DigitalValut Logos
Encrypted peer-to-peer chat and calls. No account, no server, no phone number.
io.github.digitalvalut.logos
About DigitalValut Logos
Peer-to-peer encrypted chat, voice and video calls, and file sharing — directly
between two devices, with no account, no phone number, and no server that ever
sees a message.
Two browsers negotiate a private WebRTC connection and talk to each other
directly. A small relay only ever helps them find each other and, when an
unusually strict network requires it, forwards traffic that is already
encrypted and which it has no key to read. There is no database anywhere
holding conversations.
The relay is a Cloudflare Worker run by the project
(digitalvalut-turn.burbeng78.workers.dev); the connection helpers (STUN/TURN)
are Cloudflare's (stun.cloudflare.com, turn.cloudflare.com). The relay address
is fixed in the app. Its source is in the same repository (turn-worker/), so
anyone can run their own, but using it means rebuilding the app.
<b>How you reach someone</b>
A permanent address (DV-XXXX-XXXX-XXXX) is the SHA-256 hash of a key pair
generated on the device, so it verifies itself: whoever dials it fetches the
published key, checks that it really hashes back to the address dialled, and
only then trusts it. A substituted key produces a different address and is
rejected. Up to eight throwaway addresses can be held alongside the permanent
one, each revocable on its own.
You can also connect by a tappable invite link, or by scanning a QR code in
person.
<b>Knowing who you are really talking to</b>
The first time you connect to someone, both sides see the same three-word
security code, derived from the actual cryptographic handshake — the same
principle used by ZRTP-based secure calling. Read them aloud once; if they
match, nobody is sitting in the middle. That check is bound to the other
person's cryptographic fingerprint, not to a display name.
<b>What it does</b>
• Text, emoji, voice messages, photos, video and files up to 512 MB, sent
uncompressed at original quality
• Photos have their embedded GPS location, device model and software metadata
stripped on-dev