Download · Docs · MeshSat node · What works · meshsat.net
 |
 |
 |
| Home: every way out on one screen, and your messages on their way | Setup: node, satellite, Hub and SMS, each with where it stands | Satellite passes: computed on the phone, no internet needed |
 |
 |
 |
| Your MeshSat node: its LoRa radio and Iridium modem over one Bluetooth link | Satellite: the node's modem, signal and mailbox | Safety: zones and the check-in timer |
MeshSat Android 2.11 on a Pixel 9a, connected to a MeshSat node and the Hub, 19 September 2026. Real data, with the modem's IMEI and the phone's position blurred.
MeshSat Android turns an ordinary Android phone into a MeshSat gateway. Pair it with a MeshSat node, a pocket-sized box with a Meshtastic LoRa radio and a RockBLOCK 9603 Iridium modem, and one phone can send and receive over the mesh, by satellite and by SMS. It reports to the MeshSat Hub whenever there is any link to it, and it keeps working when the mobile network and the internet are gone.
It also works with any plain Meshtastic radio, for the mesh only.
Status: pre-release. This is a prototype under active development, not a finished product. It has never been deployed to a real user and has never been used in an actual emergency. See What works, and what does not before you rely on it for anything.
The app comes in two editions. The full app, SMS included, is what the releases here and F-Droid carry. The Google Play edition is the same app without SMS, because Google Play does not allow SMS in an app that is not the phone's SMS app; it goes on Play only. Both are net.meshsat.android, but Play signs its edition with its own key, so a Play install and a GitHub or F-Droid install cannot update each other: to switch, uninstall one and install the other, and provision with the Hub again.
- Download the APK for your phone from the latest release. There is one per processor: take arm64-v8a unless you know otherwise, since nearly every phone since 2016 is that. armeabi-v7a is for older 32-bit phones, x86 and x86_64 for emulators, and universal works on all of them. A per-processor download is about 47 MB, the universal one about 67 MB. Settings > About phone, or an app like Droid Hardware Info, tells you which one a phone is.
- Let your browser or file manager install unknown apps. Android asks the first time.
- Open the APK and tap Install. Play Protect may warn about an unknown developer, because the app is not on the Play Store: tap More details, then Install anyway. The APK is signed, and you can check the signature first.
- Open MeshSat and allow Bluetooth, location, SMS and notifications. Android needs location for Bluetooth scanning.
You need Android 8.0 or later.
Coming from 2.8 or older? Since 2.9.0 the app is net.meshsat.android (it was com.cubeos.meshsat), so Android installs it as a separate app and nothing carries over. Uninstall the old one, install the new one, and provision it with the Hub again by QR code.
- Pair your node. In Setup, open Your MeshSat node, tap Scan for Meshtastic devices, then Connect next to your node and enter its Bluetooth PIN. The scan lists every Meshtastic device in range, so pick the node by its name (a v0 node advertises as
MSIR_plus four hex digits). A plain Meshtastic radio pairs the same way. - Satellite. With Use the node's modem on (the default), the app uses the node's RockBLOCK while it is connected. Setup > Satellite shows the modem, with Poll Signal and Check Mailbox, and a Node health card with what the node reports about its own modem: who holds it, its last signal reading, sessions and their results, and the node's own satellite routing. After a restart the app reconnects to the same node and takes the modem back by itself.
- Hub (optional). Setup > Hub > Scan the Hub's QR code, with the QR code from the Hub. That sets the Hub address, credentials and client certificate.
- SMS. In Setup > SMS, tap Allow SMS and fill in the Kit phone number.
- Emergency contacts. In Setup > Safety, add the people an SOS goes to by SMS, then tap Test the alarm to see every route work.
- Send something. In Messages, tap New message and pick who it is for: a node, everyone on the mesh, a phone number or the satellite. For a satellite message the compose bar shows the bytes and credits before you send. Home shows each way out: a solid line works, a dotted line is not available, and an orange dot is a message on its way.
On first launch a welcome page says what each Android permission is for before Android asks, and Home keeps a Getting started list of these steps until they are done.
Routing rules (Setup > Advanced > Routing rules) decide what is forwarded between links automatically, for example mesh messages out by satellite.
- Mesh. Meshtastic over Bluetooth LE with the official protobufs: text, positions, telemetry, waypoints, node info, traceroute and more. A reply to a node goes to that node, not to the whole channel. People lists the nodes you hear, with a button to message one or show it on the map, and Mesh topology draws how they are linked from their neighbour info. Region, channels and transmit power are under Setup > Mesh radio settings; the app only sends back values it has read from the radio.
