Kryfo is a free, open source messenger for Android, Windows and Linux. It runs over Tor by default, with automatic bridges (Snowflake, WebTunnel, obfs4) when Tor is blocked, and sends messages through Nostr relays as sealed envelopes. It needs no phone number or email: an identity is three words. Chats use libsignal, post-quantum since 0.6 (PQXDH and SPQR). It has a decoy PIN, hidden chats and a wipe PIN, and comes in 17 languages. Our servers keep no logs, no IP addresses and no contact lists. Releases are reproducible and on F-Droid, GitHub, kryfo.app and Google Play. Kryfo's automatic bridges were tested in heavily censored countries. Kryfo is not audited yet: donations for a Cure53 audit are open, and the report will be public.