XChat faces immediate security scrutiny over encryption and privacy claims

X Corp has officially launched XChat, a standalone messaging application designed to compete with industry giants like WhatsApp and Signal.

Released on April 23, for iOS devices, the app allows users to leverage their existing X network for private messaging, file sharing, and encrypted audio and video calls.

Despite the company's bold claims of offering a superior, "privacy-first" experience with no advertisements or user tracking, the app is already under intense scrutiny from the cybersecurity community.

Security experts have raised red flags concerning the app’s proprietary encryption algorithm, suggesting it may not meet the gold standards set by competitors.

While XChat offers robust-sounding features like PIN protection, self-destructing messages, and screenshot prevention, researchers from the beta phase warned that its security model appeared less mature than those of established platforms.

Furthermore, while the app’s marketing promises "no tracking," its App Store privacy label indicates the collection of contact information, identifiers, and usage data linked directly to user identities.

The release of XChat represents a pivot in Elon Musk’s long-term vision for X. Rather than building a single "everything app" that integrates all services into one interface, Musk’s team appears to be unbundling the platform into a suite of specialised, standalone applications.

This shift follows the shutdown of the "Communities" feature due to low engagement. Currently, XChat is an iOS exclusive, requiring iOS 26.0 or later, with no official release date yet announced for Android users.