Save Cancel Close Delete Remove Edit Copy Copied Retry Back Next Done Confirm Create Add Search Loading… Saving… Something went wrong Enabled Disabled On Off Yes No Download Upload Unknown Language The language this device shows the app in. It is not sent to the server, so each of your devices can differ. Match my system Currently {language} English Lithuanian Chinese Hindi Spanish Arabic French Bengali Portuguese Russian Urdu Pirate LOLCAT This translation is not finished; anything missing is shown in English. for {duration} A fast, self-hosted chat for servers, DMs, and voice - part of the Oranges.LT family. Build Built Client © {year} Oranges.LT · Made with 🍊 Links OrangChat Oranges.LT Platform Version Version {version} A link Always underline links, not just on hover. Chat input Chat preview Compact tightens the spacing between messages. The preview above follows it. Increase contrast Larger Message density Minimize animations and transitions across the app. Motion & contrast Looks readable at this size. {link} shows the underline setting. Reduce motion Reset to defaults Scales the entire interface. The sample below updates as you drag. Send messages with Enter Smaller Stronger borders and higher-contrast text. Text size The quick brown fox jumps over the lazy dog. This second line is grouped under the same author - it\'s the gap here that Cozy and Compact change. Today at 14:03 Underline links Activity Add game Allow a running process and choose the game name shown to others. Custom game detection is available in the desktop app. Display the game you\'re playing Game name Game not detected? No running processes were found. Running process The desktop app checks running process names and shares a match with your friends. This is off by default. The desktop app detects the games you\'re playing and shares them with your friends. Turn activity sharing on to inspect running processes. What should friends see? Checking their identity… My contact code Public information only. Being in the room is what makes it mean anything. Scan their code Show my code Together in person? Scanning their code adds them and confirms their encryption keys in one go. Add server mode Invite link My orange grove Server name Dismiss Android app download Get OrangChat for Android OrangChat Android app Version {version} · {size} Changed: {list} Newer Older Chat Cookies Guidelines Legal Orang Privacy Terms Bot Bot account Audio call Video call Dismiss Call connected Calling Close full screen {count} in call Deafen Deafened Hang up In call Minimize call Mute Muted {name}\'s screen Not in call {connected} in call · {ringing} ringing Ringing… Share your screen Speaking Stop sharing your screen Turn camera off Turn camera on Undeafen Unmute Your screen Channels Create channel Empty Invite people Live No channels yet. Server settings Channel topic Couldn\'t load messages. Check your connection and try again. Encrypted Messages in this conversation are end-to-end encrypted More Open navigation Search messages Toggle member list Try again A bot token is the password for a bot account: anyone with it can sign in as the bot, post in its servers and read its conversations. Pasting it here would hand that control to everyone who can read this conversation. A login token lets anyone who has it sign into an OrangChat account. Pasting it here would hand that account to everyone who can read this conversation. Attach files Cancel reply Delete recording Don\'t paste Hold to record a voice message Locked - send when you\'re done Mention suggestions Paste cut off - {max} characters max Paste it anyway Replying to Send message Send voice message Take a picture Expires in 1 hour Authentication code Password Connections Verified Add any website Connect an account Disconnect It will be removed from your profile. You can link it again at any time. Label Link Linked accounts appear on your profile with a verified check. OrangChat only reads your username - it can never post as you. Links you add by hand show without a verified check, since anyone could enter them. My website No providers are configured on this server yet. Nothing linked yet. Verified Your connections Category Channel type No category Add to server… Avatar Bot Bots Build on OrangChat with the {js} package for JavaScript or {py} for Python. A bot is a real account: invite it to a server and give it roles like anyone else. Bots cannot read DMs - those are end-to-end encrypted. Copy this token now Developers Display name Helper It is stored hashed and cannot be shown again. If you lose it, mint a new one. I\'ve saved it New bot New token No tokens. This bot cannot sign in until you mint one. Open navigation Revoke token Save changes Tokens Username You haven\'t made any bots yet. Each entry is a device with a live sign-in. Revoking one stops it renewing; it loses access within a few minutes. Signed in {time} Sign out {count} other device Sign out {count} other devices This device Where you\'re signed in This is the beginning of your direct message history with {name}. This is the beginning of this group, with {count} other person. This is the beginning of this group, with {count} other people. Just you here Messages here are locked on your device, so only