Overview

• Access no longer requires X Premium, with availability rolling out more broadly across desktop and mobile.
• Users must opt in and set a four-digit code before starting encrypted conversations with others who have opted in.
• XChat supports media sharing, group chats, pinned messages, and read or unread indicators within end-to-end encrypted threads.
• Legacy direct messages remain in a distinct “unencrypted” tab, so XChat does not replace the existing inbox.
• Security researchers caution against trusting XChat’s current implementation, citing server-stored keys, no perfect forward secrecy, potential insider risks acknowledged by X, and a lack of published open-source details so far.