DigitalValut Logos 72

Peer-to-peer encrypted chat, voice and video calls, and file sharing — directly
between two devices, with no account, no phone number, and no server that ever
sees a message.

Two browsers negotiate a private WebRTC connection and talk to each other
directly. A small relay only ever helps them find each other and, when an
unusually strict network requires it, forwards traffic that is already
encrypted and which it has no key to read. There is no database anywhere
holding conversations.

The relay is a Cloudflare Worker run by the project
(digitalvalut-turn.burbeng78.workers.dev); the connection helpers (STUN/TURN)
are Cloudflare's (stun.cloudflare.com, turn.cloudflare.com). The relay address
is fixed in the app. Its source is in the same repository (turn-worker/), so
anyone can run their own, but using it means rebuilding the app.

How you reach someone

A permanent address (DV-XXXX-XXXX-XXXX) is the SHA-256 hash of a key pair
generated on the device, so it verifies itself: whoever dials it fetches the
published key, checks that it really hashes back to the address dialled, and
only then trusts it. A substituted key produces a different address and is
rejected. Up to eight throwaway addresses can be held alongside the permanent
one, each revocable on its own.

You can also connect by a tappable invite link, or by scanning a QR code in
person.

Knowing who you are really talking to

The first time you connect to someone, both sides see the same three-word
security code, derived from the actual cryptographic handshake — the same
principle used by ZRTP-based secure calling. Read them aloud once; if they
match, nobody is sitting in the middle. That check is bound to the other
person's cryptographic fingerprint, not to a display name.

What it does

• Text, emoji, voice messages, photos, video and files up to 512 MB, sent
uncompressed at original quality
• Photos have their embedded GPS location, device model and software metadata
stripped on-device before sending, without re-encoding the image
• Audio and video calls with screen sharing
• The phone rings even with the app closed, without Google and without Firebase:
a service belonging to the app reads its own encrypted mailbox, and the
question it asks has only yes or no for an answer. It holds no key and can
read nothing; who is calling, and what they wrote, are read by the app when
you open it. It uses more battery than a push notification would, and it is
off until you turn it on
• A sealed letter for someone who does not answer, held up to 7 days, openable
only by the address owner
• Self-destructing messages and optional automatic cleanup of old conversations
• Interface in 13 languages, with right-to-left layout for Arabic and Urdu

Honest limits

Both people need to be online at the same time for a live conversation. That is
the price of having no server, and it is architectural, not a bug.

Your IP address is visible to the person you connect to, as it is in any direct
peer-to-peer connection, unless you switch on "Hide where you are".

About this package

The entire application is inside this package. It is not a wrapper that opens a
website: the app is served from the package's own storage, so what runs on your
phone is what was built from the source in this repository, and it keeps working
when the website cannot be reached at all.

There is no push notification service anywhere in it — no Google Play Services,
no Firebase, no account. The only background service is the app's own, described
above, and it talks to nothing but the same relay the app already uses. Every
cryptographic primitive comes from the system's own Web Crypto implementation.
No third-party script, library or CDN resource is loaded at any point.

Built by Associazione di Promozione Sociale DigitalValut, an Italian nonprofit.
Free forever, with no account and nothing to buy.

License: Apache-2.0