Post-quantum private messaging

Private chat without email, phone numbers, or tracking.

beChat is an anonymous, end-to-end encrypted messenger built on a Double Ratchet Double Ratchet The key-ratcheting construction beChat implements for end-to-end encryption, the same mechanism Signal and WhatsApp use. It generates a brand-new key for every message so a single compromised key does not expose past or future messages. Click for full glossary → construction with a post-quantum handshake (ML-KEM-1024 ML-KEM The post-quantum key-exchange algorithm beChat uses to let two phones agree on a shared secret that a future quantum computer cannot figure out. Standardized by NIST as FIPS 203. Click for full glossary →, ML-DSA-87 ML-DSA The post-quantum signature algorithm beChat uses to prove who sent a message and that it was not tampered with. Standardized by NIST as FIPS 204. Click for full glossary →). The app collects your email, phone number, and analytics data nowhere in the process. The server is zero-knowledge Zero-knowledge (server) A design where the server that runs the service cannot read your data. The beChat server stores only scrambled blobs. It has no key to unscramble them. Think of it as a post office that moves sealed envelopes but cannot open them. Click for full glossary →: it cannot read your messages, and neither can anyone else.

In plain English

beChat is a chat app where only you and the person you're talking to can read your messages. The company that runs it, your phone company, a hacker, and even a future supercomputer all hit a wall.

Here is what that actually means, with no jargon:

  • You register with a code, not your identity. Most chat apps demand your phone number. That number is tied to your real identity and can be hijacked with a SIM swap. beChat gives you a random 8-character code instead, like a gym locker number. It opens your locker; it says nothing about who you are.
  • Nobody can open your messages. Think of the beChat server as a post office that delivers sealed envelopes. It moves envelopes between mailboxes, but it has no letter opener and no master key. The envelopes only open on your phone and your contact's phone.
  • Every message gets its own lock. If someone somehow picked the lock on one message, the other messages would stay sealed. Old locks destroy themselves after one use.
  • Safe against a future supercomputer. Scientists are building a new kind of machine, a quantum computer, that could one day crack today's encryption. beChat uses a new generation of locks that no one, including the quantum computer designers, has found a trick for. So messages you send today stay private for decades.
  • The app itself has no spies inside. beChat skips analytics, ads, crash-reporting tools, and third-party tracking code. The only external service it touches is Google Firebase Cloud Messaging, which delivers Android push notifications with no message content inside the payload. The app does not quietly phone home to big tech.

Want the deeper version? Read What is post-quantum encryption? (explained simply) or browse the plain-English glossary.

Anonymous accounts

Register with an auto-generated 8-character PIN PIN (in beChat) A random 8-character code your phone generates when you install beChat. It is your account identity, like a gym locker number. It is not a password you choose, and it says nothing about who you are. Click for full glossary → and device fingerprint Device fingerprint A unique identifier derived from your phone's hardware. beChat pairs it with your PIN so your account is bound to your physical device, without ever collecting your name, email, or phone number. Click for full glossary →. The app asks for your email, phone number, or name nowhere in the process.

Post-quantum encryption

Double Ratchet Double Ratchet The key-ratcheting construction beChat implements for end-to-end encryption, the same mechanism Signal and WhatsApp use. It generates a brand-new key for every message so a single compromised key does not expose past or future messages. Click for full glossary → plus ML-KEM-1024 ML-KEM The post-quantum key-exchange algorithm beChat uses to let two phones agree on a shared secret that a future quantum computer cannot figure out. Standardized by NIST as FIPS 203. Click for full glossary → and ML-DSA-87 ML-DSA The post-quantum signature algorithm beChat uses to prove who sent a message and that it was not tampered with. Standardized by NIST as FIPS 204. Click for full glossary → for handshake and signatures, with forward secrecy Forward secrecy A property where every message uses its own fresh key, so a key stolen today cannot unlock messages sent yesterday or tomorrow. The Double Ratchet provides this automatically. Click for full glossary → by default.

Zero-knowledge server

The server routes encrypted blobs only. It cannot read message content or plaintext Plaintext The readable, unscrambled version of a message or file. This is what encryption protects. beChat never sends plaintext over the network or stores it on the server. Click for full glossary → attachments. Ever.

