Project RedRabbit — A open source single HTML file app that fights surveillance.Ran by the community. Invisible by design. Unstoppable by nature.
Discord has been handing over user data to law enforcement at a rate that's been climbing every year. Their transparency reports don't lie — thousands of requests, most of them complied with. Telegram's "encrypted" private chats aren't the default, group chats aren't encrypted at all, and after their founder got arrested last year the illusion of it being untouchable pretty much evaporated. WhatsApp is Meta.
So a few months ago we started building something. It's called RedRabbit.
This project, RedRabbit, is an architectural response to the eroding privacy of modern communication platforms. While Discord, Telegram, and WhatsApp operate on varying degrees of data access and metadata collection, RedRabbit is built on the principle of cryptographic blindness.The objective is to provide a communication tool where the server is a neutral, ignorant relay, and the user retains absolute control over their identity and data.
There's no registration, no phone number, no email.
The entire client is a single HTML file. You download it, open it in your browser, done. No install. No app store. No update that silently changes the privacy policy. You can read every line of code yourself — it's all there.
The encryption stack if you care:
X25519 ephemeral ECDH per message (forward secrecy — past messages stay safe even if keys get compromised)
AES-256-GCM
Ed25519 signing so you can verify who actually sent a message
HKDF-SHA256 key derivation
All running in the browser via WebCrypto, zero external crypto libraries
The link to the github repositry:
[https://github.com/ProjectRedRabbit/RedRabbit.git](https://github.com/ProjectRedRabbit/RedRabbit.git)
(We request you to atleast have a look at the project).
You can try it right now using our test server: [http://serverredrabbit-production.up.railway.app](http://serverredrabbit-production.up.railway.app) — just open the HTML file, put that URL in the server config, and you're chatting.
(People/organizations who want to volunteer servers please email at [projectredrabbit@tutamail.com](mailto:projectredrabbit@tutamail.com) ,the servers are focused to be made as light weight as possible. )
What's coming very soon:
The cross-server handshake protocol is almost finished. Right now both people need to be on the same relay server — that changes in the next release. Two people on completely different servers will be able to communicate. This also fixes the current limitation where the invite token carries the vault's private key (yes, we know, it's documented, it's temporary).
Channel vaults(Vaults where any number of people can join but only the person who made the vault and the people he makes as co-admins can post/message). As the server network becomes strong,will add the ability to send files/photos.
We're also releasing an APK and stripping back the complexity so it's not intimidating to people who don't know what X25519 means. The goal was always to make this usable for everyone, not just people who read cryptography papers for fun.
Voice and video over WebRTC for private vaults is also in the pipeline.
If you find a problem/backdoor, please tell us.
Seriously. If you spot a flaw in the encryption, a backdoor, anything — email [whitepeacock@tutamail.com](mailto:whitepeacock@tutamail.com) . This only works if it actually works. We'd rather hear it from someone here than find out some other way.If any questions feel free to ask in comments we will be happy to answer them.
On donations:
The project is and will always be free. But running servers costs money, and we want to get a dedicated node up on the Tor network so the app stays reachable even in places where clearnet gets blocked. Every server we can afford to run is one more place this can't be shut down from.
If this is useful to you or you just think it should exist — anything helps.
BTC: bc1qj5rg8wtg8e5ksacj43pe7nyqmaewkncq75jlr8
ETH: 0xfc696a5f83b36860e43d15b979bb0f5326a3289d
SOL: 31PdhUujM4EL17J9Utwdqm773eMzG9VbDxJoNaA68S96
The code is open. The server is open. Go break it.