- Satellite. Iridium SBD through the node's RockBLOCK 9603, up to 340 bytes out and 270 bytes in. Messages wait in a queue and are retried until they go out, and a message that arrives during any satellite session is stored straight away. The app opens a satellite session only when there is something to send, when the modem rings, when the gateway holds a message and the modem sees a satellite, or when you tap Check Mailbox. It never checks on a timer and never because it reconnected to the node, because every session costs a credit. If Bluetooth drops in the middle of a session, the node finishes it on its own and the app treats the message as possibly sent and retries it after the modem's 3-minute pause. Passes are predicted on the phone from orbit data that ships with the app and is refreshed when there is internet, and the signal shows as an icon in Android's status bar.
- RockBLOCK 9704 (Iridium IMT) over an HC-05/06 Bluetooth serial adapter, with messages up to 100 KB. The code is there; it has not been tested on hardware.
- SMS through the phone's own SIM, optionally encrypted per conversation with AES-256-GCM. Mesh and SMS messages are compressed with MSVQ-SC by default. It is lossy: what arrives means the same, but may not be word for word what was sent.
- APRS through a KISS TNC over TCP (Direwolf, for example) or directly to APRS-IS, with smart beaconing and acknowledged messages.
- Hub. MQTT with a client certificate. The phone shows up in the Hub's fleet like a field kit, reports health and positions, and takes remote commands: send a message, flush the queue, update config, rotate keys, reboot. When a field kit cannot be reached directly, the app can reach it through a tunnel via the Hub.
- TAK. Positions from the Hub's TAK feed appear on the map. Receive only.
- Reticulum. The phone runs as a Reticulum transport node and relays between the mesh, both Iridium modems, MQTT and TCP peers.
- Safety. Hold the SOS button on Home for 3 seconds. The SOS goes out on every route the phone has, each one retried until it is sent: by satellite as the Bridge's SOS frame, which the Hub raises as an alarm; as a mesh broadcast, which any MeshSat kit in range relays; by SMS with a map link to each emergency contact; and to the Hub over the internet. It stays on, with a banner on every screen and a line per route saying where it stands, until you cancel it in the app or from the notification. Everyone who got it is then told you are safe. Test the alarm uses the same routes with a text that raises no alarm, and a position report instead of the SOS frame by satellite. A check-in timer sends SOS if the phone sees no activity for too long, and zones, drawn on the map, record when a mesh node enters or leaves an area.
- People you carry. Swap contact cards face to face: one phone shows its card as a QR code under People, the other scans it, and both read the same fingerprint off their screens. The card is signed by the phone that made it, so it cannot be altered on the way, and the fingerprint you read aloud is what says the card is really theirs. A card that arrives as text instead of through the camera is kept, and marked, as imported.
- Records. A message queue with everything waiting, sent or given up, and config export and import in YAML or JSON, in the same format as the Bridge.
- Local API on 127.0.0.1:6051, for testing and automation.
The map works without internet down to country level, from a world overview built into the app. The gateway runs as a foreground service, so the phone keeps relaying with the screen off; to have it start again after a phone restart, switch on Start after a phone restart in Setup > Advanced > Diagnostics (off by default). Setup > Advanced > Node log shows the node's own log over Bluetooth, the same lines its USB console prints, with pause, clear and share; its switch sets the node's debug log setting, which the node keeps; the node restarts once to apply it. Night mode, the moon on Home, turns the whole app red to keep your night vision.
| State | |
|---|---|
| Mesh through a MeshSat node over Bluetooth | Verified 19 September 2026 on a Pixel 9a |
| Satellite messages out through the node, landing at the Hub | Verified 19 September 2026, three messages |
| A satellite message in, picked up by the app | Verified 19 September 2026 |
| A message that arrives while the app is sending by satellite | Stored straight away since 2.12.0. In 2.11.1 it could be lost: two were, on 19 September 2026 |
| Reconnecting to the node and taking its modem back after an app restart | Verified 19 September 2026 |
| Pass prediction with no internet | Verified 19 September 2026 |
| The phone connected to the Hub as a bridge | Verified 19 September 2026 |
| Recovery when the node drops out mid-session | Verified 20 September 2026: the node was restarted while the phone held its modem, and the phone marked the link down and took the modem back on its own in 8 seconds |
| RockBLOCK 9704 | Not tested on hardware |
| SOS: hold to send, SMS to an emergency contact, cancel, and the cancellation after it | Verified 19 September 2026 on the Android 11 emulator (2.13.0) |
| SOS by satellite to the Hub | The frame matches the Bridge's byte for byte in tests. Not sent through the Hub yet: it would page the on-call chain |
| SOS over the mesh and to the Hub online, and Test the alarm on the phone | Not exercised yet |
| SMS on Android 8 to 12 | Broken before 2.13.0 (the app said the phone could not send SMS). Fixed; verified on the Android 11 emulator |
| SMS on the Google Play edition | Not included, by Google Play's SMS policy. Setup, Home and the SOS screen say so; an SOS goes by satellite, the mesh and the Hub |
| Starting after a phone restart (option) | Verified on the Android 11 emulator |
| A second tick when the Hub confirms a satellite message arrived | Verified 20 September 2026 on four messages, receipt back from the Hub within seconds |
| Contact cards swapped by QR code | Shown, read and stored on one phone. Not yet swapped between two phones |
| Deployment to a real end user | Never |
| Use in an actual emergency | Never |
| Kind | Device | Connection | Status |
|---|---|---|---|
| Phone | Google Pixel 9a, Android 17 | Main test phone | |
| Phone | Android emulator, API 30 | Build checks | |
| MeshSat node | v0: XIAO ESP32-S3, Wio-SX1262, RockBLOCK 9603 | Bluetooth LE | Tested, mesh and satellite |
| MeshSat node | v1: LILYGO T-Beam Supreme, RockBLOCK 9603 | Bluetooth LE | Being built |
| Meshtastic radio | Any Meshtastic device, for example a LILYGO T-Echo or T-Deck, a Heltec LoRa V4 or a XIAO ESP32-S3 with an SX1262 | Bluetooth LE | Should work, mesh only |
| Satellite | RockBLOCK 9704 | HC-05/06 Bluetooth serial | Not tested |
| APRS | Any KISS TNC reachable over TCP, for example Direwolf with a Quansheng UV-K5 and an AIOC | KISS over TCP | Should work |
Other phones with Android 8.0 or later should work, since the app only uses the standard Bluetooth, SMS and location APIs. If you try one, an issue with the result is welcome.
