private without a phone number?
Yes, in the sense that no phone number or email is collected at sign-up, and onion routing hides the route between sender and receiver. Your messages are still only as private as what you write and who you share your ID with.
Can I use Session on more than one device?
You can link a second device to the same Session ID, and linked devices share the conversation. Keep the recovery phrase safe, because it is the key to restoring the ID if a device is lost.
Session Verdict and Where to Get the App
Session is the right messenger when privacy is the deciding factor and you can accept a smaller contact list in exchange for it. It is not the right messenger when reach matters more than anything else. My own use settled into a pattern: Session for the small group of people I trust with private topics, and a mainstream app for everyone else. That split works, and it is honest about what each tool is for.
Curious readers may also enjoy Bumble is worth a look as well for a different kind of social app. When you are ready to try Session itself, Click here to download the Session app. Two more options from the same family: Click here to download the Badoo app and Click here to download the BeReal app.
