How XChat encryption and privacy protections work
A plain-language explanation of XChat keys, PIN recovery, encrypted content, metadata, reporting, and current security limitations.
Posted by
ChatAppReviews EditorialRelated reading
XChat rollout timeline: from X messages to a dedicated app
A source-backed timeline of XChat availability, the dedicated mobile app, and the launch-date details X has not confirmed.
What X says is encrypted
X Help says supported Chat conversations encrypt messages, links, media, files, and reactions before they leave the sender's device. Group messages and media can also be encrypted.
Keys, PINs, and device recovery
Registration creates a private-public key pair and asks the user to set a PIN. X describes using the Juicebox protocol to split and protect key shares so a user can recover encrypted conversations on another device with that PIN.
Important privacy limits
- Conversation metadata such as recipients and creation time is not encrypted.
- Reported messages and associated metadata are sent for review.
- Content sent to Grok for analysis is no longer encrypted for that processing.
- X says the current design is not forward secure.
What users should do
Use a PIN you can retain securely, compare safety numbers for sensitive conversations, keep devices and apps updated, and review the official help page when security behavior changes.
