The only encrypted messenger with no phone number, no server, no account — and no metadata. Built on Kaspa BlockDAG for true decentralization. Your conversations exist only on your devices.
Every architectural decision puts your privacy first. No compromises, no backdoors, no exceptions.
XChaCha20-Poly1305 AEAD with X25519 key exchange. Every message gets a unique session key. We can never read your messages.
Your public key is anchored once to the Kaspa BlockDAG. Decentralized identity without a central server. Your identity is yours forever.
Signal-grade Double Ratchet protocol. Compromising one key exposes nothing about past or future messages. Every message is independent.
Messages route through ephemeral Kaspa relay nodes — incentivized with KAS micropayments. No central server to hack, subpoena, or censor.
Encrypted group chats with per-member key derivation. No group server. Group state lives on Kaspa. Members join via QR or NFC.
5-tap instant wipe destroys all messages, keys, and contacts. The app resets to factory state in under a second. Leave no trace.
Send files encrypted end-to-end via Kaspa XFTP protocol. Files are chunked, encrypted, and deleted from relay after delivery.
Works natively with Chameleon Privacy OS. Automatic encryption based on your security rules. One ecosystem, total privacy.
Lock IFR tokens on-chain for lifetime Pro or Elite access. No subscriptions. No renewals. Your tokens stay yours.
Three independent layers. Zero central authority. Every component is replaceable and auditable.
We don't ask for trust. We provide proof. Every claim is auditable in source code.
| Layer | Algorithm | Specification | Library |
|---|---|---|---|
| Symmetric Encryption | XChaCha20-Poly1305 | 256-bit key, 192-bit nonce, AEAD | lazysodium-android |
| Key Exchange | X25519 ECDH | Curve25519 Diffie-Hellman, ephemeral | lazysodium-android |
| Forward Secrecy | Double Ratchet | HKDF-SHA256 ratchet, RFC 5869 | lazysodium-android |
| Identity Signing | Ed25519 | 64-byte signatures, key bundles | lazysodium-android |
| Key Derivation | Argon2id | 64MB memory, 3 iterations, 4 threads | lazysodium-android |
| Key Storage | Android Keystore | StrongBox/TEE, per-use auth | Android API 26+ |
| Identity Layer | Kaspa BlockDAG | GHOSTDAG, PoW, 10 BPS | kaspa-wasm32-sdk |
| Message Padding | PKCS7-style | 256-byte block boundaries | Custom |
The only encrypted messenger with decentralized identity, no server, and blockchain-native architecture.
| Feature | SecureChat | Signal | SimpleX | Telegram |
|---|---|---|---|---|
| No phone number required | ✓ | ✗ | ✓ | ✗ |
| No central server | ✓ | ✗ | ⚠️ | ✗ |
| Decentralized identity | ✓ Kaspa | ✗ | ✗ | ✗ |
| Double Ratchet E2E | ✓ | ✓ | ✓ | ⚠️ opt-in |
| XChaCha20-Poly1305 | ✓ | ✗ AES | ✗ | ✗ |
| STEALTH-DELETE | ✓ | ✗ | ✗ | ✗ |
| Blockchain identity anchor | ✓ Kaspa | ✗ | ✗ | ✗ |
| IFR Token lifetime access | ✓ | ✗ | ✗ | ✗ |
| Chameleon overlay compatible | ✓ | ✗ | ✗ | ✗ |
| GPL-3.0 Open Source | ✓ | ✓ | ✓ | ✗ |
| Zero metadata | ✓ | ⚠️ | ✓ | ✗ |
From architecture to decentralized deployment. Each phase builds on the last.
XChaCha20-Poly1305 + Double Ratchet + Argon2id. StealthX platform architecture. IFR Token integration design. Threat model.
Local E2E encrypted messenger. QR + NFC key exchange. X25519 key management. Room + SQLCipher local storage. Basic UI.
Public key anchoring on Kaspa BlockDAG. Contact discovery by Kaspa address. Ephemeral relay node protocol (SMP-style). KAS micropayment incentives.
Encrypted group chats. XFTP-style file transfer. Onion routing for transport anonymity. Kaspa relay node network launch.
Full migration to StealthX Layer 1 protocol. iOS client (shared Rust crypto core). External security audit. F-Droid + Play Store release.
Lock IFR tokens once. Unlock forever. Works across all StealthX products — one lock, lifetime benefit.
IFR Lock contract: 0x769928aBDfc949D0718d8766a1C2d7dBb63954Eb (Ethereum Mainnet)
· Learn more at ifrunit.tech →
SecureChat is in active development. Pre-alpha builds available on GitHub.
Requires Android 8.0+ · GPL-3.0 Open Source · No account required