OrangChat 1. Add this key to your app 1 attachment %1$s %2$s %1$s entries · head %2$s… %1$s entry · head %2$s… %1$s (may not survive a restart) %1$s on %2$s %1$s recovery code left. %1$s recovery codes left. © 2026 Oranges.LT · Made with 🍊 2. Enter the 6-digit code 2FA A dark card with a glowing purple name and a striped banner. A deleted account A fast, self-hosted chat for servers, DMs, and voice - part of the Oranges.LT family. A green-on-black monospace card for the command-line at heart. A one-time code is on its way to your email - it expires in 10 minutes. A passkey only works on the site that created it, so it can\'t be phished - which is why we ask for one instead of an emailed code when your account has one. A warm, paper-toned card with a serif name. About About me Accent color Accessibility Account Account created. Check your email for a verification link - Account standing Add Add a friend by their username. Add a passkey Add a server Add another device Add channel Add context for the reviewer Add device Add emoji or GIF Add friend Add friends Add people Add reaction Add this phone Added %1$s Added by another authorized device Adding a second device before you need one is the whole answer. That is also why two-factor authentication has to be on first: a spare device is a spare set of keys, and it should take more than a password to make one. All your friends are already here. Allow anyone to @mention Allow camera Allow camera access to scan without leaving OrangChat. Allow installs first Already have an account? Log in Already on this call Android browser Android cannot repoint its own launcher icon, so on this device the change shows up in the web app and the desktop app. Android is not letting OrangChat notify you about messages or calls. Turn them on in system settings. Android (native) Answer without camera Anyone can start a conversation. Anyone who knows your username. • Anything on a phone that is already unlocked and in someone else\'s hands. At that point they are reading it the same way you do. API App icon Appearance As the owner you cannot leave - delete the server instead. Ask for a code from your phone in addition to your password when you sign in. Ask them to show their verification QR, then fit it inside the frame. At least 8 characters At least 8 characters. Attach files Audio call Audit log Authentication code Authenticator code Authorized encryption devices Authorizing the new device Back Backend Backspace Banned from Before a message leaves this phone Bot account Both devices show six digits. Compare them and cancel if they differ. Both of you open the conversation, tap the lock at the top, and one of you scans the other\'s code. Then swap and do it the other way round - one scan only proves one direction. It takes about ten seconds while you are stood together. Both options encrypt everything. The difference is whether a swapped lock is stopped before it can be used, or caught afterwards. Both screens must show the same six digits. If they differ, cancel. Browser Build by %1$s CALL CONNECTED Call connected Call ringtone Call sharing defaults Calling… Camera access is needed to scan the code on your PC. Camera & Microphone Cancel Cancel reply Cancel scanning Change audio output Change background Change email Change group icon Change password Changing your password signs out every other session. Channel name Check for updates Check people before messaging them Check them again Check them first Check them first - a swap cannot happen. You check the other person\'s lock yourself, in person or on a call, before anything is sent to them. Until you have, messages you type stay on this phone, still locked, and go nowhere. There is nothing for a swapped lock to open. Checking… Checking someone in person Checking someone\'s code is a one-to-one thing, so it happens in your direct message with them - and anyone you have checked there shows as checked here too. Waiting on everyone in a group to be checked would hold up people who never asked for it. Checking them here is safer than reading along - sixty digits is more than anyone actually compares by eye. Choose Choose files Clear CSS Client Close DM Code from your app Code from your app (or a recovery code) Communication Compact messages Compare Comparing… Confirm 2FA on the authorized PC. Confirm new password Confirm the digits and enter the security code on the authorized device. This phone is waiting for the encrypted history and its signed authorization… Confirm with your passkey to finish signing in. Confirm your password Connect Connected Connecting… Connection Connection and server info Continue transfer Copy Copy channel ID Copy message Copy user ID Could not change email Could not change lockdown Could not change password Could not connect to the call Could not delete account Could not delete messages Could not join the call Could not leave servers Could not load devices Could not load passkeys Could not load standing Could not open the installer Could not open this image Could not play that sound Could not play this video