FAQS

Welcome to xPal Help center

How can we help you?

Frequently Asked Questions

Have Questions? We're here to help

The Basics
What is required to sign up with xPal and start using it?
A very simple two-step process: choose a username and set a 4-digit PIN. That is it. It only takes a few seconds to sign up and start communicating privately and securely anywhere in the world.
You will be assigned your own unique global 9-digit xID. You can communicate to anyone with a xID anywhere in the world without the need for an area code or country code.
Once you sign up, simply add friends and family from within the xPal app. Once they accept your invite, you can start texting or audio and video calling with them.
Do I need a mobile number or email to sign up and use xPal?
No. All you need is a username and a 4-digit PIN of your choice. That is it.
What is xID®?
xID is a unique global 9-digit number assigned to you once you register on xPal. It is your private masked identity on the xPal platform. It will enable you to send encrypted text, make encrypted and secure audio and video calls to any other xID globally, without the need for an area code or country code.
To communicate with other xIDs you will need to invite your family or friends to get their own xIDs. Registration is a simple process that only takes a few seconds. Simply tap the add friends button and choose which friend to invite. Once they receive your invite, all they have to do is tap on the link they received. Upon completion of a quick two-step registration, they will be added to your contacts and you will be added to theirs. At that point, you can start communicating privately, securely , and anonymously with them.
The xID®, a unique 9-digit global communication passport, empowers you to securely text and make audio and video calls worldwide, to other xIDs without needing country or area codes. Your xID® serves as your digital armor, protecting your privacy and maintaining your anonymity whenever and wherever you choose.
View All...
Security and Privacy
How secure is xPal?
Overview of End-to-End Encryption method:
xPal uses a key exchange protocol which combines the Double Ratchet algorithm, PreKeys, the triple Elliptic-curve Diffie–Hellman (3-DH) handshake, and Curve25519. xPal also uses AES-256, and HMAC-SHA256 as primitives. This means that the messages and content exchanged through the xPal messenger application are encoded in such a way that only the intended recipient can decrypt the communication. No one, not even xPal administrators, can access the content of your communication with other users on the xPal platform. All our cryptographic processes, whether for data at rest or data in transit, adhere to the rigorous standards set forth in FIPS 140-2 cryptographic requirements. This standard ensures that our cryptographic implementations meet the highest levels of security and compliance, providing you with confidence in the protection of your data.
Third-Party Audit:
The xPal mobile platform has successfully completed several cybersecurity audits and been awarded certifications by one of the most reputable information security companies: DEKRA, which is a Google partner. The success of the audit resulted in Google granting the xPal application with a badge of recognition on the Google Play Store. This badge signifies that our platform meets rigorous security standards and can be trusted for secure communication.

xPal was awarded the following certifications:
App Defense Alliance/CASA Certification with PASS on every area of testing.

DEKRA Testing and Certification, S.A.U Security Evaluation framework

View Certification 2023  >
View Certification 2024  >

Secure Development Practices:
In accordance with the OWASP Secure Coding Practices.

