Elon Musk says XChat brings disappearing messages, but key security questions remain


Elon Musk says XChat is rolling out as a major upgrade to messaging on X, with encryption, disappearing messages, file sharing, and audio and video calls. He also said the system uses Rust and a “whole new architecture,” positioning it as a more modern replacement for X’s older direct messages.

That makes XChat an important product launch for X, especially as Musk continues to push the platform beyond social posting and toward an all-in-one app. But the security story is more complicated than the headline suggests, because some protections are confirmed while others still come with limits.

X’s own help documentation says message contents, links, media, files, and reactions in encrypted conversations are protected, while metadata such as recipients and creation times are not. The same support page also says the system is not yet forward secure, which means a compromised device key could expose past encrypted messages from that device.

What X has confirmed so far

X says old messages remain in the inbox, but they do not become encrypted automatically. Only messages sent after a conversation upgrades to Chat get encryption, and if the other person has not registered for Chat, a new message may still go out unencrypted.

The company also says users can set disappearing messages, use encrypted group chats, send encrypted files, and verify contacts with safety numbers. It adds that there is no limit to the number of devices that can use Chat on X.

Outside reporting adds a few more rollout details. The Verge reported that Chat launched on iOS and the web first, with Android coming later, and said the new system also supports voice and video calls, editing, deletion, and screenshot controls.

Confirmed features vs open questions

AreaWhat appears confirmedWhat still needs scrutiny
EncryptionX says messages, links, files, media, and reactions are encrypted in ChatMusk’s “Bitcoin-style” encryption label remains vague publicly
Disappearing messagesX says users can set messages to delete after a chosen durationDeletion does not guarantee zero forensic recovery in every scenario
MetadataContent is encryptedMetadata like recipient and timestamp is not encrypted
Device securityPIN-based protection and key backup existX says the system is not yet forward secure
Identity checksSafety numbers are availableBroader claims about decentralized identity are not documented in X’s public help page

Why the self-destruct feature matters

Disappearing messages will likely draw the most attention because they reduce how long sensitive conversations stay visible in an app. For users who want less chat history left behind, that is a meaningful privacy upgrade.

But disappearing messages do not solve every security problem. X says deleted messages are removed from the device and its servers after the set duration, yet the company also admits its current encryption model lacks forward secrecy, which limits how much users should assume from the word “secure.”

That distinction matters because many users will compare XChat with Signal, WhatsApp, or Telegram. X now offers more privacy features than its older direct messages, but its own public documentation shows the system still has gaps that hardened messaging apps have worked for years to reduce.

What this means for users right now

For everyday users, XChat looks like a real messaging upgrade rather than a cosmetic rebrand. It adds encrypted content, richer file sharing, calls, disappearing messages, and a multi-device setup that did not exist in the same form under the older DM system.

For privacy-conscious users, the bigger takeaway is caution. X has documented important limitations itself, including unencrypted metadata, no current forward secrecy, and cases where messages can still be sent unencrypted if the other person has not registered for Chat.

So yes, Musk has launched a more capable private messaging layer on X. But the safest reading today is that XChat raises the privacy baseline on the platform without yet proving it belongs in the top tier of secure messengers.

Key takeaways

  • Musk said XChat rolls out with encryption, disappearing messages, file sharing, and audio and video calls.
  • X says chat content is encrypted, but metadata still is not.
  • X also says the system is not yet forward secure.
  • The launch improves privacy on X, but several technical claims still need deeper outside validation.

FAQ

Does XChat have self-destructing messages?

Yes. X says Chat includes disappearing messages that users can set for a chosen duration.

Is XChat end-to-end encrypted?

X says Chat encrypts the contents of messages, links, media, files, and reactions. However, it also says metadata remains visible to X.

Does XChat require a phone number?

Musk said XChat supports audio and video calling without a phone number.

Is XChat as secure as Signal?

That is not something public evidence can confirm yet. X has disclosed limitations, including no forward secrecy at this stage.

Readers help support VPNCentral. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help VPNCentral sustain the editorial team Read more

User forum

0 messages