Could not reach the update server Could not remove the icon Could not remove the image Could not remove the passkey Could not rename Could not revoke Could not save your privacy settings Could not save your profile Could not start setup Could not start the call Couldn\'t decrypt this file Couldn\'t load GIFs Couldn\'t reach that message - it may be too far back or deleted. Create a channel Create a server Create account Create another Create group Create invite Create passkey Create role Create your account Creating this phone’s protected encryption identity… Current password Custom Custom ringtone Danger zone Dark Debug Delete account Delete all my messages Delete all your messages Delete my account Delete recording Delete role Delete server Delete them all Deleted %1$s message. Deleted %1$s messages. deleted user. Everything else - profile, connections, friends, server memberships - is erased. This can\'t be undone. Desktop app Device %1$s Device default Device transfer code Device transfer QR code Devices Digits confirmed Direct messages Direct Messages Disconnected Display Display name, avatar, bio, accent, CSS Display name Display name (optional) Display separately Do Not Disturb Done Download failed Download & install Downloading %1$s… Each entry is a device with a live sign-in. Revoking one stops it Edit message Edit role (edited) Email changed to %1$s. Email code Email me a code Email me a code instead Email & password Emoji Emoji matching %1$s Encrypted history keys are sent and the new device is recorded as authorized. Encryption Encryption security alert Enter a fresh two-factor authentication code. The new device will be signed into your append-only device log. Enter the 6-digit code from your app, or a recovery code. Enter to save · Shift+Enter for a new line Erase my encryption keys Erase them now Erase your encryption keys? Erasing… Every device added or removed is written into a logbook that can only be added to, never edited or erased. Your devices read it on every start, so a device you did not add cannot appear here quietly - you get told, and the entry stays in the book. Every direct message is encrypted, always, and that part cannot be switched off. This setting is about how carefully the other person\'s lock is checked before your messages are sent to it. Every message already in your encrypted conversations becomes permanently unreadable - by you, by us, by anyone. Nothing brings them back. @everyone @everyone applies to every member. It has no colour and cannot be assigned or deleted. Everyone everyone here Everyone in this voice channel hears it. Everything sent from now on uses a new key. Existing messages stay readable, and everyone still in the conversation keeps access. Expired - large files are only kept for an hour Expires in 1 hour Fallback mode: scan this code from an already-authorized phone, or paste it into an authorized computer. Favorite GIFs Favourite this GIF Find a member Find friends Find the perfect emoji Finish First device on this account Flip camera Follow the installer to finish updating for permission the first time you join one. Freezes the account if you think someone else is in it: signs out every For 15 minutes For 1 hour For 8 hours For 24 hours Friends Friends of friends Friends only Generate Get notified about messages? GIFs Hang up Have them open their code in OrangChat and point this phone\'s camera at it. Your phone then remembers the lock you actually saw, so a swapped one no longer matches. One scan proves one direction - show them yours too. Hide my code Hide password Hold steady - scanning happens automatically Hold the mic to record, then let go to send Hold to record a voice message How does this work? How your messages are protected I understand I\'ve saved them Icon Idle If a safety code changes, or a device you did not add appears on your account, OrangChat stops and tells you outright instead of showing a notification you might swipe away. In call In plain language, with no jargon to get past first. Inappropriate content Incorrect password. Install Installed Invite link Invite people invite to get back into any of them. iOS browser It is not always an attack - it is also what happens when somebody loses every device and has to start over. There is no way to tell those apart from inside the app, which is why it asks you to check with the person directly before you send anything else. Join a server Join muted Join with camera on Jump to latest Keys, device log, verifying people · last active %1$s · last used %1$s Leave all servers Leave group Leave server Leaves every server you\'re in except the ones you own. You\'ll need a new Leaving it off is not \"unprotected\". Every lock is still checked against a logbook that can only be added to, which your own devices read on every start. The difference is whether a swapped lock is stopped before it can be used, or caught right after. Group conversations always send straight away, either way. Left %1$s server. Left %1$s servers. Let people see when you\'re typing. Lift lockdown Lift timeout Light