Zero-persistence, end-to-end encrypted chat rooms that vanish when everyone leaves.
- 🔐 End-to-end encryption — AES-256-GCM via Web Crypto API. No plaintext ever reaches the server.
- 👻 Fully ephemeral — No database, no message storage. Everything lives in memory and vanishes on close.
- 🎭 Anonymous — No accounts, no login. Random usernames generated per session.
- ✏️ Editable usernames — Click your name to change it on the fly. Presence updates in real time.
- 📡 Realtime — Powered by Supabase Realtime Broadcast & Presence.
- 🌐 Presence — See who's online in real time.
- 📎 Encrypted file sharing — Send images and small files (JPG, PNG, GIF, WebP, TXT, DOCX up to 200KB) fully encrypted via Broadcast. No server storage.
- 🌗 Light & Dark mode — Toggle between dark cyberpunk and clean light themes. Preference is saved locally.
- 🎨 Cyberpunk UI — Dark theme with glow effects and smooth animations.
- 📱 Mobile optimized — Responsive layout using dynamic viewport height for a native-like feel on phones.
Room Code → PBKDF2 (100k iterations, SHA-256) → AES-256 Key
Message → AES-GCM Encrypt → Base64 → Broadcast Channel → Decrypt → Display
- When a room is created, a random 7-character code is generated.
- The code is used to derive a 256-bit AES key via PBKDF2.
- Every message and file attachment is encrypted client-side before being sent through Supabase Broadcast.
- The key exists only in
sessionStorage— it disappears when the tab closes. - Supabase never sees plaintext. It only relays encrypted payloads.
Files are shared using the same encryption channel as messages:
- Supported formats: JPG, PNG, GIF, WebP, TXT, DOCX
- Max size: 200KB after compression (Supabase Broadcast payload limit)
- Client-side compression runs before encryption to fit within the limit:
- Images (JPG, PNG, GIF, WebP) → resized via Canvas API (max width 1400px) and re-encoded as WebP (fallback JPEG) at quality 0.75
- TXT / DOCX / others → gzip compression via the native
CompressionStreamAPI - A
Compressing file...indicator is shown during processing - If the result still exceeds 200KB, the upload is rejected with a clear error
- Compressed files are then converted to Base64, encrypted with AES-256-GCM, and broadcast to all participants
- No files are ever stored on any server — they exist only in participants' browser memory
- Tap/click any message to open a quick-reaction picker with 12 curated emojis
- Reactions are broadcast in real time and grouped by emoji
- Like everything else, reactions are ephemeral — they vanish when the session ends
| Layer | Technology |
|---|---|
| Frontend | React 18 + TypeScript |
| Styling | Tailwind CSS + shadcn/ui |
| Build | Vite 5 |
| Realtime | Supabase Broadcast & Presence |
| Encryption | Web Crypto API (AES-256-GCM + PBKDF2) |
VoidChat — Messages that exist only in the moment. 💀 Made with ❤️ by Aisurf3r