Handshake
Hybrid post-quantumECDH P-256 + ML-KEM-768
End-to-end encrypted. No accounts, no install, no trace.
No email, no phone, no sign-up. A semi-permanent identity is created on your device — nowhere else.
Invite one person or a group. They join from any browser — nothing to install.
Messages, photos, files and calls are encrypted and disappear on their own. No trace left behind.
Messages, media and calls disappear on their own. No history, no logs, no trace on any server.
ML-KEM-768 + ECDH P-256, Double Ratchet and AES-256-GCM. Cryptography that stays ahead.
Photos seen a single time, then gone. Cancel anything you sent — it disappears on both sides.
Decoy PIN unlock, disguised app mode and voice masking on calls. Privacy under pressure.
Share images, voice notes and documents — all encrypted and ephemeral.
No email or phone. A semi-permanent identity lives on your device. Invite by link, code or QR.
// Messages travel directly between browsers — they never touch our servers in readable form.
✓ yes, by design · ◐ partial or optional · ✗ no
“Amazing app. Super secure, the messages disappear after a minute and the audio is very clear.”
“Super secure, works great and the calls sound crystal clear.”
“Finally a messenger with no account and nothing stored. Exactly what privacy should feel like.”
A complete in-app assistant guides you from the first tap: how to invite, how calls work, what stays private and what disappears. Ask anything, any time.
Open xox in any browser, or get the app. No account. Nothing stored. Ready in seconds.
No. xox never asks for an email, a phone number, or a sign-up. You open a room and share the link or code — that's it.
We combine classic ECDH P-256 with ML-KEM-768, a quantum-resistant key exchange. Even a future quantum computer couldn’t read your conversations.
They are end-to-end encrypted and travel directly between browsers. We don't store them anywhere — when the room closes, they're gone for good.
No. Encryption keys live only in your browser. Our relay servers only ever see encrypted traffic they cannot read.
No account, no phone number, nothing stored, post-quantum in the browser, ephemeral by design — plus duress unlock, disguised mode and voice masking.
Your semi-permanent identity that lives only on your device — contacts, chats, invites and calls in one place. Nothing about it is stored on our servers.
Yes. xox is free to use. It runs on voluntary donations — there are no ads, and we never sell data.
xox works in any modern browser today — nothing to install. There's also an Android app on Google Play and a direct APK.
Send this link to the one person you want to chat with. Keep this tab open until they arrive.
Reaching the other side. This usually takes a few seconds.
Messages, keys, and identities have been wiped from this browser. There was never a copy anywhere else.
Serious inquiries only. We read every message and reply when we can.