Khandaq

Public beta · Tox network

Private messaging without a central server

Khandaq Messenger is an open-source client for the Tox protocol. Messages are end-to-end encrypted and routed peer-to-peer. No phone number, no account database, no message store on our servers.

Download for your device View on GitHub
Android · iOS · Windows · macOS · Linux Open source E2E encrypted

Why Khandaq

A branded, maintained fork of proven Tox clients — with Khandaq bootstrap nodes and a privacy-preserving push wake relay for mobile.

No phone number

Sign up with a Tox ID only. Share your ID as text or QR code to add contacts.

End-to-end encryption

Message content is encrypted by the Tox protocol. Khandaq servers never see your chats.

Truly decentralized

No central message server. Clients connect to the public Tox DHT plus documented Khandaq bootstrap nodes.

Transparent & auditable

Full source code on GitHub. Public endpoints, checksums, and security policy are documented in the repo.

Download

Pick your platform. Verify downloads with SHA-256 checksums before installing.

Verify integrity: SHA256SUMS.txt on GitHub or mirror on khandaq.org.
shasum -a 256 -c SHA256SUMS.txt

Android

Sideload APK. Android 8+. Package org.khandaq.messenger.

Download APK v0.2.11 · build 10315 · GPL-3.0

iOS

Install via Apple TestFlight. Requires iOS 16+. Not distributed as a public IPA.

Open TestFlight v0.2.11 · TestFlight build 142904 · MPL-2.0

Windows

x64 portable build for Windows 10 and 11. Unzip and run — no installer needed.

Download .zip v0.2.11 release · desktop app 1.17.6 · security-patched libs · GPL-3.0

macOS

khandaq.app in a zip archive. Apple Silicon and Intel builds in one bundle.

Download .zip v0.2.11 release · desktop app 1.17.6 · GPL-3.0

Linux

Debian/Ubuntu: .deb package. Other distros: portable tarball with bundled libraries.

Download .deb Portable .tar.gz v0.2.11 release · desktop app 1.17.6 · amd64 · GPL-3.0

Primary hosting: GitHub Releases. Direct mirror: khandaq.org/downloads/.

Get started in three steps

  1. Install the client for your platform and create a profile. Write down your password — it cannot be recovered.
  2. Share your Tox ID with someone you trust (copy from profile or show QR).
  3. Add a contact by ID or QR, then send a test message.

Recent beta improvements

  • Android (v0.2.11): Profile → Details with app lock, change password and delete profile; iOS-style hold-to-record voice messages; messaging a just-accepted contact no longer blocked; right-sized chat photos/videos and the exact light/dark chat wallpapers; neutral status bar, new outlined bottom-nav icons, faster theme switching and a cleaner media picker.
  • iOS: delivery checkmark on 1:1 media, faster group reconnect on open, plus group/theme/share/login/crash-recovery fixes from tester reports — TestFlight build 142904.
  • Desktop: Windows bundled media/crypto libraries updated past known CVEs (libvpx 1.14.0, OpenSSL 1.1.1w, FFmpeg 4.4.5), cross-platform delivery fix; portable Linux/macOS/Windows builds on GitHub.

Installation notes

Android — sideload APK
  1. Download the APK and verify SHA-256.
  2. Allow installation from your browser (unknown sources / install unknown apps).
  3. Open the APK and confirm install.
  4. Upgrading from old debug builds: export your Tox profile → uninstall the old app → install the new APK → import the profile (signing key changed).
Windows — SmartScreen warning
  1. Unzip the archive, then run Khandaq.exe. If Windows shows a protection warning, click More info → Run anyway.
  2. The beta build is not Authenticode-signed yet.
  3. If antivirus blocks the file, verify SHA-256 and add an exception.
macOS — Gatekeeper
  1. Unzip and move khandaq.app to Applications.
  2. If blocked: xattr -cr /Applications/khandaq.app
  3. Or right-click the app → Open → confirm in the dialog.
Debian / Ubuntu — .deb package
  1. Download khandaq-messenger_amd64.deb and verify SHA-256.
  2. sudo apt install ./khandaq-messenger_amd64.deb
  3. Launch Khandaq from the app menu or run khandaq.
Linux — portable bundle (Arch, Fedora, …)
  1. tar -xzf khandaq-linux-x86_64-portable.tar.gz
  2. Keep khandaq, khandaq.bin, and lib/ together — see INSTALL.txt in the archive.
  3. Recommended: install under ~/.local/share/khandaq/ and symlink ~/.local/bin/khandaq.
iOS — TestFlight
  1. Install TestFlight from the App Store.
  2. Open the public TestFlight link on your iPhone or iPad.
  3. Accept the invite and install Khandaq. Updates arrive through TestFlight.

Open source & transparency

Khandaq is a fork and rebrand of established Tox clients. We keep wire compatibility with the public Tox network.

Repository & releases

GitHub repo Latest release Security policy

Public infrastructure

  • Bootstrap: the public Tox DHT (nodes.tox.chat) — no self-hosted bootstrap nodes
  • push.khandaq.org — wake-only push relay (no message body)
  • Desktop base: qTox · Android: TRIfA · iOS: Antidote (Zoxcore fork)

FAQ

Is Khandaq the same as Matrix / Element?

No. Khandaq uses the Tox protocol (peer-to-peer, no homeserver). This website now hosts the Khandaq Messenger download page.

Do you store my messages?

No. Message content stays on your devices. Khandaq-operated services only provide bootstrap discovery and optional push wake notifications — documented in the repository.

How do I report a bug?

Open an issue on GitHub Issues or use the security advisory flow for vulnerabilities (private report).