the people in this conversation can read them. Messages you send in this conversation are only visible to you. Conversations Copy Channel ID Copy User ID Developers Direct Messages Friends Mark As Read New direct message New group No conversations yet - hit + to message someone. Profile Remove Friend Start a Call They\'ll be removed from your friends, and you\'ll need a new request to reconnect. Your message history stays. unread messages Get the app macOS/iOS aren\'t available yet. OrangChat runs in your browser, but the native apps add tray, notifications, and screen sharing. Custom emoji GIF No custom emoji yet. Upload one to use it anywhere in this server. PNG, JPEG or GIF up to 256 kB. Resized to 128px; GIFs keep their animation. Before a message leaves this device Both options encrypt everything. The difference is whether a swapped lock is stopped before it can be used, or caught afterwards. Checking someone\'s code is a one-to-one thing, so it happens in your direct message with them - and anyone you have checked there shows as checked here too. Waiting on everyone in a group to be checked would hold up people who never asked for it. Encryption mode for this conversation Group conversations send straight away Add another device Added {time} Added by another of your devices Add this device Devices with your keys End-to-end encryption {count} entry · head {hash}… {count} entries · head {hash}… Every device added or removed is written into a logbook that can only be added to, never edited or erased. Your devices read it on every start, so a device you did not add cannot appear here quietly - you get told, and the entry stays in the book. First device on this account Last seen {time} No devices are enrolled on this account. Revoke Revoked Show a one-time code on this PC, then use OrangChat’s scanner on the phone. The phone makes its own protected identity; this device authorizes it and sends the encrypted history keys after you compare six digits and enter a fresh security code. The system Camera app remains a fallback. Show code for my phone The logbook This device This device has no encryption identity yet Your direct messages are locked on your own devices before they are sent. The key is made here and cannot be copied off this device, so nobody running OrangChat - and nobody who gets hold of our database - can read them. OrangChat hit an unexpected error and could not keep showing this page. Your messages are safe - reload to try again. Reload OrangChat Something went wrong A link, an address, anywhere Create event Description Ends (optional) Event name Game night Loading events… Location Nothing scheduled yet. Somewhere else Starts What\'s happening? Where Add emoji or GIF Favourites Loading GIFs… No GIFs found Powered by KLIPY Search KLIPY Search KLIPY GIFs Direct messages Forward message Nowhere to forward this to yet. Search channels and DMs Search forward targets Accept Add a friend by their username. Add Friend All Cancel request Decline Friends Incoming - {count} Message No friends yet. No pending requests. Open navigation Outgoing - {count} Pending Remove friend Send Username Chat Open navigation Orang Adding a second device before you need one is the whole answer. That is also why two-factor authentication has to be on first: a spare device is a spare set of keys, and it should take more than a password to make one. Anything on a device that is already unlocked and in someone else\'s hands. At that point they are reading it the same way you do. Both of you open the conversation, tap the lock at the top, and one of you scans the other\'s code. Then swap and do it the other way round - one scan only proves one direction. It takes about ten seconds while you are stood together. Every device cuts its own key Every lock anyone publishes is written into a logbook that can only be added to, never edited or erased. Your own devices read the page about your account every time they start. If a lock is ever published in your name that your devices did not make, they tell you, and the entry stays in the book where anyone can point at it. A swap can be attempted; it cannot be attempted quietly. How does this work? How your messages are protected How you verify someone If a safety code changes, or a device you did not add appears on your account, OrangChat stops and takes over the screen instead of showing a notification you might swipe away. If something ever looks wrong If you lose your only device In plain language, with no jargon to get past first. It is not always an attack - it is also what happens when somebody loses every device and has to start over. There is no way to tell those apart from inside the app, which is why it asks you to check with the person directly before you send anything else. Not in the same room? You will each see the same short row of numbers, called a safety code. Have them read it out on a phone call, or send it over another app you already trust, and type it into the box under the code - the app compares all sixty digits, which is more than anyone manages by eye. If it matches, nobody is in the middle. The one thing that does not count is an OrangChat voice call - that audio goes through the same servers this check exists to