Is XChat secure?

Every message in XChat is end-to-end encrypted by default. Your encryption keys never leave your device, which means nobody — not X Corp, not us, not your internet provider, not a hypothetical attacker — can read your messages without physical access to your phone.

There is no content scanning, no message moderation pipeline, and no plaintext backup. The encryption is on by default and cannot be turned off, so you don’t need to remember to enable it.

XChat uses the same kind of cryptography as Signal and WhatsApp. The technical details have not yet been independently audited at the time of writing — that’s worth keeping in mind if you’re protecting against state-level adversaries — but the basic design is sound and modern.