✅ ANDROID APK AVAILABLE — v0.1.7-alpha  ·  Part of the StealthX Platform  ·  Report bugs →
ENCRYPTED MESSAGE CONTENT · MINIMIZED SERVICE DATA

Classified
Messaging.

End-to-end encrypted Android messaging without phone-number or email registration. Current online delivery uses the central StealthX signaling relay and processes limited routing metadata.

Download APK View Source
XChaCha20Encryption
E2EMessage Content
KaspaIdentity Layer
ENCRYPTED CHANNEL
XChaCha20-Poly1305

How It Works

Explained simply.

No tech knowledge needed. If you can send a letter, you understand this.

📬

Think of it like a sealed letter.

When you send a normal message on WhatsApp or Telegram, it's like writing on a postcard. The postman can read it. The post office can read it. Anyone who asks can read it.

SecureChat is different. Your message is sealed in an envelope on YOUR phone — before it even leaves your hand. Only the person you sent it to has the key to open it. Not us. Not anyone else. Just them.

How it works — in 4 simple steps.

🔑

Your phone creates a secret lock.

When you first open the app, your phone quietly creates a unique lock and key — just for you. This happens on YOUR phone. We never see it. Nobody does.

📱

Share a QR code — not your number.

You don't need to give anyone your phone number. You show them a QR code — like at a supermarket. They scan it. You're connected. Done. No account. Nothing personal.

🔒

Your message locks itself.

Before your message travels, it locks itself with your friend's key. Even if someone catches it on the way — all they see is a jumble of random letters. Completely unreadable.

💨

Delivered. Then gone.

Your message arrives. Your friend reads it. Then it disappears from the delivery point. No copy. No backup. No record. Like it was never there.

🆔

One ID. Both apps.

Your StealthX ID works in SecureCall AND SecureChat. Share it once — your contact can reach you on both. No second setup. No second QR code.

💡

Why does this matter?

📮

Normal apps keep copies of your messages on their computers. If those computers get hacked — your messages get stolen. SecureChat keeps nothing. There's nothing to steal.

👀

Most apps know who you talk to and when. That tells them a lot about your life. SecureChat doesn't know who you are. At all.

📵

Other private apps still ask for your phone number. That's already personal information. SecureChat asks for nothing.

What if my phone gets stolen?

Tap the logo 5 times. Everything on the app disappears in under a second. Messages, contacts, everything. Gone.

Can you read my messages?

No. Not possible. Your messages are locked with a key only you and your friend have. We never have that key. Ever.

Can I use the GitHub source directly?

No. The source is visible for transparency and security review. Building, running, distributing, or using SecureChat requires permission from Vendetta Labs.


Capabilities

Tactical security, not empty promises.

Every architectural decision puts your privacy first. No compromises, no backdoors, no exceptions.

🔐 No phone number required
💥 STEALTH-DELETE
Kaspa Identity Layer
🔑 Lifetime via IFR Token
📦 Source-Available
🦎 Chameleon Overlay Compatible
🔐

End-to-End Encryption

XChaCha20-Poly1305 AEAD with X25519 key exchange. Every message gets a unique session key. We can never read your messages.

Kaspa Identity Layer

StealthX ID is generated from your cryptographic key bundle. Kaspa BlockDAG identity anchoring remains a roadmap hardening layer.

🔄

Double Ratchet Forward Secrecy

Signal-grade Double Ratchet protocol. Compromising one key exposes nothing about past or future messages. Every message is independent.

📡

Encrypted Relay Delivery

Messages are encrypted on-device and delivered as ratchet payloads through the StealthX relay. Kaspa relay incentives remain roadmap.

🌐

Group Messaging

Roadmap feature. Current release focuses on one-to-one E2E messaging, QR contact exchange, and emergency broadcast.

💥

STEALTH-DELETE

5-tap instant wipe destroys all messages, keys, and contacts. The app resets to factory state in under a second. Leave no trace.

📎

Encrypted File Transfer

Roadmap feature. The current APK ships encrypted text messaging and QR message import/export.

🦎

Chameleon Privacy OS

The encryption layer that makes SecureChat invisible. Automatic overlay encryption, location-based rules, decoy profiles. Part of the SecureChat ecosystem. Learn more →

🔑

IFR Holder Discount

Eligible holders verify wallet ownership only in the browser before a 50% checkout. The Android app remains wallet-free.

ELITE
🚨

Emergency Broadcast

Send an encrypted alert to ALL your contacts at once. One tap. Every contact notified. No group server. Each message individually encrypted.


Ecosystem

SecureChat Ecosystem.

Two apps. One mission. Total privacy.

THE MESSENGER
💬

SecureChat

E2E messaging with StealthX ID, QR contact exchange, and relay delivery. No phone number required.

APK AVAILABLE
THE PRIVACY OS
🦎

Chameleon

Context-aware encryption overlay for Android. Makes SecureChat — and every other app — automatically private.

Explore Chameleon →

Architecture

How SecureChat works.

Auditable device-side crypto, local identity, and relay delivery today; Kaspa identity anchoring remains roadmap.

SecureChat Architecture — StealthX Platform ──────────────────────────────────────────────────────── LAYER 1 — Identity StealthXIdentity ← Ed25519/X25519 key bundle and sx_ID QR Contact Exchange ← Device-to-device public key exchange Kaspa Anchor ← Roadmap identity hardening No message content on-chain. LAYER 2 — Transport (Ephemeral Relay Nodes) StealthX Signaling Relay ← Encrypted message delivery QR Import/Export ← Air-gapped message transfer fallback OnionRouting ← Roadmap transport anonymity Relay sees encrypted ratchet payloads. LAYER 3 — Crypto (Device-side, lazysodium) XChaCha20Poly1305 ← Symmetric encryption (24-byte nonce) X25519 ECDH ← Key exchange (ephemeral per-session) DoubleRatchet ← Forward secrecy + break-in recovery Argon2id ← Password-based key derivation Android Keystore ← Hardware-backed key storage (StrongBox) ──────────────────────────────────────────────────────── StealthX Platform compatibility: SecureCall ← shared XChaCha20 + X25519 stack Chameleon ← overlay encryption for SecureChat messages IFR Token ← browser wallet verification for checkout discounts

Classified

Cryptographic specifications.