Linked image LISTENING TO Listening to Load more Loading… Lock down my account Lockdown Lockdown lifted. Locked down. Locked down. Signed out %1$s other session. Locked down. Signed out %1$s other sessions. Log in Log out Lost your authenticator? Lowercase letters, digits, _ and . - 2 to 32 chars Lowercase letters, numbers, underscores, and dots. Make a new key Mark as read Member since Messages, friend requests, typing, notifications Messages go as soon as you send them. If anyone ever swaps this person\'s lock, your devices notice and tell you. Microphone access is needed to record a voice message Mobile Minimize call Missed call Mute conversation Mute server Muted My contact verification QR code My orange grove Name Need an account? Sign up Neon · never used New email New group New key for this conversation New messages New password New recovery codes New roles start just above @everyone, so they never outrank the person creating them. New update available No answer No devices are enrolled on this account. No friends yet. Add someone first. No friends yet. Add someone from the Add tab. No GIFs found No matches. No matching friends or channels No one No passkeys yet. No pending requests. No profile themes match “%1$s”. No saved GIFs yet - tap the bookmark on any GIF to keep it here. No server is currently restricting you. No sounds yet. Someone with Manage Expressions can add them in server settings. Nobody can send you requests. Nobody new can message you. None set Not in call Not in the same room? You will each see the same short row of numbers, called a safety code. Have them read it out on a phone call, or send it over another app you already trust, and type it into the box under the code - the app compares all sixty digits, which is more than anyone manages by eye. If it matches, nobody is in the middle. The one thing that does not count is an OrangChat voice call - that audio goes through the same servers this check exists to test. Not me Not now Not sent Nothing can sign in, and no new DMs or friend requests reach you. Nothing has been logged yet. Nothing is sent until you have checked their code in person or on a call. Until then your messages wait here, locked, and go nowhere. Notifications Notifications are turned off NOW PLAYING .oc-pf-name { color: #ff6a1a; } Off, the shade and lock screen show who wrote and nothing more. Encrypted messages are then never unlocked to make a notification at all. This phone only. Offline Offline - messages are saved and will be sent when you reconnect On call On On your PC, open Settings → Encryption → Add another device. Your PC will show a one-time QR code. Ongoing call Online Only continue if you started this transfer and can see both devices. Only people on your friends list. Only people you share a friend with. Only the owner can rename this server Only the people in the conversation can open them. Not OrangChat, not somebody who steals our database, not somebody who turns up with a court order - we do not hold a key we could hand over. This is on for every direct message and there is no way to switch it off. Open app permissions Open call OrangChat can let you know when someone messages or calls you OrangChat desktop app orangchat://device-transfer?… OrangChat for Android OrangChat only opens your camera and microphone during a call. Android asks other device, blocks new sign-ins, and closes new DMs and friend requests until you lift it. Otherwise only members with Mention Everyone can. Package Parchment Passkey passkey settings too, or it will keep showing up there. Passkeys Password changed. %1$s other session was signed out. Password changed. %1$s other sessions were signed out. Password changed. Pending Permanently delete Personal phone Phone connected Pick at least one more friend for a group. Point this phone at the QR code shown in OrangChat on your PC. Point this phone at the transfer code shown on the new device. Preview Privacy Privacy & Security Profile Profile themes Profile themes style your public profile card. Every entry is reviewed through a pull request, bundled with the app, and sanitized before it renders. QR code Ready-made styles for your profile card Realtime Reason: %1$s Recording, locked Recovery codes Reduce motion Release Release to cancel Remove background for everyone Remove Remove friend Remove from favourites Remove group icon Remove passkey Removes every message you\'ve sent, in every server and group - including Removing this only affects OrangChat. Delete it from the device\'s own Rename Rename passkey renewing; it loses access within a few minutes. Replaces the key used from now on, so a device that has since been removed cannot read anything new. Messages already here stay readable, and nobody is locked out. Replaces the OrangChat mark for you everywhere you are signed in. Report message Report received Reporting reveals this one decrypted message and a one-message key. It does not reveal the conversation key or any other message. Request sent Resend email code Reset Reset to defaults Resolving invite… Revoke Revoke %1$s? Revoke device · revoked Revoking… Ringing… Role name Roles grant permissions and a colour. Members take the colour of their highest role. Save changes Save nickname Save profile Save these now - each works once if you lose your phone, and they\'re shown only this once. Scan Scan code from PC Scan device code Scan the code shown by the new device, or paste the complete orangchat://device-transfer code here. Scan their code Scan verification code Search Search by name or username Search friends and channels Search KLIPY Search messages Search profile themes Search results Searched on this device. Messages not opened here may be missing. Security Send a new code Send anyway Send friend request Send report Send straight away Send straight away - a swap gets caught. Every lock anyone publishes is written into a logbook that can only be added to, never edited or erased. Your own devices read the page about your account every time they start. If a lock is ever published in your name that your devices did not make, they tell you, and the entry stays in the book where anyone can point at it. A swap can be attempted; it cannot be attempted quietly. Send typing indicators Sending… Sending encrypted history and signing the new device into your device log… Sending straight away is what every conversation gets. Checking first is the extra step, and it is only worth turning on for people you can realistically meet or ring. Sending voice message… Server • Server channels. Those have shared history, moderation and search, all of which need the server to read them. Only direct messages and group DMs are encrypted this way. Server icon Server name Server settings Set a password Set chat background Set group icon Set password Set up this phone again Set up two-factor Setting up… Settings Share to OrangChat Shared text Sharing… Show fallback code on this phone Show members with this role in their own group. Show message text Show my code Show password Shown on the invite page. Sign in Sign in before adding this device. Sign in on the web? Sign in with a passkey Sign in with your fingerprint, face or device PIN instead of a password. Sign out %1$s other device Sign out %1$s other devices Sign out Signed in %1$s Signed in as %1$s. Skip the scroll and swipe animations. Slide to cancel → ‹ Slide to cancel Slide up to lock recording So you can tell it apart from your other devices later. Someone here Someone scanned this account\'s code to sign in to OrangChat in a browser. Approve only if that was you. Standing together? Scan each other\'s codes - one scan proves one direction, so do both. Start a call Start a fresh key here Start calls with video already publishing. Start every call with your microphone off. Start over with new keys Start video call Start voice call Status Still yours: %1$s. Stop Stored on this device only - never uploaded. Style your card for everyone who views it. Every part has a hook: Synced to your device\'s keychain. System Take a picture Tap the key to copy it. Terminal Text size Text size, motion, density That code isn\'t right That didn\'t work. Try again. That invite is expired, revoked, or never existed. That is also why adding a second device is a small ceremony instead of a copy and paste. Your old device has to see the new one - a code on the screen, a camera pointed at it - before anything moves. That was cancelled. The camera could not start. You can retry or use the system Camera app. The device could not be revoked. The device transfer failed. The digits match The email code could not be sent. The encryption device was revoked. The keys could not be erased. The logbook The messages only that device could open stay locked, permanently. We cannot recover them for you - if we could, none of the above would be true. The new device’s code was recognized. It is not authorized yet. The new device was authorized. The one-time code from your PC was recognized. Nothing has been transferred yet. the ones you\'ve left. Attachments you uploaded aren\'t removed from storage. This can\'t be undone. The PC sends encrypted history keys and records this phone as authorized. The quick brown fox jumps over the lazy dog. the right person Theme There is no code to compare yet. These choices are stored on this device only. These do not match. Most often that is a digit misheard or mistyped, so check it once more. If it still differs, somebody is standing between you - do not send anything here until you know which. These numbers appear once both accounts have set up encryption on a device. they all open They cannot send messages, react or speak until it expires. They do not match they open This account has no authenticator app set up, so OrangChat will email a one-time code to approve the new device. This code holds nothing secret. It is safe for anyone to see; being in the room is what makes scanning it mean something. This conversation is not encrypted yet · This device This device This device stays signed in. This device will stop receiving new conversation keys. It remains in the append-only device log as