Vector Privacy: Q1 2026 Report
Three major releases, hardened security architecture, 3,182 downloads, and the groundwork for Tor integration.
A message to the public
We are living through a defining moment for privacy.
In January 2026, China's Ministry of Public Security published a sweeping 68-article draft cybercrime law that would embed mass surveillance, real-name identity verification, and the banning of circumvention tools directly into national legislation. Across Europe, governments are advancing "Chat Control," a regulation that would require messaging platforms to scan private communications, effectively dismantling end-to-end encryption for hundreds of millions of people. In the United Kingdom, Computer Weekly reported at the start of this year that privacy faces unprecedented attack, with governments pushing harder than ever for backdoor access to encrypted communications. Meanwhile, AI-powered surveillance tools, facial recognition systems, and predictive policing algorithms have quietly become the default infrastructure of both public spaces and private platforms worldwide.
This is not a hypothetical future. This is the world people are already living in.
For journalists investigating corruption, activists organizing for change, whistleblowers exposing wrongdoing, and ordinary people living under authoritarian governments, the ability to communicate privately is not a convenience. It is a lifeline. When the tools meant to protect them are weakened, backdoored, or outlawed, the consequences are real: sources are exposed, movements are dismantled, and people are silenced.
Vector Privacy was built precisely for this moment.
We believe that privacy is a basic human right, and that it must be accessible to everyone, not just those with technical expertise or the resources to hire specialists. Vector provides a free, open-source, decentralized communication platform with no KYC requirements, no metadata tracking, no advertisements, and end-to-end encryption that no government, company, or third party can access or undermine. It runs on the Nostr protocol, meaning there is no central server to shut down, no single point of failure, and no authority to compel.
Q1 2026 was one of the most productive quarters in Vector's history. As the case for private communication grew more urgent by the day, the team shipped three major releases, hardened the security architecture at a fundamental level, delivered new features that directly serve at-risk users, and laid the groundwork for Tor integration in the next release. Vector is not waiting for the world to get better. We are building the infrastructure that helps people operate safely within it.
Q1 2026 at a glance
Features added in Q1 2026
Privacy and security
Memory-Hardened Key Vault v0.3.3
Private keys are XOR-split into four shares and scattered across 128 indistinguishable decoy arrays in memory. This makes private keys invisible to malware scanning memory and resistant to forensic extraction. It is one of the most significant security improvements in Vector's history.
Zeroize Everywhere v0.3.3
Passwords, seed phrases, nsec strings, and all temporary key copies are wiped from memory immediately after use via volatile writes. No sensitive cryptographic material lingers in RAM after it is no longer needed.
Anti-Debug Protections v0.3.3
Release builds now block debugger attachment, memory inspection, and unsigned DLL injection across macOS, Linux, Android, and Windows. This prevents attackers from using standard analysis tools to probe or manipulate the running app.
URL Tracker Stripping, Web Preview Toggling, and Typing Indicator Toggling v0.3.1
Users gain direct control over three metadata vectors: tracking parameters embedded in shared links are stripped automatically, web link previews can be disabled entirely, and typing indicators can be turned off to prevent contacts from knowing when a message is being composed.
Communication features
User Blocking v0.3.3
Users can now block contacts from direct messages. Blocked users are hidden from the contact list, filtered from incoming invites, and excluded from notifications. This is a critical safety feature for users who face harassment or unwanted contact.
Profile Invites and Shareable Profile Links v0.3.1 / v0.3.3
Users can share their Vector profile as a web-accessible contact card, allowing anyone to add them with a single tap. The v0.3.3 release added a dedicated Share button for faster sharing.
Group Chat Improvements
Encrypted group conversations powered by OpenMLS received ongoing stability work throughout Q1. Ghost message duplication caused by relay echoes was fully resolved in v0.3.3, and group messaging performance was substantially improved.
Overhauled Voice Messaging
A fully redesigned voice messaging experience introduced intuitive gestures, a cleaner UI, and fixes for long-recording clipping on Android.
Expanded Markdown Support
A new markdown engine brings modern formatting to Vector chats, including richer text expression for those sharing longer-form content.
Image Magnifier
Tapping any image opens a fullscreen viewer with zoom and pan support.