List of certified MASA Certificates and OWASP Security Standards

View List >

These are the forms that we received.
Strong Encryption Standards:
xPal uses AES 256 encryption, an industry-standard and highly secure encryption algorithm, to protect the confidentiality and integrity of data at rest.
Communication Integrity:
All communications are transmitted via TLS 1.3 encrypted channels to ensure the integrity and confidentiality of the data in transit between users.
What data does xPal collect on its members?
A username of your choosing. That’s it. No personal data of any member is ever collected or stored.
How can I find out what personal information is collected by an app, if any?
That information can be found on the App Store or Google Play Store. In the App store, simply search for the desired app and open the description page. Scroll down to the App Privacy section. There you will be able to see what data the app developers collect. In Google the Play Store, you can open the app page and tap the App Permissions to view the app’s data collection. xPal does not collect any personal data related to you.
Why we can not send Gifs?
GIFs can sometimes contain malicious code or exploit vulnerabilities in the application, leading to potential security threats such as data breaches or unauthorized access. To protect the security of our members, we do not allow GIFs to be sent with xPal.
Do ISPs know the IP addresses of both parties during a peer-to-peer call?
xPal uses relay server for peer-to-peer (P2P) calls, the exposure of IP addresses is handled differently:
  1. Relay Server: A relay server acts as an intermediary between the calling and receiving parties. Instead of establishing a direct connection, both parties connect to the relay server, which then forwards the data packets between them.
  2. IP Address Masking: With a relay server, the IP addresses of the calling and receiving parties are not directly exposed to each other. Instead, each party only sees the IP address of the relay server.
  3. ISP Visibility: While your ISP can still see that you are connected to the relay server, it cannot see the IP address of the other party in the call. This adds an extra layer of privacy, as the direct IP addresses of the participants are hidden from each other and from their respective ISPs.
Why is xID® safer than a username?
xID® offers several security and privacy advantages over traditional usernames:
  1. Anonymity: Unlike usernames, which can often be linked to your personal identity or other online accounts, xID® is a random 9-digit number that doesn’t reveal any personal information. This ensures your identity remains anonymous.
  2. Privacy: With xID®, your communications are masked and encrypted, meaning your real identity is protected. Usernames can sometimes give away personal information or be used to track your online activity across different platforms.
  3. Security: xID® enhances security by using encryption for all texts, audio, and video calls. This encryption ensures that your communications cannot be intercepted or accessed by unauthorized parties. Usernames typically do not come with built-in encryption or the same level of security.
  4. Global Usability: xID® eliminates the need for country or area codes, simplifying global communication. This unique identifier ensures that your communications are routed securely and efficiently, regardless of location.
  5. Simplified Management: Managing contacts through xIDs is straightforward and secure. Unlike usernames, which can be reused or replicated across different platforms, each xID® is unique and cannot be duplicated, reducing the risk of impersonation.
By utilizing xID®, you gain a more secure, private, and anonymous way to communicate, protecting your identity and ensuring your data remains safe.
How can members in countries facing economic hardships and censorship request a complementary upgrade?
We recognize the challenges faced by users in countries dealing with significant economic hardships and censorship. To support these members, we offer a complementary upgrade to our premium services. Here’s how you can request this upgrade:
  1. Eligibility Criteria:
    • Members from countries currently experiencing economic difficulties or censorship issues can request a complementary upgrade.
  2. Request Process:
    • Contact Support: Reach out to our customer support team through the app by sending a message to xID: 123 456 789.
    • Provide Country Information: When making the request, simply mention the country you are currently residing in. No additional proof of hardship is required.
  3. Features of the Complementary Upgrade:
    • Full Access: Receive full access to premium features, including unlimited secured and encrypted texts, audio and video calls anywhere in the world. And the ability to send and receive hi definition photos and videos.
    • Privacy and Security: Utilize enhanced security features to ensure safe and private communication, helping to bypass censorship where necessary.
  4. Duration and Renewal:
    • The complementary upgrade will be provided for a set period, with the possibility of renewal based on the ongoing situation in your country. Typically upgrades are done for one year at the time.
    • Our team will periodically review the conditions in eligible countries to extend or update the complementary access as needed.
Why We Offer This Program: We are committed to ensuring that everyone has access to secure and private communication tools, regardless of their economic status or political environment. By offering this program, we aim to support users in challenging situations, enabling them to stay connected and protected.
For more details or to request a complementary upgrade, please contact our support team through the app or visit our website.
View All...
Advanced Features
How can I activate the disappearing messages (Flicker™ Mode)?
In a chat window, simply tap the Clock icon in the right-hand side of the text bar and set the timer for your disappearing messages. You can turn it off at any time by tapping the clock icon again and selecting the Off option.
Can I erase the chat history with someone including their conversation with me on their own phone (Terminate™)?
Yes. This feature has been invented by xPal to allow its users to delete entire conversations with a recipient, including their conversations with you, on their own device. Also, it will remove your xID from their contact list and block any future communication with that recipient.
This Terminate™ feature is very valuable when a member decides to terminate a relationship with the recipient for any reason and would like to erase the entire history of their interactions on both ends.
What is Photo & Video Sanitizer™?
xPal deploys a state-of-the-art method to strip any and all media files or documents of all metadata prior to encrypting, compressing, and sending these files. This process is xPal’s own Sanitizer™. This mechanism is intended to protect the sender from unknowingly sending unwanted information attached to such files such as location, date, time, device, etc….
View All...
Gold Membership
What payment methods I can use to upgrade to Gold Stage membership?
• You can upgrade to Gold Stage membership several ways:
• If you download the app from the App Store, you can use the Apple Pay to subscribe.
• If you download the app from the Google Play Store, you can use Google Pay to subscribe.
• Users can also upgrade their xID through the xPal website.
What is the difference between the Free membership and the Gold membership?
Although both utilize the same exact privacy and security features such as end-to-end encryption and encryption of data at rest, there are limits/restriction for the Free accounts that are not in the Gold accounts.
Feature
Free
Gold
End-to-end encrypted text messages
Unlimited
Unlimited
Secure audio calling outgoing
Unlimited
Unlimited
Secure audio calls incoming
Unlimited
Unlimited
Secure Video Calling outgoing
60 min / day
Unlimited
Secure Video Calls incoming
60 min / day
Unlimited
Video Sending in compressed mode
Unlimited
Unlimited
Video Sending in HD uncompressed
N/A
Gold Only
Image sending in compressed mode
Unlimited
Unlimited
Image Sending in HD uncompressed
N/A
Gold Only
Ristrict download of images/videos
Unlimited
Unlimited
Group members limit per group
50
100
Terminate™ mode
Unlimited
Unlimited
Flicker™ Disappearing Messages
Unlimited
Unlimited
Total Wipeout™ reverse PIN
Unlimited
Unlimited
Photo & Video Sanitizer™
Unlimited
Unlimited
Multiple xIDs on one device
3 xIDs
3 xIDs
Remote Wipeout™
Unlimited
Unlimited
Is the security and privacy different between Free and Gold memberships?
No. The ultra secured end-to-end encryption and security features of xPal are the same for the Free membership as well as the Gold Stage. The only difference is that the Gold membership offers unlimited audio and video calls, and the ability to send and receive high quality, uncompressed images and videos. Security and privacy of communications, as well as transmission and storage of data is exactly the same.
View All...
Groups
How many group members can I add using my Free account?
You can add up to 50 members per group created using the Free membership. With the Gold upgrade, you can add up to 100 members per group.
Can everyone in the group see my xID®?
No. The only ones that can see your xID in a group are those who you have in your Contact list and who have you on their Contact list. Everyone else will only see your username/screen name.
How to setup a group chat?
It’s very simple. Choose the New Group icon from top left of the main page.
New group name.
Choose participants from your contact list. Free accounts are able to add up to 50 members in one Group; Gold members are allowed up to 100 members.
Tap Create from the top right of the screen
View All...

