🔐 QryptChat
Quantum-Resistant End-to-End Encrypted Messaging
A secure, privacy-focused chat application built with post-quantum cryptography to protect against both classical and quantum computer attacks.
Install the terminal client
curl -fsSL https://qrypt.chat/install.sh | sh
qc
qc is qrypt.chat in your terminal: a full-screen chat client, a CLI and an MCP server
(packages/qryptchat). Remove it with sh ~/.local/share/qryptchat/uninstall.sh.
✨ Features
🛡️ Quantum-Resistant Security
- ML-KEM-1024 Post-Quantum Cryptography - FIPS 203 compliant quantum-safe encryption
- ChaCha20-Poly1305 Symmetric Encryption - Fast, secure message encryption
- End-to-End Encryption with client-side key management and zero server access
- Perfect Forward Secrecy with automatic key rotation and secure key derivation
- Zero-Knowledge Architecture - your private keys never leave your device
- Private Key Import/Export - Secure backup with password and GPG protection
📱 Progressive Web App
- Cross-Platform: Works on iOS, Android, Desktop, and Web browsers
- Offline Support: Queue messages when offline, sync when reconnected
- Desktop Integration: Install as native app with system shortcuts
- Mobile Optimized: Touch-friendly interface with gesture support
- Service Worker: Background sync and caching for optimal performance
🚀 Real-Time Communication & Sync
- WebSocket Real-Time - Instant message delivery and status updates
- Cross-Device Sync - Seamless experience across all logged-in devices
- Multi-Session Support - Stay connected on multiple devices simultaneously
- Live Typing Indicators - See when others are composing messages
- Online Presence System - Real-time availability status
- Message Delivery Status - Sent, delivered, and read receipts
- Auto-Reconnection - Robust connection handling with automatic retry
👥 Social & Communication Features
- SMS Phone Verification - Secure onboarding via Twilio integration
- Contact Discovery - Find friends using verified phone numbers
- Encrypted File Sharing - Share photos, videos, and documents securely
- Enhanced Video Player - In-app video playback with diagnostic tools
- Message Archiving - Archive and restore conversation history
- Disappearing Messages - Auto-delete messages after specified time periods
- Voice & Video Calls - End-to-end encrypted calls with ML-KEM key exchange
- Voice Mode - Talk to a chat (your AI agents) hands free: tap the mic or type
/talk, replies are read aloud (how it works)
🌍 Accessibility & Internationalization
- Multi-Language Support - 6 languages (EN, ES, FR, DE, AR, ZH) with easy switching
- RTL Support - Full right-to-left language support for Arabic and Hebrew
- Dark/Light Themes - System preference detection with manual override
- Responsive Design - Optimized for all screen sizes from mobile to desktop
- Keyboard Navigation - Full accessibility support for screen readers
🏗️ Tech Stack
| Layer | Technology | Purpose |
|---|
| Frontend | SvelteKit 5 + Svelte 5 | Reactive UI framework with runes |
| Styling | Vanilla CSS + Custom Properties | Modern design system with themes |
| Database | Supabase PostgreSQL | User data, messages, and file storage |
| Real-time | Custom WebSocket + Supabase Realtime | Live message delivery & presence |
| Auth | Custom SMS + Supabase Auth | Phone-based verification system |
| SMS | Twilio | SMS verification and notifications |
| Crypto | ML-KEM-1024 + ChaCha20-Poly1305 | Post-quantum encryption (FIPS 203) |
| Key Exchange | ML-KEM (Kyber) + Dilithium | Quantum-resistant key management |
| File Encryption | Multi-recipient PQ encryption | Secure file sharing with metadata |
| PWA | Vite PWA Plugin + Service Worker | Offline-first with background sync |
| I18n | Custom Svelte Store | Multi-language with RTL support |
| WebRTC | Native WebRTC + ML-KEM | Encrypted voice/video calls |
| Testing | Vitest + Custom Test Suite | Comprehensive crypto and integration tests |
🚀 Quick Start
Prerequisites
- Bun 1.4 (package manager and runtime)
- Supabase account
- Twilio account (for SMS verification)
Installation
# Clone the repository
git clone https://github.com/yourusername/qryptchat.git
cd qryptchat
# Install dependencies
bun install
# Set up environment variables
cp .env.example .env
# Edit .env with your Supabase and Twilio credentials
# Run Supabase migrations (if using local Supabase)
pnpx supabase db reset
# Start development server
bun dev
The app will be available at http://localhost:8080 (or the PORT specified in your .env file).
Environment Variables
# Development
PORT=8080
# Supabase
PUBLIC_SUPABASE_URL=your_supabase_url
PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key
SUPABASE_SERVICE_ROLE_KEY=your_service_role_key
# Twilio (for SMS verification)
TWILIO_ACCOUNT_SID=your_twilio_sid
TWILIO_AUTH_TOKEN=your_twilio_token
TWILIO_PHONE_NUMBER=your_twilio_phone
# App
PUBLIC_APP_URL=http://localhost:8080
Using Production API in Local Development
If you want to run the frontend locally while connecting to your production Supabase instance (useful for testing or development without setting up a local database), follow these steps:
1. Get Production Credentials
From your Supabase project dashboard:
- Navigate to Settings → API
- Copy your Project URL (e.g.,
https://xxxxx.supabase.co)
- Copy your anon/public key
- Copy your service_role key (keep this secure!)
2. Configure Environment Variables
Update your .env file with production values:
This is the beginning of the README. Read the rest at the original. Read the full README ↗
