Welcome to P2P Messenger
Select a conversation or start a new chat
Private · Peer-to-peer · Live relay
Your conversations.
Your connection.
Your privacy.
A modern messaging platform built for direct, private, real-time communication. Messages deliver live over WebRTC DataChannels with server relay fallback, and your history persists across refresh and reconnect.
🔒 Private by design
⚡ Real-time
◐ No unnecessary complexity
Built for conversations that matter
🔒 Privacy-focused
⚡ Real-time
◈ Peer-to-peer architecture
📱 Cross-device
🛡 Secure authentication
Features
Everything you need to communicate.
Focused on direct conversation — not feeds, not noise. Every feature is built around live, peer-to-peer exchange.
Real-time messaging
Messages appear instantly. Typing indicators, read receipts, and delivery states are relayed live while both peers are connected.
WS signaling + WebRTC DataChannel
Private by design
Messages are stored so your history survives refresh and reconnect, and offline messages wait for you. No feeds, no noise — just your conversations.
Persisted · Synced across sessions
Peer-to-peer architecture
WebRTC DataChannel is tried first for direct transport. If a direct path isn't available, a live server relay delivers without storing.
P2P first, relay fallback
Secure authentication
Per-device JWT sessions with revoke and logout-everywhere, bcrypt passwords, and honest session visibility in Settings.
JWT · bcrypt · per-device revoke
Fast & lightweight
Vanilla JavaScript, no heavy framework. The interface stays responsive on low-end devices and slow networks.
~30 KB shell · instant first paint
Built for the web
No download required. Installable PWA, responsive layout, and voice/video calls right in the browser.
PWA · mobile & desktopHow it works
Four steps. No setup maze.
01
Create your account
Sign up with email and a password. Your identity key is generated locally and never leaves your device.
02
Find your connection
Search for a user, send a friend request, and get notified live when they accept.
03
Start a conversation
Open a direct chat. The app negotiates a peer connection; media and messages flow peer-to-peer when possible.
04
Stay connected
Reactions, replies, edits, files, voice notes, and calls — all live. Nothing is kept after you leave.
Security & privacy
Privacy shouldn't be
complicated.
No inflated claims. The platform is honest about what it does, what it protects, and what is still being improved.
🔒 Secure authentication
Bcrypt hashing, HTTP-only cookies with Bearer fallback, per-device session records and explicit revoke.
⇄ Direct communication
Signaling coordinates peers; content flows peer-to-peer when possible, with live server relay and offline queue as fallback.
◈ Minimal data exposure
Accounts, friendships, and conversation membership are stored. Messages are not. Push notifications carry titles only.
👤 User-controlled
Block enforcement tears down P2P and relay paths, mutes, pins, and report flows are built in.
End-to-end encryption
The app implements ECDH P-256 + HKDF + AES-GCM with keys in IndexedDB. Public bundles are exchanged over authenticated signaling.
Honest status: encryption is active when a session exists and is shown live in Settings. Without a session the app sends plaintext over the P2P/relay path. There are no safety numbers yet, so peer identity is not independently verified.
See docs/encryption.md for the full threat model and verification steps.
Product
See the actual product.
Screenshots from the running application — not illustrations. Every panel below reflects a real view.
💬 MessagingLive in the app
Can you send the voice note again? I missed it.
▶ 0:14 — recorded right in the chat. No server upload.
Reactions, replies, edits, deletes, forwards, search, read receipts — all live between browsers.
✓✓Delivered
👁Read receipts
…Typing
👥 ContactsFriends · Requests · Blocked
🔍 Search users➕ Add friend✓ Accept / ✕ Decline⛔ Block & enforce
Friend requests are realtime. Blocking tears down any active P2P connection and drops further relay frames for that peer.
🛡 SecuritySettings · live status
E2EE ready — encrypted session with peer
Connected: direct P2P DataChannel
Displayed verbatim in Settings. No hidden fallback — plaintext is shown when no session exists.
Why this platform
Focused on conversation.
Not a critique of other tools — just a clear description of this one's philosophy.
Traditional messaging
This platform
Interface
Complex, feature-crowded
Simple, focused experience
Architecture
Centralized, history-heavy
P2P-focused, history that persists
Privacy
Often hidden in settings
Clearly communicated upfront
Scope
Tries to do everything
Does one thing — direct chat — well
Storage
Long-lived history by default
Nothing stored; history vanishes
Experience
Messaging without the clutter.
Clean conversationsReplies with quotes, reactions, edits, deletes, forwards, and in-conversation search — without visual noise.
Simple navigationChats · Friends · Requests. Desktop sidebar and mobile bottom nav stay predictable across screen sizes.
Fast interactionsOptimistic UI, live presence, and chunked P2P file progress — responsive even without a server round-trip.
Responsive by defaultDesigned mobile-first from 320 px to large screens. Touch gestures, safe-area insets, no horizontal scroll.
FAQ
Questions, answered honestly.
A peer-to-peer messenger with real message history. Accounts, friendships, and messages are stored so your conversations survive refresh and reconnect; live delivery happens over WebRTC with server relay fallback.
The server handles signaling and live delivery. Messages are persisted so offline recipients receive them on reconnect; direct peer connections are used for calls and media where possible.
When a session exists, messages and files are encrypted with
ECDH P-256 + HKDF-SHA256 + AES-GCM; keys live only in your browser's IndexedDB. Without a session the transport is plaintext over the P2P/relay path — the Security panel in Settings shows the live state. Peer identity is not yet verified with safety numbers.No. It runs in the browser on desktop and mobile. On supported browsers you can install it as a PWA for a standalone shell; messaging still requires a network connection.
Yes. The layout is responsive and touch-friendly (320 px → large screens), with a bottom navigation on small screens, voice messages, and file transfers.
Email + password (bcrypt). Sessions are JWTs stored as HTTP-only cookies (with Bearer fallback) and tracked per device so you can revoke one session or log out everywhere.
Messages are not queued. If the peer is offline they are not delivered and not stored for later — the platform is live-only by design. Presence indicators show who is online.
Accounts, friendships, blocks, and message history are stored so conversations persist. Logging out clears local keys and cached state. See
docs/known-limitations.md for the full scope.Yes — create an account and start messaging. There are no paid tiers in the current implementation.
Ready to start a better
conversation?
Create your account and experience a simpler approach to real-time communication — direct, persistent, and honest about its limits.