Is X Chat Really Encrypted? The 4-Digit PIN Question
Part of: Is it encrypted? The app-by-app guideX and X Chat are trademarks of X Corp., named here for comparison and commentary only. We are not affiliated with X.
When X launched its new messaging product, Chat (often called XChat), in November 2025, the announcement promised "end-to-end encrypted chats and file sharing" and, memorably, "no ads. no tracking. total privacy" (CyberInsider, 17 Nov 2025). In April 2026 Chat arrived as a standalone iPhone app with the line "Completely private."
Then the people who test such claims for a living opened it up. What they found is not that X Chat has no encryption. It does. The debate is about who holds the keys, and that turns out to be the whole question.
Short answer: X Chat encrypts one-to-one and group messages and files. But your private key is stored on X's servers, protected by a 4-digit PIN you choose. Researchers argue this lets X, or anyone who gets into X's systems, potentially recover keys. X says keys are split across "Juicebox realms"; a researcher found those realms are all run by X. Metadata such as timestamps and recipient IDs isn't encrypted.
Is X Chat end-to-end encrypted?
X Chat encrypts messages on your device, which is the start of end-to-end encryption. The dispute is about keys: your private key is backed up on X's servers, locked with a 4-digit PIN. Several security researchers say this design means X Chat doesn't meet the usual standard, because the company running the service could, in principle, recover keys.
The usual standard, used by Signal and WhatsApp, keeps private keys on your devices. If you lose all your devices, you lose old messages, and that inconvenience is the proof that nobody else had a copy.
Why does X Chat ask for a PIN?
The PIN lets you restore your encrypted chats on a new phone or on the web. X derives a key from your PIN (using a function called Argon2id) that unlocks your private key stored on its servers. Type the PIN on any device and your history comes back. It is convenient, and it is exactly what worries researchers.
Here's the arithmetic. A 4-digit PIN has 10,000 possible values. Argon2id is designed to make each guess slow, but 10,000 guesses is not many, and CyberInsider argued they could be brute-forced "in minutes" by someone holding the encrypted key (CyberInsider, Sept 2025). The research team Mysk reported that the PIN alone was enough for full message recovery from another device.
What did security researchers find?
Researchers raised five main points: private keys are stored on X's servers behind a short PIN; the "Juicebox realms" meant to split keys are all hosted by X; there's no published independent audit; forward secrecy is missing; and there's no independent key verification to detect a man-in-the-middle.
| Concern (as reported) | Who raised it | Source |
|---|---|---|
| All Juicebox realms hosted under x.com, controlled by X | Mysk | CyberInsider, Apr 2026 |
| No certificate pinning; traffic intercepted during testing | Mysk | same |
| Low-entropy 4-digit PIN; no forward secrecy | Matthew Garrett and others | same |
| "Pretty game-over type of vulnerability" if judged as E2EE | Matthew Green (cryptographer) | CyberInsider, Sept 2025 |
| Metadata (timestamps, recipient IDs) not encrypted | reporting on the design | same |
| X's help page said "we do not offer protections against man-in-the-middle attacks" (for encrypted DMs) | X's own documentation, as reported | The Register, June 2025 |
To be fair to X: a design that splits keys across independently run, hardware-protected servers could answer most of these points. As of our check, we found no published independent audit showing that X Chat works that way. If that changes, we'll update this page.
Are X group chats encrypted?
X Chat group messages use the same design as one-to-one chats: encrypted, with keys backed up on X's servers behind each member's PIN. So the same caveats apply. Groups raise the stakes, because one weak link (any member's PIN) can expose a conversation that belongs to many people.
"X Chat PIN code I never set": what's going on?
Many people meet the PIN screen when X moves their old DMs into Chat. If you never chose one, you're being asked to create it now. Because the PIN is what unlocks your backed-up key, check X's Help Center for what a PIN reset does to your older encrypted messages before you reset it.
Practical advice if you use X Chat:
- Pick a PIN that isn't your birthday, 1234 or 0000. With only 10,000 options, don't make it any easier.
- Treat X Chat as protected from outsiders, not from X. Fine for everyday conversation.
- Move sensitive conversations (documents, money, health, children) to an app with keys kept on your devices.
- Remember metadata. Even with good encryption, X can see who you talk to and when.
How does X Chat compare?
| Checked 5 Nov 2026 | X Chat | Signal | Telegram | |
|---|---|---|---|---|
| Messages encrypted on device | Yes | Yes | Yes | Only Secret Chats (1:1) |
| Group chats encrypted | Yes (same design) | Yes | Yes | No |
| Where the private key lives | X's servers, PIN-protected backup | Your devices | Your devices | Telegram (cloud chats) |
| Independent key verification | Not available (as reported) | Security codes | Safety numbers | Key visual in Secret Chats |
| Independent audit published | Not found | Protocol widely studied | Protocol widely studied | — |
| Phone number required | No | Yes | Yes | Yes |
One genuine strength in X Chat's favour: no phone number required. That's something many privacy-minded people want; Nadeemi doesn't ask for one either.
The real lesson: "encrypted" isn't one thing
The word "encrypted" covers designs where the company can't read your messages, designs where it promises not to, and everything in between. Three questions cut through it, on any app:
- Where do the private keys live? On your devices, or on their servers?
- Who checked? Is there a published, independent audit?
- What's left visible? Metadata, backups, previews, AI features?
We apply the same three questions to ourselves on our what we can and can't see page: in Nadeemi the MLS keys are made and kept on your devices, and we have not yet had an independent audit, so we don't yet call it end-to-end encrypted.
FAQ
Is X Chat really end-to-end encrypted? Messages are encrypted on your device, but private keys are backed up on X's servers behind a 4-digit PIN. Several researchers say that falls short of the usual end-to-end standard, because X could potentially recover keys.
Can X read my X Chat messages? X says its design protects them. Researchers argue the design means X, or someone with access to its servers, could in principle recover keys. Until an independent audit is published, there's no outside proof either way.
Is X Chat safe to use? For everyday chat, it's more protected than X's old DMs. For sensitive conversations, prefer apps that keep private keys on your devices and publish audits.
Do I need a phone number for X Chat? No, which is one of its strengths.
Is there a social network with encrypted DMs where keys stay on my device? That's how Nadeemi works: MLS keys are created and kept on your devices. Its public beta is open now; the label says "end-to-end encryption coming" until an independent audit is published.
Sources (checked 5 November 2026)
- CyberInsider, "X Chat officially launched with encrypted messages and calls" (17 Nov 2025): https://cyberinsider.com/x-chat-officially-launched-with-encrypted-messages-and-calls/
- CyberInsider, "XChat expands roll-out with easy-to-crack 4-digit PIN key" (8 Sept 2025): https://cyberinsider.com/xchat-expands-roll-out-with-easy-to-crack-4-digit-pin-key/
- CyberInsider, "XChat launches standalone iOS app as security concerns remain" (25 Apr 2026): https://cyberinsider.com/xchat-launches-standalone-ios-app-as-security-concerns-remain/
- The Register, "X's new 'encrypted' XChat feature seems no more secure than the failure that came before it" (3 June 2025): https://www.theregister.com/2025/06/03/xs_new_encrypted_xchat_feature/
Names of other apps are trademarks of their owners, used only for comparison. Nadeemi is not affiliated with any of them.
Drafted with AI help and checked by a person on the date above.