Security
Built to keep you private
Darkchat is designed from the ground up so your conversations stay yours — and yours alone.
HTTPS / TLS
All traffic between your device and darkchat.web.id is encrypted in transit.
Argon2id password hashing
Passwords are stored as Argon2id hashes — the current industry standard. Never plaintext.
On-device Secret PIN
Your PIN is hashed with SHA-256 + salt and stored in Android Keystore-backed encrypted storage. It never leaves your phone.
Refresh token rotation
Sessions rotate tokens on every refresh. Reuse detection revokes all sessions if a token is compromised.
Encrypted at rest
Message content is encrypted at rest on the server. On your device, messages live in an encrypted local database.
Brute-force protection
Login, registration, and download endpoints are rate-limited against automated attacks.
End-to-end encryption roadmap
Private chat and secret rooms target E2EE using the proven Signal Protocol (libsignal) — we never roll our own crypto.