X (Twitter) Post Previews
Posts shared from X are now previewed inline within the chat, giving context without requiring users to leave the app.
Send Button
A mobile-friendly Send button replaces the microphone icon when text is being typed, improving usability on smaller screens.
Notification Dot
An in-app notification indicator now displays when there are unread messages in other chats, ensuring nothing is missed without requiring push notifications.
Bot Indicators
Automated bots in Vector chats now display a small icon for easy identification, helping users distinguish between people and automated services.
Performance and platform
Mini App Realtime Overhaul v0.3.3
The WebXDC Mini App runtime was rebuilt with preconnect support, SQLite persistence, message buffering, and bi-directional WebSocket support. This dramatically improves the reliability and responsiveness of embedded applications within Vector.
Windows Mini App Performance v0.3.3
WebGL and WASM performance for Mini Apps on Windows was dramatically improved, making interactive apps substantially smoother.
Android Battery Life Improvement v0.3.3
Background sync now connects to a single relay with automatic failover rather than four to five simultaneously. This eliminates approximately 75% of radio wakeups, with a direct positive impact on battery life.
Instant Background Stop v0.3.3
Background sync now uses zero-cost Notify signaling instead of polling every five seconds. When a user opens the app, it responds instantly.
On-Demand Decryption
Vector no longer decrypts all messages at startup. Decryption now happens on demand as messages are viewed, dramatically reducing RAM and CPU usage on launch.
Scoped MLS Subscriptions v0.3.3
Group message subscriptions are now filtered by group IDs at the relay level rather than fetching and filtering client-side, reducing unnecessary data transfer and improving group chat performance.
Faster Synchronization via Parallel Processing
Parallel processing was introduced into Vector's sync pipeline, making contact list and message history loading noticeably faster across all platforms.
Account Exports
Users can now export their account via Seed Phrase or nsec, improving multi-device login and ensuring users have a reliable backup independent of any server or service.
Storage and file handling
Storage Manager
A dedicated section in Settings gives users a clear breakdown of Vector's storage usage, making it easy to understand and manage local data.
Upload Previews
Files are previewed before uploading, giving users the chance to confirm the correct file before it is transmitted.
Image Compression
Images are intelligently compressed before uploading to reduce bandwidth. Users can toggle off compression to send at full quality when needed.
Blossom-Based Decentralized Media Storage
Vector now uses the Blossom Protocol for file storage, replacing centralized media hosting with a decentralized alternative consistent with Vector's infrastructure philosophy.
User experience
Window Persistence
Vector now remembers the size and position of the application window between sessions.
Web Profiles
Users can share a public-facing profile contact card over the web, with one-click adding from any browser.
Glassy Animated Header and UI Revamp
A significant visual redesign introduced a glassy animated header, redesigned popups, mini-avatars, and an improved group creator interface.
Expanding Chatbox
The message input box now expands dynamically as users type, removing the fixed-height limitation that made composing longer messages awkward.
Profile Shortcuts and Message Shortcut
Users can click on anyone in the Group Overview to visit their profile, and tap "Message" on any profile to jump directly to that conversation.
Intelligent Profile Sync
A bandwidth-optimized profile sync system keeps the contact list current without wasting data on inactive contacts.
Infinite Scroll
Chat history can now be scrolled back indefinitely, giving users access to their full conversation history.
Unified Logging and Crash Reports v0.3.3
A new structured logging system captures errors with UTC timestamps and writes them to a private log file. Users can copy their logs directly from Settings to assist with bug reporting.
Release summaries
v0.3.1 (February 28, 2026) — 919 downloads
The first Q1 release focused on stability, account management, and quality-of-life improvements. The introduction of Seed Phrase and nsec account exports was a meaningful step toward giving users full sovereignty over their identity and data, independent of any device or service. Stability improvements addressed issues with large contact lists and message history that some users had experienced.
v0.3.2 (March 9, 2026) — 847 downloads
The second Q1 release refined platform behavior, improved relay connectivity, and expanded build target support. This release laid the groundwork for the more substantial security work that followed in v0.3.3.
v0.3.3 (March 15, 2026) — 1,416 downloads
The quarter's most significant release. v0.3.3 hardened Vector's security architecture at a foundational level with the Memory-Hardened Key Vault, Zeroize Everywhere, and Anti-Debug Protections. The addition of User Blocking addressed a real safety need. The Mini App runtime overhaul and Android battery improvements reflect continued commitment to making Vector practical and performant on everyday hardware.