We don't ask for trust. We provide proof. Every claim is auditable in source code.

LayerAlgorithmSpecificationLibrary
Symmetric EncryptionXChaCha20-Poly1305256-bit key, 192-bit nonce, AEADlazysodium-android
Key ExchangeX25519 ECDHCurve25519 Diffie-Hellman, ephemerallazysodium-android
Forward SecrecyDouble RatchetHKDF-SHA256 ratchet, RFC 5869lazysodium-android
Identity SigningEd2551964-byte signatures, key bundleslazysodium-android
Key DerivationArgon2id64MB memory, 3 iterations, 4 threadslazysodium-android
Key StorageAndroid KeystoreStrongBox/TEE, per-use authAndroid API 26+
Identity LayerKaspa BlockDAGGHOSTDAG, PoW, 10 BPSkaspa-wasm32-sdk
Message PaddingPKCS7-style256-byte block boundariesCustom

// core_crypto — XChaCha20-Poly1305 message encryption fun encrypt(plaintext: ByteArray, key: ByteArray, aad: ByteArray): EncryptedPayload { val padded = padToBlock(plaintext) // 256-byte blocks val nonce = sodium.randomBytesBuf(24) // fresh every time val cipher = ByteArray(padded.size + 16) // +16 Poly1305 tag sodium.cryptoAeadXChaCha20Poly1305IetfEncrypt( cipher, null, padded, padded.size.toLong(), aad, aad.size.toLong(), null, nonce, key ) wipeBytes(padded) return EncryptedPayload(cipher, nonce, aad, "XChaCha20-Poly1305", 1) }

Benchmark

Why SecureChat?

An alpha Android messenger with end-to-end encrypted content, local cryptographic identity and a central online-delivery relay.

Feature Current status
No phone number or email registrationAvailable
Double Ratchet + XChaCha20-Poly1305 message protectionAvailable
QR contact exchange and safety numbersAvailable
Central online signaling relayAvailable
Emergency BroadcastElite alpha
Tor, multi-hop onion, group/file, Kaspa anchor and Chameleon overlayRoadmap
IFR discount and paid activationLaunch-gated
Source visibilitySource-available license

Mission Timeline

Development Roadmap.

From architecture to decentralized deployment. Each phase builds on the last.

PHASE 0 — DONE

Foundation — Crypto Stack & Architecture Design

XChaCha20-Poly1305 + Double Ratchet + Argon2id. StealthX platform architecture. IFR Token integration design. Threat model.

PHASE 1 — ACTIVE

Android App — Core Messaging Release

Local E2E encrypted messenger. QR contact exchange. X25519 key management. Room + SQLCipher local storage. Chameleon integration path for overlay protection.

PHASE 2 — Q3 2026

Kaspa Identity Layer Integration

Public key anchoring on Kaspa BlockDAG. Contact discovery by Kaspa address. Ephemeral relay node protocol (SMP-style). KAS micropayment incentives.

PHASE 3 — Q4 2026

Group Messaging + File Transfer

Encrypted group chats. XFTP-style file transfer. Onion routing for transport anonymity. Kaspa relay node network launch.

PHASE 4 — 2027

StealthX Layer 1 Migration + iOS

Full migration to StealthX Layer 1 protocol. iOS client (shared Rust crypto core). External security audit. Store distribution only after license and product-readiness approval.


Browser Purchase Benefit

50% IFR holder discount at browser checkout.

Connect and sign in this browser before purchase. The server checks the IFR balance read-only on Ethereum Mainnet. SecureChat remains completely wallet-free.

Free
0 IFR — forever
  • E2E encrypted messaging
  • 10 contacts
  • QR key exchange
  • STEALTH-DELETE
  • Basic security warnings
Elite
Hold ≥ 6,000 IFR — 50% Elite checkout
  • Everything in Pro
  • Emergency Broadcast
  • Roadmap: onion routing
  • Roadmap: decoy chat profiles
  • Roadmap: advanced threat detection
  • No message-content telemetry
  • Roadmap: self-hosted relay options
  • Early access to features

Buy IFR

  • Open $IFR on Uniswap
  • Hold at least 2,000 IFR for Pro
  • Hold at least 6,000 IFR for Elite
Buy $IFR on Uniswap

Verify for Stripe discount

IFR token contract: 0x77e99917Eca8539c62F509ED1193ac36580A6e7B (Ethereum Mainnet)

Connect a wallet to prepare signed browser verification. Checkout availability is controlled by the secure payment backend.


Lifetime

Prefer a one-time payment?

Perpetual use of the purchased supported version. Availability, support scope and current price are controlled by VLABS.

StealthX Suite — planned bundle

SecureCall, SecureChat and Chameleon component access. The bundle is not sell-ready until every component passes its release gates.

Current scope, price and availability are controlled by VLABS.

Check VLABS availability

No product is available for paid activation until the VLABS checkout card shows it as available.


Deploy

Ready to secure your comms?

SecureChat Android APK v0.1.7-alpha is available on GitHub Releases. One APK covers Free, Pro, and Elite; paid plans unlock with an activation code after checkout.

Download APK (v0.1.7-alpha) Google Play — coming soon GitHub Release View Source on GitHub

Requires Android 8.0+ · Source-Available · No account required