Hosted in Europe

Infrastructure runs on an independent European provider, with no big-tech telemetry or hyperscaler cloud.

No tracking SDKs

The app skips analytics, crash reporting, advertising, and third-party data-collection libraries SDK A "software development kit," a bundle of third-party code an app can include. Many apps include analytics or advertising SDKs that quietly collect your behavior. beChat includes none of those. Click for full glossary → entirely.

On-device encryption

Local message data lives in SQLCipher SQLCipher An encrypted version of the database that stores your chat history on your phone. It is locked by your PIN, so without the PIN even someone holding your phone sees only scrambled noise. Click for full glossary →-encrypted storage keyed by your PIN. Attachments are AES-256-GCM-SIV AES-256-GCM-SIV The encryption beChat uses to scramble message content and attachments. It is a hardened variant of AES-256-GCM, the standard the U.S. government approves for top-secret documents, designed to stay safe even if a nonce is accidentally reused. Click for full glossary → before upload.

An anonymous Signal alternative

If you want the encryption of Signal without handing over your phone number, beChat is one of the most private messengers available. It implements the same Double Ratchet mechanism for end-to-end encryption, adds post-quantum protection on top, and registers you with an anonymous PIN instead of a phone number or email.

Learn how beChat works in detail, explore the feature list, read the FAQ, or jump straight to the download page to join the beta.

Frequently asked questions

Quick answers to the most common questions about beChat. For the full FAQ, see the FAQ page.

Do I need a phone number to use beChat?

No. beChat never asks for a phone number, email address, or legal name. When you install the app, it generates an 8-character PIN locally and pairs it with a hardware-based device fingerprint. Your account is identified to the server only by these two values. There is no SIM card, telecom contract, or SMS verification involved.

Can my ISP see my beChat messages?

No, your ISP cannot see the content of your beChat messages. Messages are end-to-end encrypted with a Double Ratchet construction extended with post-quantum cryptography, and the connection to the beChat server is protected with TLS and certificate pinning. Your ISP can see that you are connecting to bechat.world, but it cannot read message plaintext, attachment contents, or the post-quantum handshake. The beChat server itself only stores encrypted blobs and cannot decrypt them either.

Can the beChat server read my messages?

No. beChat is a zero-knowledge messaging architecture. The server stores only your PIN, device fingerprint, public keys, and encrypted message blobs. The plaintext of your messages and attachments is never sent to or stored on the server. There is no server-side key that can decrypt your conversations.

Is beChat end-to-end encrypted?

Yes. beChat implements the Double Ratchet, the same key-ratcheting mechanism Signal and WhatsApp use, so every message uses a fresh key derived from a ratcheting chain. Compromising one message key does not expose past or future messages. Attachments are encrypted with AES-256-GCM-SIV before they leave your device.

Does beChat use post-quantum encryption?

Yes. On top of the classical handshake, beChat performs a post-quantum key exchange using ML-KEM-1024, and signs device and message keys with ML-DSA-87. These are NIST-standardized post-quantum algorithms (FIPS 203 and 204). This protects your messages against "harvest now, decrypt later" attacks where an adversary records ciphertext today to break it once a quantum computer exists.

Is beChat anonymous?

Yes. beChat combines end-to-end encryption (so the server cannot read messages) with anonymous registration (so the server does not know who you are). Accounts are created with an auto-generated 8-character PIN and a device fingerprint. The app collects no email, phone number, or legal name, and ships no analytics, crash reporting, advertising, or third-party data-collection SDKs.

Is beChat a good Signal alternative?

If you want end-to-end encryption without handing over your phone number, beChat is one of the most private Signal alternatives available. It implements the same Double Ratchet mechanism Signal uses for message encryption and adds post-quantum protection on top. The trade-off is that beChat is in open beta on Android and does not yet have the polish or network size of Signal.

Is beChat available for iOS?

Not yet. beChat is in open beta on Android only, distributed through Google Play. An iOS build is planned and the iOS codebase is in development, but there is no public TestFlight or App Store listing at this time. See the download page for current platform status.

Join the open beta

beChat is in open beta on Android. Install from the Play Store:

  1. Install from the Play Store.