Need more help?

Reach out to us for any inquiry

Frequently Asked Questions
The Basics
What is required to sign up with xPal and start using it?
A very simple two-step process: choose a username and set a 4-digit PIN. That is it. It only takes a few seconds to sign up and start communicating privately and securely anywhere in the world.
You will be assigned your own unique global 9-digit xID. You can communicate to anyone with a xID anywhere in the world without the need for an area code or country code.
Once you sign up, simply add friends and family from within the xPal app. Once they accept your invite, you can start texting or audio and video calling with them.
Do I need a mobile number or email to sign up and use xPal?
No. All you need is a username and a 4-digit PIN of your choice. That is it.
What is xID®?
xID is a unique global 9-digit number assigned to you once you register on xPal. It is your private masked identity on the xPal platform. It will enable you to send encrypted text, make encrypted and secure audio and video calls to any other xID globally, without the need for an area code or country code.
To communicate with other xIDs you will need to invite your family or friends to get their own xIDs. Registration is a simple process that only takes a few seconds. Simply tap the add friends button and choose which friend to invite. Once they receive your invite, all they have to do is tap on the link they received. Upon completion of a quick two-step registration, they will be added to your contacts and you will be added to theirs. At that point, you can start communicating privately, securely, and anonymously with them.
The xID®, a unique 9-digit global communication passport, empowers you to securely text and make audio and video calls worldwide, to other xIDs without needing country or area codes. Your xID® serves as your digital armor, protecting your privacy and maintaining your anonymity whenever and wherever you choose.
View All...
Security and Privacy
How secure is xPal?
Overview of End-to-End Encryption method:
xPal uses a key exchange protocol which combines the Double Ratchet algorithm, PreKeys, the triple Elliptic-curve Diffie–Hellman (3-DH) handshake, and Curve25519. xPal also uses AES-256, and HMAC-SHA256 as primitives. This means that the messages and content exchanged through the xPal messenger application are encoded in such a way that only the intended recipient can decrypt the communication. No one, not even xPal administrators, can access the content of your communication with other users on the xPal platform. All our cryptographic processes, whether for data at rest or data in transit, adhere to the rigorous standards set forth in FIPS 140-2 cryptographic requirements. This standard ensures that our cryptographic implementations meet the highest levels of security and compliance, providing you with confidence in the protection of your data.
Third-Party Audit:
The xPal mobile platform has successfully completed several cybersecurity audits and been awarded certifications by one of the most reputable information security companies: DEKRA, which is a Google partner. The success of the audit resulted in Google granting the xPal application with a badge of recognition on the Google Play Store. This badge signifies that our platform meets rigorous security standards and can be trusted for secure communication.

xPal was awarded the following certifications:
App Defense Alliance/CASA Certification with PASS on every area of testing.

