MC Hardened

MeshCore Hardened — a hardened, minimal native MeshCore client for Android (KMP). Off-grid encrypted LoRa messaging: no servers, no accounts, no Play Services.

A hardened, minimal MeshCore client for Android — off-grid encrypted messaging over LoRa, with no servers, no accounts, and no app-store lock-in.

Not affiliated with the official MeshCore app. This is an independent third-party client; "Hardened" refers to this build's posture (small attack surface, keystore-sealed secrets, encrypted local storage) — not to any change in the MeshCore protocol's own guarantees.

On the name. The app is MeshCore Hardened; MCH is shorthand, used below and in conversation. The full name is what ships — the launcher, the releases and the app itself all say MeshCore Hardened, and the word doing the work there is Hardened, which is a claim about this build that the security posture section qualifies. Worth knowing if you go looking: MCH on its own is a crowded acronym (it is mostly a blood-test value), so searching for it will not find this. Search for MeshCore Hardened.

MCH is a native Kotlin Multiplatform client for the MeshCore mesh, built in the mold of its sibling reticulum-mobile-app: a real native app — foreground service for a persistent radio link, system notifications on incoming messages — with the smallest attack surface I can keep secure and reason about.

No external dependencies. No accounts, no API keys, no central server, no analytics, no Google Play Services, no Firebase. All crypto runs locally; secrets live in the Android Keystore; persistence is Room (SQLite). The only outbound HTTP the app ever makes is OpenStreetMap tile fetches on the Map tab — everything else is MeshCore frames over the transport you attach (BLE / USB, or TCP if you deliberately turn it on).