Ant Messenger
Ant Messenger
可以把 Ant Messenger 理解为一套信件装入上锁信封的通讯方案：发送端加密，接收端解密，服务端扮演只管传递信件的邮差，接触不到内容本身，文字、语音、图片与文件的即时通讯均默认如此。
Think of Ant Messenger as letters sealed in locked envelopes: the sender encrypts, the receiver decrypts, and the server only relays envelopes without ever seeing the contents — the default for text, voice, images, and files alike.
在此模型之上，防截屏、应用锁与阅后即焚在客户端层拦截越权访问；群组、云盘与多设备同步共用同一加密链路；云端托管与私有化部署则对应不同的信任边界取舍。
On top of this model, screenshot protection, app locks, and self-destruct guard the client side; groups, cloud storage, and multi-device sync share one encrypted channel, while hosted and self-hosted deployments trade off trust boundaries differently.
立即下载 Download Now
云托管与私有化部署对应不同的信任假设：前者把运维交给服务商，后者让使用者掌握整条链路；两者都确保第三方不做内容留存，按风险偏好自行取舍。
Cloud hosting and self-hosting encode different trust assumptions — managed operations versus full control of the pipeline — while both keep third-party retention out, leaving the trade-off to your risk preference.
可以类比为只有收发双方持有钥匙的保险箱：明文在发送端加密、接收端解密，传输与存储中的密文对服务器及中间节点均不可读。
Picture a safe whose only keys are held by sender and receiver: plaintext is encrypted at the source and decrypted at the destination, so ciphertext in transit and at rest is opaque to servers and relays.
手机、电脑、平板同时登录时，各设备分别持有自己的密钥，历史记录以密文同步；某一设备丢失只影响该设备自身，其余设备仍可正常解密取回。
Each signed-in device holds its own key material while history syncs as ciphertext; losing one device affects only that device, leaving the others able to decrypt and recover.
群组扩展至万级成员时，每条消息仍逐条加密后分发，成员增多不降低保护强度；服务端仅承担路由与中转，接触不到消息明文。
At 10,000-member scale, every message is still individually encrypted before fan-out; more members don't weaken protection, and the server only routes and relays ciphertext.
文字、语音、视频、文件与通话复用同一套加密链路和身份体系，各沟通形态不会各自留出明文接口，从架构层面收窄攻击面。
Text, voice, video, files, and calls reuse one encrypted link and identity layer, so no format opens its own plaintext gap and the attack surface stays small by design.
隐藏手机号、应用锁、防截屏与阅后即焚在客户端实施：前者拦截设备层面的越权读取，后者为消息设定可销毁的生命周期，服务端无从绕过。
Number hiding, app lock, screenshot protection, and self-destruct act at the client: the former blocks unauthorized reads at the device, the latter defines a burnable lifecycle the server cannot bypass.
文件在本地加密后上传云端，服务端持有的仅为密文与元数据，容量与保留时长不受限；取用时由持有密钥的客户端完成解密还原。
Files encrypt locally before upload, leaving the cloud only ciphertext and metadata with no limits on volume or retention; retrieval decrypts on the key-holding client.
安全承诺依赖实现而非口号：源码公开支持独立审计，加密链路与密钥处理可被验证；无广告、无付费、无数据采集，使开源与免费长期并存。
Security rests on implementation, not claims: public source enables independent audit of the encrypted channel and key handling; with no ads, fees, or data collection, open source stays genuinely free.
