No accounts, no phone numbers, no nicknames. Messages are encrypted inside your browser; the server only passes on ciphertext it cannot read, keeps no messages, and writes no logs. Open the link, type the passphrase, and enter your room.
No accounts, no friction. Privacy by technical design, not by promises.
No account, no phone number, no nickname. Messages are encrypted in the browser; the server only passes on ciphertext it cannot read, keeps no messages and writes no logs.
Open the address, type the passphrase, and you are in the same room. No app to install; works across phones and computers.
No keyword filters, no moderation, no reporting or banning, no back doors. The server cannot read messages and judges nothing by content. Limits exist only on room size, rate and length to prevent abuse.
One-click on Cloudflare's free tier, one Docker command, an offline LAN, an intranet with no internet, even a single Android phone acting as a Wi-Fi hotspot server.
Three simple steps to start a secure conversation anytime, anywhere.
Open https://chat.freedom8964.com/#your-passphrase. Opening the home page directly generates a random passphrase nobody can guess.
Send the address or the agreed passphrase to your friends. Links do not expire, and the passphrase is wiped from the address bar upon entry.
Everyone opening the same address joins the same room (up to 25 people). The host can lock the room. When everyone leaves, the room vanishes.
Transparent security: exactly what each layer of the network can and cannot observe.
| Who | Can see | Cannot see |
|---|---|---|
| The server operator | Your IP address, when you are online, which connections share a room | Messages, the passphrase, who you are |
| Someone watching the network (ISP, Wi-Fi admin) |
That you connected to this site | Content, passphrase, room |
| People in the room | The messages, and your seat number (1️⃣–🔟, then #11–#25) | Who you are, your IP address |
End-to-End Encryption: Keys come from the passphrase in the browser (PBKDF2 310,000 rounds → HKDF → AES-256-GCM). Messages are padded to fixed sizes before encryption so ciphertexts do not reveal length.
Forward Secrecy & Post-Quantum: Every participant creates an ephemeral key pair; every message uses a one-time key; when someone leaves, everyone rotates keys. Pairwise keys integrate ML-KEM-768 against future quantum decryption. Each message is signed, preventing seat impersonation, and a 20-digit safety code allows verification in person or by phone.
Nothing Kept, Few Traces: No accounts, no message history, no server logs. The room disappears when empty. No cookies, no local storage, caching is disabled, and the browser is instructed to clear site data upon closing.
Encrypted Pictures: Compressed in browser, stripping GPS location and camera EXIF metadata, encrypted with one-time keys inside forward-secret frames.
Tamper Resistance & Host Control: Sender id, timestamp and counter are sealed inside ciphertext; the earliest entrant is the host, who can lock the room or remove disruptive participants.
No Passphrase, No Entry: The server requires an access hash derived from the passphrase; knowing the room address alone cannot seat a connection, lock the room, or post. The passphrase is in the URL hash fragment and is never transmitted over the network.
More than just chat: rooms double as party game tables: the program or the server is the judge, so everyone plays. Click any image for full size.
Current release: v2.23.0. Works without installation directly in any modern browser, or download packages for offline usage.
Add directly to iPhone or iPad Shortcuts to open a private room from your home screen in one tap.
Lightweight Android application with the web page built in, so it is not downloaded from the server each time; chats still go through the online server.
Complete standalone server for Android. Turn on your mobile Wi-Fi hotspot, and your phone becomes an offline chat relay for nearby friends.
Bundled with Node.js runtime. Extract to a USB drive and execute start-lan for air-gapped secure local communications with auto-generated HTTPS.
Standard Docker container images and Caddy-enabled reverse proxy compose setups for VPS, home servers, and local NAS appliances.
No telemetry, no tracking, completely open and verifiable. You are free to run, audit, modify, and redistribute.
Under the MIT License, anyone may host their own instance for free without asking permission. Choose the best method for your setup:
Deploy on Cloudflare's free tier Workers and Durable Objects in minutes. No physical server or maintenance required.
Use your own VPS and domain: run ./pt setup your.domain for automatic HTTPS certificates, upgrades, and one-command rollback.
Deploy the official pre-built container image with isolated runtime and automatic HTTPS reverse proxy via Caddy.
For events, workshops, or completely disconnected networks. Run start-lan from the bundle with its own self-signed HTTPS certificate.
Isolated enterprise networks with zero internet access, with no internet dependency; run a single instance, updates are trial-run first and can be rolled back.
Host the entire chat server from an Android smartphone via Termux or the offline APK; everyone nearby connects over Wi-Fi.
Anyone can verify that the running web page and release packages have not been tampered with.
Each deployed site serves a signed integrity manifest (dist/integrity.json). You can verify any running instance against its cryptographic release signature:
node scripts/verify-site.mjs https://chat.freedom8964.comScript source: scripts/verify-site.mjs.
Every offline and Docker package in a release comes with SHA-256 checksums and a signature by the release key (public key: server/release-key.pem); the updater refuses a package whose signature does not match. Android APK checksums are on their release pages.
# Check release hashes and signatures
https://github.com/Freecode100Year/private-talk/releasesView releases: GitHub Releases Page.