You need JDK 17 and the Android SDK (compile SDK 35).
git clone https://github.com/meshsat/meshsat-android.git
cd meshsat-android
./gradlew assembleFdroidDebug # app/build/outputs/apk/fdroid/debug/meshsat-android-<version>-universal-<code>.apk
./gradlew testFdroidDebugUnitTest # JVM unit tests, no device neededThere are two product flavors: fdroid is the full app and the default, play is the Google Play edition without SMS (assemblePlayDebug, bundlePlayRelease). The SMS permissions and receivers live in app/src/fdroid/AndroidManifest.xml, so the Play manifest never mentions them, and SmsCapability gates every SMS code path on BuildConfig.SMS_INCLUDED.
It is Kotlin 2.1 and Jetpack Compose, with Room for storage, ONNX Runtime for the compression model, osmdroid for maps, Eclipse Paho for MQTT, BouncyCastle for Ed25519 and X25519, and NanoHTTPD for the local API. Library versions are in app/build.gradle.kts.
Releases are built and signed in CI, with the signing key held in OpenBao, and published on the Releases page. To check an APK before you install it:
apksigner verify --print-certs meshsat-android-2.19.0-arm64-v8a-1172.apkEvery release since 2.8.0 shows:
Signer #1 certificate DN: CN=MeshSat, OU=CubeOS, O=Nuclear Lighters, L=Leiden, ST=South Holland, C=NL
Signer #1 certificate SHA-256 digest: 8ca78b6c33bd9796bb05f40fec2a0ab801e0297e7565960d42f5e6af821c9f66
Signer #1 certificate SHA-1 digest: 9040570a7bf4d33890bf82ad85a7debf24fa57ab
All releases use the same key, so a new version installs over the old one. The one exception is the 2.9.0 rename described under Install. Debug builds are signed with the Android debug key. The Google Play edition is signed by Play with a different key, so it neither updates nor is updated by these releases.
The scan does not find my radio. Location must be allowed, Bluetooth must be on, and the radio must not be connected to another phone.
The app stops in the background. Some phone makers kill background services. Set MeshSat's battery use to Unrestricted, and see dontkillmyapp.com for your brand.
The satellite shows 0 bars. That is normal between passes and under a limited view of the sky. The app sends anyway and keeps retrying, so a message can wait a while. Setup > Advanced > Message queue shows what is waiting.
A message shows a clock. It is queued and goes out by itself when it can. A tick means sent, red means it failed.
The map only shows countries. Detailed tiles come from the internet. Offline, the map falls back to the world overview built into the app, which stops at country level.
"App not installed". Usually a signature mismatch with a copy that is already installed, or the old com.cubeos.meshsat app from before 2.9. Uninstall it first.
- MeshSat, the Bridge: the same gateway on a Raspberry Pi
- MeshSat node and its firmware, meshsat-firmware
- MeshSat Hub, fleet management
- Documentation and the changelog
Issues and pull requests are welcome. Run ./gradlew testDebugUnitTest before you open a pull request, and open an issue first for anything large. Report security problems privately to security@meshsat.net rather than in a public issue; see meshsat.net/security.
Copyright 2026 Elli and Kyriakos. GNU General Public License v3.0.
The app is GPLv3 because it includes the Meshtastic protobuf definitions in app/src/main/proto/meshtastic/, which are GPL-3.0. Third-party material and its licences are listed in THIRD_PARTY_NOTICES.md and NOTICE.