Download statistics
Q1 2026 by release
| Release | Date | Downloads |
|---|---|---|
| v0.3.1 | Feb 28, 2026 | 919 |
| v0.3.2 | Mar 9, 2026 | 847 |
| v0.3.3 | Mar 15, 2026 | 1,416 |
| Q1 2026 Total | 3,182 | |
| All-Time Total | 16,776 |
v0.3.3 platform breakdown
| Platform | Downloads |
|---|---|
| Android (APK) | 172 |
| Linux (AppImage + DEB + RPM) | 59 |
| Windows (EXE + MSI) | 45 |
| macOS (DMG x64 + aarch64) | 18 |
Website and documentation traffic
The Vector documentation site saw consistent and growing traffic across Q1, with two notable peaks.
On February 8, the single highest-traffic day of the quarter was recorded: 1,123 events and 429 unique visitors. This spike preceded the v0.3.1 release by approximately three weeks, suggesting meaningful organic discovery and community growth independent of release announcements.
A second traffic surge occurred in late February and early March, directly coinciding with the v0.3.1 release on February 28. This confirmed that release announcements are effectively driving new users to explore the documentation and onboarding materials.
Traffic remained elevated through mid-March before tapering toward the end of the quarter. The overall shape of the data reflects sustained and compounding interest across the three-month period.
Open-Source DOOM
What if multiplayer DOOM didn't need Cloudflare's servers - or anyone's servers? What if it didn't need the internet at all? What if you could send a 4MB file to a friend in a chat message and be fragging each other within seconds, purely peer-to-peer, with the game feeling like a modern real-time shooter instead of a 1994 LAN party?
That's right. Q1, in March, to be specific, we released a pure peer-to-peer, serverless open-source version of DOOM. You can download it in-app in Vector under Nexus/Mini Apps. To learn more you can read the full blog or visit the repo on GitHub.
Looking ahead: v0.4.0
The roadmap for v0.4.0 is focused on taking network-level privacy further.
Embedded Tor Integration
A simple Tor toggle in Settings will route all Vector network traffic through Tor using arti-client, the Tor Project's official Rust client. This includes relay connections, Blossom media storage, avatars, and metadata. The full implementation is planned and ready to execute, pending a dependency version alignment currently being worked through. Once live, this will allow users in the most restrictive environments to use Vector without revealing to their network that they are using it at all.
MDK 0.7.1 Upgrade
Will update the MLS group encryption layer from NIP-44 to ChaCha20-Poly1305, strengthening the cryptographic foundation of group chat.
Peer Advertisement Persistence
Will store peer connection events in SQLite, fixing scenarios where a user coming online after another user advertised their presence would miss that connection.
nostr-sdk Zeroize SecretKey PR
Will upstream Vector's in-house memory-zeroize fix to the broader Nostr ecosystem, contributing Vector's security work back to the community it is built upon.
Frontend Refactor
Will include the process of redesigning the frontend experience. Vector will pivot to a text-based UI display, rather than text bubbles in order to adapt to the direction of having large communities, setups, workflows, and communications in app. From this, you can expect a smoother and more versatile user experience. We will also be doing a complete internal code audit to refactor and reorganize the entire frontend codebase.
Closing
The world did not become a safer place for privacy in Q1 2026. Governments expanded surveillance authorities. Encryption backdoor legislation advanced. Platforms continued collecting and monetizing the most intimate details of people's digital lives. For the people who depend most on private communication, the environment grew more hostile, not less.
Vector shipped three releases anyway.
Privacy is a basic human right. We say it, we repeat it, and we build from it. Every feature in this report, every security hardening, every bug fixed, and every download was a step toward making that right real for someone who needs it. We are grateful to everyone who has downloaded Vector, contributed to the codebase, shared the project, or simply believed that communication should belong to the people having it.
The work continues.