P2P Zero-Trust Chat

Decentralized encrypted messenger with P2P messaging, magic room codes, QR/BLE/audio key exchange, and end-to-end encryption.

P2P Zero-Trust Chat is a Chrome extension for private messaging and voice calls between two people. After you connect, messages and audio travel directly between devices over WebRTC — encrypted end-to-end. There is no central chat server storing your conversation history. HOW TO START 1. Create a room and give it a name (stored only on your device). 2. Create a magic code or share your room hash with your peer. 3. Your peer enters the code on the Connect tab. 4. Compare the security code (6 emoji) out-of-band — voice, in person, or another app. 5. Tap “Codes match — I trust”. P2P opens — you can chat and call. KEY FEATURES • End-to-end encrypted text (NaCl / Curve25519 + Ed25519 signatures) • Direct P2P messaging via WebRTC — no plaintext chat on our servers • Magic invite codes (~30 min) for easy pairing • Security code (SAS) verification against man-in-the-middle on first contact • Voice calls over P2P WebRTC audio • Popup or side panel mode, unread badge, desktop notifications • English and Russian interface HOW IT WORKS A lightweight signaling service (signal.vlk.by) helps browsers find each other and exchange WebRTC setup data — like a phone book, not a messenger. It does NOT store your chat text. Encrypted messages go directly peer-to-peer once the channel is open. WHAT WE STORE • On your device: keys, rooms, decrypted message history (local only), settings • On signaling server: temporary public keys, WebRTC offers/answers, magic sessions (~30 min TTL) — no message content, no accounts, no passwords PRIVACY • No analytics, no ads • Private keys never leave your device • Optional link shortening (vlk.by) only when you choose it • Microphone access only for voice calls PERMISSIONS • storage — keys, rooms, messages, settings • offscreen — WebRTC in Manifest V3 • sidePanel — side panel mode • notifications — alerts when chat is closed • signal.vlk.by — signaling only Best for two-party secure chats where you verify your peer via the emoji security code. Not a cloud-synced multi-device messenger.