A New Era of Private, Encrypted
Communication.
Private, encrypted communication—without a phone number, email, or identity. Stay private. Stay in control of who can reach you and what you share.
Also Available on
Private Communication - Verified Cryptography
At xPal, our mission is to protect that right: to communicate freely and securely.
Desktop Experience You’ve Been Waiting For.
Also Available on
Now validated under the
The federal standard for cryptographic correctness.
View Certification >
Encrypted File Vault and secure Cloud Storage
With xPal, you don't register with a phone number. You receive a private 9-digit xID: your global encrypted communication passport.
No country codes or area codes needed.
No tracking.
No personal data needed, accessed, or stored.
Only secure communication between xIDs.
End-to-End Encrypted Calls. No phone number or email needed. You will get your own xID: a 9-digit unique identifier for free.
Clear ALL of your communication history, including call history, messages, and shared media, from both the sender's and the receiver's device, by entering your PIN in reverse.
Terminate™ gives you strong control over your conversations by erasing an entire chat history from your device and, once the command is received and processed, from the recipient’s device. Both your messages and their replies are removed from supported, connected xPal clients.
Private Group Messaging with end-to-end encryption and Privacy.
Automatically delete messages from both sender and receiver devices after a preset length of time after they are seen.
Automatically strips all metadata from shared media before it is encrypted and sent.
We DO NOT access your Contacts or any data on your device.
xPal is not a consumer chat app making encryption claims.
It is a privacy-first platform built on certified cryptographic foundations:
NIST CAVP algorithm validation (A7969).
View Certification >
Dekra Independent Cybersecurity Audit & Certification
View Certification 2026 >
View Certification 2025 >
View Certification 2024 >
View Certification 2023 >
Google CASA/MASA Certification (App Defence Alliance)
View Certification >
Secure Development Practices
In accordance with the OWASP Secure Coding Practices.
Secure Development Practices aligned with
OWASP Standards
View List >
The xID®, a unique 9-digit global communication passport, empowers you to securely text and make audio and video calls worldwide without needing country or area codes.
Your xID® lets you connect without exposing a personal phone number, giving you greater control over who can reach you.
The xID®, a unique 9-digit global communication passport, empowers you to securely text and make audio and video calls worldwide without needing country or area codes.
Your xID® lets you connect without exposing a personal phone number, giving you greater control over who can reach you.
Not your Name
Not your Phone Number
Not your contacts
Not your Email Address
Not your Location
xPal Messenger is built with privacy and security at its core to give our members peace of mind.
Will erase all message history from your phone and recipients’ , including their encrypted texting with you on their phone
Will allow you to instantaneously clear ALL of your communication history by entering your PIN in reverse. All communications, including call history, messages and shared media (photos/videos) will be immediately cleared from both the sender's and the receiver's device. Your contacts are protected and will be hidden until you log in with your contact PIN.
Read More >Suppose your PIN
Enter PIN in Reverse
All your data/chats are now wiped out totally and your contacts are just temporarily masked.
Terminate™ gives you strong control over your encrypted texts by erasing an entire chat history from your device and, once the command is received and processed, from the recipient’s device. Both your messages and their replies are removed from supported, connected xPal clients.
All audio and video calls are end-to-end encrypted and use peer-to-peer
communication
where a direct connection is available. When it is not, encrypted media may be routed through relay servers, which are not intended to decrypt call content.
All audio and video calls are encrypted and use peer-to-peer communication where a direct connection is available. When it is not, encrypted media may be routed through relay servers, which are not intended to decrypt call content.
Private Group Messaging with
End-to-End Encryption and Privacy to Protect
Every Member.
Private Group Messaging with End-to-End Encryption and Privacy to Protect Every Member.
This feature can be enabled on a per-chat basis. Use this security feature to automatically delete messages from both sender and receiver devices after a preset length of time after they are seen. You choose the life of the message from 30 seconds to a day.
Built into xPal Private Messenger, this feature automatically strips all
metadata from shared media before it is encrypted
and sent.
Built into xPal Private Messenger, this feature automatically strips all metadata from shared media before it is encrypted and sent.
Enter a Decoy PIN to hide your real data, use your regular PIN to restore access.
Learn More >
Offline-Lock is a powerful privacy and security feature that prevents your chats from being accessed offline.
Learn More >
Remote WipeoutTM enables you to wipeout the entire xPal data in the lost device.
Learn More >
Delete all conversations and history this device after 7, 14, or 30 days if the app remains inactive.
Learn More >
xPal messaging app DO NOT access your Contacts or any data on
your device. Invite Friends accept invites and be
in control of access to your xPal xID®
xPal messaging app DO NOT access your Contacts or any data on your device. Invite Friends accept invites and be in control of access to your xPal xID®
Personalize your chats with custom wallpapers and vibrant bubble colors. Make every conversation uniquely yours.”
*Preview only—more options in the app!
xPal Messenger security validations and assessments:
Secure Development Practices: In accordance with the OWASP Secure Coding Practices.
xPal Messenger security validations and assessments:
App Defense Alliance CASA assessment completed in 2024 (historical report; see scope and dates on the linked certificate).
DEKRA Testing and Certification, S.A.U Security Evaluation framework.
Secure Development Practices: In accordance with the OWASP Secure Coding Practices.
xPal security validations and assessments:
App Defense Alliance CASA assessment completed in 2024 (historical report; see scope and dates on the linked certificate).
DEKRA Testing and Certification, S.A.U Security Evaluation framework.
Secure Development Practices: In accordance with the OWASP Secure Coding Practices.
List of certified MASA Certificates and OWASP Security Standards
