Roadmap
What we are building next
Keylane is built by a small, self-funded team, so this roadmap is ordered rather than dated. Sequence is a commitment we can keep; delivery dates on cryptographic infrastructure usually are not.
Five groups below: what is already in your hands, what is being worked on now, and three horizons after that. Short term means next; mid term means decided and designed; long term means a direction we are keeping the architecture compatible with.
Last reviewed 18 August 2026 · Shipped items move to the changelog
Shipped
Public beta on both stores
Android and iOS clients available to everyone, with no invite required.
Post-quantum key exchange
Hybrid PQXDH combining X25519 with ML-KEM on every conversation.
Phone-number-free identity
Cryptographic identity generated on-device, with no signup of any kind.
Automatic history expiry
Local history and its attachments deleted on a window you choose, 30 days by default, optionally on the other side too.
Voice and video calls
End-to-end encrypted calling, with secure media routing and zero plaintext path on the relay.
Per-contact privacy controls
Read receipts, typing indicators, and presence, all off by default and set per contact.
Metadata-stripped push
No ciphertext or sender data through Apple or Google push infrastructure.
Additional languages
Client localization for Turkish (TR), Spanish (ES), Bulgarian (BG), German (DE), Polish (PL), and Italian (IT).
Kodium crypto core, open source
The cryptographic core published under the Apache License 2.0.
Secure notebook
Private notes and credentials kept in the app under the same on-device encryption as your messages, so the secure place you already carry is also the place you write things down.
In development
-
Independent security audit
Commissioning a third-party review of the protocol and implementation. We will publish the report in full, including findings that do not flatter us. This is first in the queue because everything else on this page is worth less without it.
-
Self-hosted server release
A packaged container image with installation, hardening, and operational documentation, so that running your own relay is genuinely supportable rather than technically possible. Current status.
-
Full client source release
The cryptographic core is already public. The remaining client application source is being prepared for release, with reproducible builds as the goal so that a published binary can be checked against published source.
-
Expanded documentation
Group chat, attachments, backup and export, and the remaining client features documented properly. Questions from beta users decide the order.
-
On-premises deployment
A supported deployment path for organizations with data-residency obligations, including the operational runbooks that make it defensible in an audit.
Short term
The next things we intend to finish. No dates: we would rather ship these late than announce them early.
Full federation release
Server-to-server delivery finished and documented, so independent relays interoperate as a matter of course rather than as an experiment.
Emergency codes
A separate code entered instead of your PIN that acts under duress rather than unlocking normally.
Interface and experience polish
Continuous work on the parts of the app you touch daily. Secure and pleasant to use are not a trade we accept.
Server admin console
Operations, federation policy, and abuse handling, with no plaintext path. See it.
Mid term
Decided in principle, designed but not built. Mostly about what happens to your data when a device does not survive.
Multi-device
One identity across several devices, each with its own key pair, and revocation of a device you no longer hold. Today a Keylane ID lives on exactly one device.
Local encrypted contacts backup and restore
Your contact list exported as a locally encrypted file you hold, and restored onto a new device without a server ever seeing it.
Paper recovery key
An offline key you write down once, which restores your identity even if the last device holding it is lost or the app is removed. The honest counterpart: paper you keep is paper someone else can take.
Encrypted backup and export
Locally encrypted conversation export, with the key staying yours.
Disappearing messages
Per-conversation expiry enforced on both devices, beyond today’s account-wide history window.
Managed private relay
A dedicated instance operated by us for teams that do not want to run one.
Business features
Organizational directory, provisioning, and administrative controls.
Commercial support
An SLA and a named contact for organizations running their own relay.
Long term
Directions we intend to take Keylane rather than features with a queue position. Listed because the architecture is being kept compatible with them, not because they are close.
Mesh mode without internet
Peer-to-peer delivery over local Wi-Fi and Bluetooth when there is no network to reach a relay — for an outage, a border, or a shutdown.
Desktop and web clients
Linked desktop and browser clients on the same per-device key model as mobile. Both depend on multi-device landing first.
Group chats and media
Encrypted group messaging with shared-payload fan-out, plus encrypted attachments.
Open API and libraries
Documented client APIs and libraries for automation and bots, so integrations run on your own identity instead of a privileged back door.
Small-appliance build
A low-power hardware image for households and small groups.
Not planned
Saying what we will not build is as useful as saying what we will, because each of these would require breaking something on the principles list.
- Cloud message backup we can read. Server-side history would undo the reason the relay is not worth attacking.
- Phone number or email accounts. Not even as an optional convenience — an optional identifier is still an identifier we would hold.
- Advertising or analytics. In the app or on this website.
- Content scanning of any kind. Including client-side scanning, whatever it is proposed to detect.
- Lawful-access mechanisms. A backdoor for one party is a vulnerability for everyone.
- Paid privacy tiers. Security features will not be withheld from free users.
Influence the order
This ordering is our best judgement, not a fixed contract. If something you need is far down the list — or missing — tell us what you are trying to do and why. Beta feedback genuinely moves items.