DEKRA Testing and Certification, S.A.U Security Evaluation framework

View Certification 2023  >
View Certification 2024  >

Secure Development Practices:
In accordance with the OWASP Secure Coding Practices.

List of certified MASA Certificates and OWASP Security Standards

View List >

These are the forms that we received.
Strong Encryption Standards:
xPal uses AES 256 encryption, an industry-standard and highly secure encryption algorithm, to protect the confidentiality and integrity of data at rest.
Communication Integrity:
All communications are transmitted via TLS 1.3 encrypted channels to ensure the integrity and confidentiality of the data in transit between users.
What data does xPal collect on its members?
A username of your choosing. That’s it. No personal data of any member is ever collected or stored.
How can I find out what personal information is collected by an app, if any?
That information can be found on the App Store or Google Play Store. In the App store, simply search for the desired app and open the description page. Scroll down to the App Privacy section. There you will be able to see what data the app developers collect. In Google the Play Store, you can open the app page and tap the App Permissions to view the app’s data collection. xPal does not collect any personal data related to you.
View All...
Advanced Features
How can I activate the disappearing messages (Flicker™ Mode)?
In a chat window, simply tap the Clock icon in the right-hand side of the text bar and set the timer for your disappearing messages. You can turn it off at any time by tapping the clock icon again and selecting the Off option.
Can I erase the chat history with someone including their conversation with me on their own phone (Terminate™)?
Yes. This feature has been invented by xPal to allow its users to delete entire conversations with a recipient, including their conversations with you, on their own device. Also, it will remove your xID from their contact list and block any future communication with that recipient.
This Terminate™ feature is very valuable when a member decides to terminate a relationship with the recipient for any reason and would like to erase the entire history of their interactions on both ends.
What is Photo & Video Sanitizer™
xPal deploys a state-of-the-art method to strip any and all media files or documents of all metadata prior to encrypting, compressing, and sending these files. This process is xPal’s own Sanitizer™. This mechanism is intended to protect the sender from unknowingly sending unwanted information attached to such files such as location, date, time, device, etc….
View All...
Gold Membership
What payment methods I can use to upgrade to Gold Stage membership?
• You can upgrade to Gold Stage membership several ways:
• If you download the app from the App Store, you can use the Apple Pay to subscribe.
• If you download the app from the Google Play Store, you can use Google Pay to subscribe.
• Users can also upgrade their xID through the xPal website.
What is the difference between the Free membership and the Gold membership?
Although both utilize the same exact privacy and security features such as end-to-end encryption and encryption of data at rest, there are limits/restriction for the Free accounts that are not in the Gold accounts.
Feature
Free
Gold
End-to-end encrypted text messages
Unlimited
Unlimited
Secure audio calling outgoing
Unlimited
Unlimited
Secure audio calls incoming
Unlimited
Unlimited
Secure Video Calling outgoing
60 min / Unlimited
Secure Video Calls incoming
60 min / day
unlimited
Video Sending in compressed mode
Unlimited
Unlimited
Video Sending in HD uncompressed
N/A
Gold Only
Image sending in compressed mode
Unlimited
Unlimited
Image Sending in HD uncompressed
N/A
Gold Only
Ristrict download of images/videos
Unlimited
Unlimited
Group members limit per group
50
100
Terminate™ mode
Unlimited
Unlimited
Flicker™ Disappearing Messages
Unlimited
Unlimited
Total Wipeout™ reverse PIN
Unlimited
Unlimited
Photo & Video Sanitizer™
Unlimited
Unlimited
Multiple xIDs on one device
3 xIDs
3 xIDs
Remote Wipeout™
Unlimited
Unlimited
Is the security and privacy different between Free and Gold memberships?
No. The ultra secured end-to-end encryption and security features of xPal are the same for the Free membership as well as the Gold Stage. The only difference is that the Gold membership offers unlimited audio and video calls, and the ability to send and receive high quality, uncompressed images and videos. Security and privacy of communications, as well as transmission and storage of data is exactly the same.
View All...
Groups
How many group members can I add using my Free account?
You can add up to 8 members per group created using the Free membership. With the Gold upgrade, you can add up to 50 members per group.
Can everyone in the group see my xID™?
No. The only ones that can see your xID in a group are those who you have in your Contact list and who have you on their Contact list. Everyone else will only see your username/screen name.
How to setup a group chat?
It’s very simple. Choose the New Group icon from top left of the main page.
New group name.
Choose participants from your contact list. Free accounts are able to add up to 8 members in one Group; Gold members are allowed up to 50 members.
Tap Create from the top right of the screen
View All...

Need more help?

Reach out to us for any inquiry