"The web app stores your key in localStorage!"
That's how websites work
On your device. Like the terms say. Like every web client. Android, iOS and desktop use the OS keystore.
Their own verdict
armada.exposed has a section called "What holds up." It says:
- Messages are end-to-end encrypted
- Calls are end-to-end encrypted
- DMs are private by default
- No Google on Android
- No email, no phone, no ID
- Open source
So… the product works.
The charges
"A public ledger shows grant money paid the developers!"
They found our transparency report
That's what a grant is. It's public because we put it there.
"Out of the box, it uses Soapbox's servers!"
They found the self-hosting guide
Their source is our guide on how to swap them out. Settings → change them.
"The Discord bridge isn't end-to-end encrypted!"
They read the warning label
It's Discord. The app says so and makes you tick a box first.
"NIP-29 groups aren't end-to-end encrypted!"
Other protocol is other protocol
Correct. Armada uses Concord, which is. NIP-29 is someone else's relay-hosted protocol that Armada can also open.
"The hosted site had Plausible analytics!"
Deleted. You're welcome.
Ripped out entirely. Privacy policy updated. Thanks for the bug report.
"Soapbox Technology, LLC exists!"
They found the LLC on the LLC paperwork
App stores need someone to sign the paperwork. The protocol is still owned by nobody.
"A community owner can remove you!"
Moderation ≠ ban
From their community. Nobody can delete your key from everywhere. Not even us.
"The relay knows when you connect!"
Your relay can see you use your relay
It still can't read anything. Google and Apple don't get to know at all. Don't like it? Run your own.
"Downloading a file shows the server your IP!"
The internet uses IP addresses
It downloads ciphertext it can't open. Want more? Turn on the media proxy, or use…
"The server sends an Onion-Location header!"
We offer Tor. To the Tor people.
Yes.
"No email? Then why is there an iPhone waitlist?"
Newsletter ≠ account
It's a "tell me when it launches" box. Optional. Your account is a key.
"The changelog lists security fixes! There's a bug bounty!"
Exposed: bugs got fixed
That's what secure software looks like from the outside.
"Discover shows the team's picks first!"
Curated list is curated
The front page of the app has… the app team's picks. Stop the presses.
"The guide says 'no asterisk on the calls,' then lists caveats!"
Read the next sentence
About invite links. Not calls.
Fair cop
Plausible analyticsRemoved"Armada does not operate these relays"Removed- Privacy policy names our serversFixed
See? That's how you take feedback.
Slop-o-meter85%
You can't sink an Armada.
Armada is spread across free public servers. Nobody can switch it off. Not Discord. Not a slop cannon. Not us.
Encrypted communitiesChannels, threads, roles. Relays only ever see sealed envelopes.
Voice & videoEnd-to-end encrypted calls and screen share for the whole squad.
Discord importBring your server over in a few clicks.
No phone or emailYour account is a key. Nobody can take it away.
Games & mini appsMultiplayer, right in the chat.
Every deckWeb, Android, macOS, Linux and Windows. One key on all of them.
Google Play
F-Droid
Zapstoreroot@vps:~# curl -fsSL https://armada.buzz/install.sh | sudo sh
Still don't like Armada?
Use another app. Keep your communities.
Pop Vulture
The Basement
Book Nook
Soapbox Community
Every Concord app opens every Concord community. Same key, same invite links.
Vector
by Vector Privacy
Private messaging with no phone number and no email. Concord started here.
Amethyst
by Vitor Pamplona
Communities inside a whole Nostr client.
Accordion
by hzrd149
A lightweight web client.
Grimoire
by purrgrammer
A tiling workspace for Nostr.
Coinos
by Adam Soltys
Communities inside a Bitcoin wallet.
PosterChan
by verita84
A self-hosted personal cloud on Nostr.
Questions
What about the people behind Armada?
Don't like us? You don't have to use our app. Concord is an open protocol, and other people's apps open the same communities. Join with Vector or Amethyst and you're in the same channels as everyone on Armada, with nothing of ours in between. That's the point of building on a protocol instead of a platform.
Do I have to use Soapbox's servers?
No. Change the relays, file servers and voice server in Settings, or host your own. The defaults are just where a brand-new install starts.
Is my key safe in the web app?
If you paste or generate a key on the web, it's stored in your browser, like every web client. Want Armada to never see your key at all? Sign in with a signer like the Ditto Extension in your browser, or Amber on Android. The Android, iOS and desktop apps also keep a pasted key in the OS keystore.
Can Armada read my messages?
No. Armada is an app, and your messages never pass through us. Concord communities and DMs are encrypted on your device, so nobody but the people in the conversation can read them. Not the relays, and not us. Even armada.exposed agrees.
Who made this site?
The crew behind Armada. Unlike some sites, we'll tell you.