XChat's End-to-End Encryption Under Scrutiny: Experts Warn of Security Flaws

X, previously known as Twitter, has launched an encrypted messaging feature named XChat that promises end-to-end encryption, but experts are raising serious security concerns. Cryptography specialists argue that XChat's approach, which involves storing users' private keys on X's servers and requiring a four-digit PIN for encryption, is significantly less secure than established platforms like Signal. Security researcher Matthew Garrett warns that this method could allow X to tamper with or gain access to private messages, particularly in the absence of robust hardware security measures. Consequently, healthcare professionals should remain cautious about adopting XChat for sensitive communications, as it may not provide the necessary security assurances for patient privacy.

Opens on TechCrunch