revoked, so the change cannot be hidden. This happens the moment you confirm - there is no waiting period and nothing to cancel, because this phone signs for it with the key itself. Every encrypted message on this account becomes unreadable to everyone, forever. This is your code. They can scan it from the lock at the top of your conversation, or from this screen on their own phone. This media is unavailable · this phone This phone cannot revoke itself. This phone connects to the new device without authorizing it yet. This phone could not be set up again. This phone creates a protected encryption identity in Android Keystore. This phone creates its own non-copyable identity. Only encrypted conversation-history keys move from the PC. This phone has not made its encryption key yet. This phone is not authorized yet. Finish “Add this phone” before it can read encrypted history or revoke another encryption device. This phone is now an authorized encryption device. This phone was removed from your account from another device. Its key no longer opens anything here, and it cannot read new encrypted messages until you add it again. This replaces all of your existing recovery codes. This version of OrangChat is no longer supported and can no longer connect. Those don\'t match. Throw away the encryption identity on this account and make a fresh one here. Every other device is removed and has to be added again. Tighter spacing between messages. Time out Timed out Timed out in Today To lock a box for someone, your phone needs their lock, and it asks our servers for it. So the fair question is: what if we handed you a lock we had made ourselves, kept the key, and passed your messages along afterwards? Too many attempts. Wait a moment and try again. Transfer code scanned Turn camera off Turn camera on Turn off Turn off two-factor Turn on two-factor Turning off two-factor leaves your password as the only protection. Two answers, and you pick how much you want. Two-factor authentication Two-factor is on Type %1$s to confirm Type to search this server\'s messages. Type to search your cached direct messages. Unknown Unknown device unknown IP Unmute conversation Unmute server Until %1$s Until I turn it back on Update now Update required Update to continue. Updates Upload failed Uploading… Use passkey Used to sign in. There\'s no confirmation email, so double-check it. User settings v%1$s Verify this contact Version %1$s (build %2$s) Version %1$s Version %1$s is available Version Version and build video call Video call voice call Voice connected Waiting for the PC to calculate the comparison digits… Waiting for your PC… We can still see the outside of it: who sent it, who it went to, how big it was and when. We cannot see what is inside. We emailed you a sign-in code. It expires in 10 minutes. Welcome back What happened? (optional) What happens next What incoming calls sound like What you share • Whatever the other person does with the message. They can screenshot it, save it, or show someone. Encryption stops strangers, not recipients. When joining a call Where you\'re signed in Who can add you Who can message you • Who you talk to, when, and how often. Locked boxes still have to be addressed to somebody. With someone new, your messages wait on this phone - locked, sent nowhere - until you have seen their code in person or read the numbers to each other on a call. Yes, leave them all Yesterday Yes, that\'s them You can also scan with the system Camera app and tap “Open OrangChat”. You do not have this permission. You enter a fresh 2FA code on this authorized phone. you@example.com You\'ll need an authenticator app such as Google Authenticator, 1Password, or Aegis. You\'re on the latest version You\'ve been invited to join You\'ve reached the limit of %1$s passkeys. Remove one to add another. Your account is in good standing Your account is locked down Your current password Your direct messages are locked on this phone before they are sent. The key was made here, lives in the phone\'s secure hardware, and cannot be copied off it - not by OrangChat, and not by anyone holding a database backup. Your messages are locked before they leave this phone Your messages stay in the conversations they\'re part of, shown as from a Your old keys are gone. This phone has fresh ones. Your password Your phone and PC show six digits. Compare them and cancel if they differ. Your phone and your computer each make their own key, on the device itself, the first time you use encryption there. It goes into the part of the device built to guard keys, and it is made so that it cannot be read back out - not by OrangChat, not by another app, not by you. There is nothing to leak and nothing to hand over. Your phone puts the message in a box and locks it. Every device in the conversation, and only those, holds a key to that box. Our servers store and pass along the locked box. العربية বাংলা 中文 English Français हिन्दी Restarting the app applies the language everywhere. Lietuvių Português Русский Español Choose the app\'s language Match system Language اردو