Elon Musk says XChat brings disappearing messages, but key security questions remain
Elon Musk says XChat is rolling out as a major upgrade to messaging on X, with encryption, disappearing messages, file sharing, and audio and video calls. He also said the system uses Rust and a “whole new architecture,” positioning it as a more modern replacement for X’s older direct messages.
That makes XChat an important product launch for X, especially as Musk continues to push the platform beyond social posting and toward an all-in-one app. But the security story is more complicated than the headline suggests, because some protections are confirmed while others still come with limits.
Access content across the globe at the highest speed rate.
70% of our readers choose Private Internet Access
70% of our readers choose ExpressVPN
Browse the web from multiple devices with industry-standard security protocols.
Faster dedicated servers for specific actions (currently at summer discounts)
X’s own help documentation says message contents, links, media, files, and reactions in encrypted conversations are protected, while metadata such as recipients and creation times are not. The same support page also says the system is not yet forward secure, which means a compromised device key could expose past encrypted messages from that device.
What X has confirmed so far
X says old messages remain in the inbox, but they do not become encrypted automatically. Only messages sent after a conversation upgrades to Chat get encryption, and if the other person has not registered for Chat, a new message may still go out unencrypted.
The company also says users can set disappearing messages, use encrypted group chats, send encrypted files, and verify contacts with safety numbers. It adds that there is no limit to the number of devices that can use Chat on X.
Outside reporting adds a few more rollout details. The Verge reported that Chat launched on iOS and the web first, with Android coming later, and said the new system also supports voice and video calls, editing, deletion, and screenshot controls.
Confirmed features vs open questions
| Area | What appears confirmed | What still needs scrutiny |
|---|---|---|
| Encryption | X says messages, links, files, media, and reactions are encrypted in Chat | Musk’s “Bitcoin-style” encryption label remains vague publicly |
| Disappearing messages | X says users can set messages to delete after a chosen duration | Deletion does not guarantee zero forensic recovery in every scenario |
| Metadata | Content is encrypted | Metadata like recipient and timestamp is not encrypted |
| Device security | PIN-based protection and key backup exist | X says the system is not yet forward secure |
| Identity checks | Safety numbers are available | Broader claims about decentralized identity are not documented in X’s public help page |
Why the self-destruct feature matters
Disappearing messages will likely draw the most attention because they reduce how long sensitive conversations stay visible in an app. For users who want less chat history left behind, that is a meaningful privacy upgrade.
But disappearing messages do not solve every security problem. X says deleted messages are removed from the device and its servers after the set duration, yet the company also admits its current encryption model lacks forward secrecy, which limits how much users should assume from the word “secure.”
That distinction matters because many users will compare XChat with Signal, WhatsApp, or Telegram. X now offers more privacy features than its older direct messages, but its own public documentation shows the system still has gaps that hardened messaging apps have worked for years to reduce.
What this means for users right now
For everyday users, XChat looks like a real messaging upgrade rather than a cosmetic rebrand. It adds encrypted content, richer file sharing, calls, disappearing messages, and a multi-device setup that did not exist in the same form under the older DM system.
For privacy-conscious users, the bigger takeaway is caution. X has documented important limitations itself, including unencrypted metadata, no current forward secrecy, and cases where messages can still be sent unencrypted if the other person has not registered for Chat.
So yes, Musk has launched a more capable private messaging layer on X. But the safest reading today is that XChat raises the privacy baseline on the platform without yet proving it belongs in the top tier of secure messengers.
Key takeaways
- Musk said XChat rolls out with encryption, disappearing messages, file sharing, and audio and video calls.
- X says chat content is encrypted, but metadata still is not.
- X also says the system is not yet forward secure.
- The launch improves privacy on X, but several technical claims still need deeper outside validation.
FAQ
Yes. X says Chat includes disappearing messages that users can set for a chosen duration.
X says Chat encrypts the contents of messages, links, media, files, and reactions. However, it also says metadata remains visible to X.
Musk said XChat supports audio and video calling without a phone number.
That is not something public evidence can confirm yet. X has disclosed limitations, including no forward secrecy at this stage.
Read our disclosure page to find out how can you help VPNCentral sustain the editorial team Read more
User forum
0 messages