X Launches XChat: A Standalone Encrypted Messaging App

X launched XChat on iOS on April 24, 2026, a standalone encrypted messaging app that pulls the platform’s direct messaging out of the main app and into its own dedicated space.

The pitch is pretty straightforward: end-to-end encrypted chats, video calls, disappearing messages, and screenshot blocking, all wrapped in an ad-free package. If you’ve used X’s existing DMs and thought “this feels like a bolt-on feature that the company never really cared about,” you were probably right, and XChat is apparently the answer to that.

The TechCrunch piece on the iOS launch describes it as “a key piece to the strategic vision for the company,” which is the kind of corporate framing you hear when something has been in planning for a while. Whether it actually delivers on that vision is what I wanted to think through here.

The Macro Case (And Why It’s Actually Interesting)

Encrypted messaging has been a genuinely contested space for years. Signal holds a particular kind of trust among the privacy-first crowd, and for good reason. WhatsApp has a billion-plus users but lives inside Meta’s infrastructure, which makes a lot of people uncomfortable in ways that are hard to fully articulate but also completely reasonable.

The problem is that both of those apps require you to hand over a phone number. That’s a real friction point, especially for people who’ve built their social presence around a pseudonymous handle. X’s existing user base skews toward people who care about that distinction.

So there’s a real gap in the market XChat is trying to fill. Connect with someone you only know from X, in an encrypted channel, without exchanging personal contact information. That’s not nothing. According to data from Yahoo Finance, the U.S. premium messaging market sat at $31.46 billion in 2026 and is projected to hit $57.12 billion by 2035. Some fraction of that growth is obviously going to whoever can convince power users that their app is the secure, premium option.

XChat is betting it can be that app for the X-native crowd.

What XChat Actually Ships

Let’s go through what’s confirmed. End-to-end encryption is the baseline. Screenshot blocking is in there, which is more than most mainstream messaging apps bother with. Disappearing messages give users the kind of ephemeral communication Signal users have had for a while. Video calls are included, which puts it in direct competition with FaceTime, Signal’s video feature, and whatever WhatsApp is doing this week.

It’s ad-free. That’s worth stating clearly because it matters for the credibility of the privacy framing. You can’t really claim to offer a private messaging experience and then serve ads against the content of those messages. The fact that they’re launching without ads is either a genuine commitment or a placeholder until monetization pressure kicks in.

I’ll be honest: the feature list reads like a competent Signal clone with a different social graph attached to it. That’s not an insult. Signal’s feature set is basically the gold standard for what a private messaging app should do, so matching it is the right call.

The Skeptic’s Corner

Here’s where I have to be honest about the structural weirdness of covering this product on HUGE, which exists specifically to spotlight independent builders. XChat comes from X, which is not an independent maker by any reasonable definition. It’s a major social platform with hundreds of millions of users and a complicated corporate history. This is the kind of product that ordinarily sits outside our lane.

But the launch is real, the product is live, and the privacy questions it raises are worth thinking through regardless of who built it. So we’re covering it.

The skeptic’s case against XChat is pretty simple: you are placing your private encrypted communications inside an app that runs on infrastructure owned and operated by X Corp, a company that has made significant, public changes to its moderation policies, staff, and stated priorities over the past few years. Encryption is only as trustworthy as the implementation, and independent audits of that implementation don’t appear to exist yet, at least not in anything I could find.

There’s also the question of what “connect with anyone on X” actually means in practice. To receive your messages, the other person still needs an X account, which means X still knows who both of you are even if it can’t read the message content.

Kate O’Flaherty interviewed Varun Badhwar, CEO & Founder of Endor Labs, for a Forbes piece on the launch, and the framing there was worth reading. Security researchers generally want to see the cryptographic implementation spelled out before they’ll sign off on any app’s privacy claims.

None of this is unique to XChat. These are questions you’d ask about any encrypted messaging app. But they’re worth asking here because the marketing language is confident, and confident marketing language about privacy deserves scrutiny.

The DM Problem X Has Always Had

X’s DMs have been, for most of the platform’s history, an afterthought. The product design was clunky. The notification behavior was inconsistent. There was no encryption for years while every other serious messaging product was moving toward it. People who wanted to communicate privately with someone they knew from X mostly did it by exchanging contact info and moving to a different app entirely.

That’s a real product failure. Every time a user migrates out of X to send a private message, that’s engagement and context X doesn’t capture. A standalone app with a real feature set is the obvious structural fix, and it’s a little surprising it took this long to ship.

The standalone format matters. Messaging apps that live inside a larger social app tend to feel secondary. Instagram DMs are fine for their purpose but nobody thinks of them as their primary secure communication channel. Pulling the feature into its own app signals a different level of investment, even if that signal can be faked.

The Product Hunt Signal

It did well enough on launch day to hit the daily top five, which for a product with this kind of backing is honestly not a blowout. The community there has opinions about X-origin products that don’t always run in X’s favor.

The Product Hunt listing notes four comments at the time of writing, which is low. Low comment counts on Product Hunt usually mean one of two things: the product speaks for itself and nobody has questions, or the community isn’t sure what to make of it yet. Given the nature of what XChat is, I’d bet on the second one.

Who This Is Actually For

The clearest use case is journalists and sources. If you’re a reporter who cultivates sources on X, and those sources want to communicate off the record, you currently have to negotiate a channel switch. XChat, if the encryption holds up to scrutiny, removes that step. Same logic applies to researchers, activists, and anyone who communicates professionally through their X presence.

The second use case is pseudonymous communities. X has a lot of people who operate under handles and would rather keep it that way. Encrypted messages tied to those handles, rather than to phone numbers or email addresses, is a meaningful privacy upgrade for that group.

The third is the mainstream user who just wants a cleaner messaging experience than the current DMs and doesn’t want ads. That’s a large group in theory but historically hard to move from their existing habit.

The Reality Check

The Electronic Frontier Foundation has been tracking encrypted messaging standards for a long time and their framework for evaluating these apps is worth reading before you migrate your private communications anywhere. The short version: end-to-end encryption is necessary but not sufficient. You want forward secrecy, open source code, and a company that has a track record of resisting legal pressure on user data.

XChat’s track record is zero days old as of this writing. That’s not a condemnation. Every app starts there. But it means the confidence level on any privacy claim should be calibrated accordingly until independent researchers have had time to look at the implementation.

The feature set is solid. The timing makes sense given where messaging apps are headed. The open questions about the underlying implementation are real but also standard for any new entrant in this space, not specific to XChat.

If you’re already deeply embedded in X and you want an encrypted channel with people you know from there, this is probably worth trying. If you’re making trust decisions about sensitive communications, wait for the audit.