Download
SecureBit.chat is an open-source peer-to-peer encrypted messenger. There is no server: clients connect directly over WebRTC after users exchange a connection descriptor through any channel they already trust. Nothing is registered, stored or relayed.
One protocol, two implementations. The web client is self-contained. Desktop and native mobile clients share a Rust cryptographic core. All clients are wire-compatible.
Security: per-message forward secrecy with a DH ratchet, out-of-band SAS verification as the single trust-transition point, deny-by-default for control frames before verification, ECDH secrets zeroed after key derivation, view-once messages kept out of OS notifications.
The threat model is published. No independent third-party audit has been performed. An internal security review of the protocol and web client produced 15 findings, with all High and Medium severity issues closed. The full report is public.
License: MIT. Source: github.com/SecureBitChat
Features
- No server, no account, no phone number
- Direct peer-to-peer connection over WebRTC
- Per-message forward secrecy with DH ratchet
- Out-of-band SAS verification
- Zero metadata by design
- Rust cryptographic core (desktop and mobile)
- Wire-compatible clients across all platforms
- View-once messages
- Receiver-controlled file transfer limits
- Open source, published threat model