test. Only the people in the conversation can open them. Not OrangChat, not somebody who steals our database, not somebody who turns up with a court order - we do not hold a key we could hand over. This is on for every direct message and there is no way to switch it off. Server channels. Those have shared history, moderation and search, all of which need the server to read them. Only direct messages and group DMs are encrypted this way. Standard - a swap gets caught. Standard is what every conversation gets. Verify first is the extra step, and it is only worth turning on for people you can realistically meet or ring. That is also why adding a second device is a small ceremony instead of a copy and paste. Your old device has to see the new one - a code on the screen, a camera pointed at it - before anything moves. The hard part: is it really their lock? The messages only that device could open stay locked, permanently. We cannot recover them for you - if we could, none of the above would be true. To lock a box for someone, your device needs their lock, and it asks our servers for it. So the fair question is: what if we handed you a lock we had made ourselves, kept the key, and passed your messages along afterwards? Two answers, and you pick how much you want. Verify first - a swap cannot happen. We can still see the outside of it: who sent it, who it went to, how big it was and when. We cannot see what is inside. Whatever the other person does with the message. They can screenshot it, save it, or show someone. Encryption stops strangers, not recipients. What happens when you press send What this does not hide Who you talk to, when, and how often. Locked boxes still have to be addressed to somebody. You check the other person\'s lock yourself, in person or on a call, before anything is sent to them. Until you have, messages you type stay on your device, still locked, and go nowhere. There is nothing for a swapped lock to open. Your device puts the message in a box and locks it. Every device in the conversation, and only those, holds a key to that box. Our servers store and pass along the locked box. Your direct messages are locked before they leave your device Your phone and your computer each make their own key, on the device itself, the first time you use encryption there. It goes into the part of the device built to guard keys, and it is made so that it cannot be read back out - not by OrangChat, not by another app, not by you. There is nothing to leak and nothing to hand over. Copy image Copy image address Save image as… Reset zoom Zoom in Zoom out Accept Accept with camera Decline Invite invalid Join Joined Resolving invite… Sign in to join This invite is expired, revoked, or never existed. Invite people Share this link - it unfurls into a join card when posted in chat, and opens the app on phones that have it. Expires in 7 days. That invite link is missing a code. Erase my encryption keys Every message already in your encrypted conversations becomes permanently unreadable - by you, by us, by anyone. Nothing brings them back. It has not happened yet. This happens after {time}, unless a device that still holds your keys opens OrangChat before then. If you did not ask for this, cancel it now and change your password - somebody else is signed in to your account. Leave this empty if you do not have two-factor turned on. It just makes the wait shorter - three hours instead of a day. Never mind Stopped. Your encryption keys are staying where they are. If you did not ask for the erasure in the first place, change your password now - somebody else was signed in. Two-factor code Your encryption keys are scheduled to be erased 10. Disclaimers and liability 10. Security 11. Changes 11. Governing law and disputes 12. Changes to these terms 1. Controller and contact 1. Who provides OrangChat © 2026 Oranges.LT 2. Accepting these terms 2. Data we process 3. Why we process data 3. Your account 4. How content is shared 4. Your content 5. Rules for using the service 5. Service providers and external recipients 6. International transfers 6. Servers and moderation 7. Retention 7. Software and third-party services 8. Availability and changes 8. Your rights 9. Children 9. Suspension and termination About 10 minutes Account and service content remain while your account or the relevant content exists. Account data: Appeals Back to OrangChat Backups may retain deleted data for a limited recovery and security period. By creating an account, accessing OrangChat, or continuing to use it after being told about an updated version of these terms, you agree to these terms and the Community Guidelines. If you do not agree, do not use the service. call participation, online status, device type, and short-lived credentials used to connect calls. Chat Cloudinary for encrypted attachments and profile media storage. Community Guidelines Connections to OrangChat use encrypted HTTPS or WSS transport. Passwords are hashed with Argon2id rather than stored as readable passwords. Cloud-hosted message attachments and stored OAuth credentials are encrypted before storage. We also use access controls, short-lived access tokens, refresh-token rotation, optional two-factor authentication, rate limits, and restricted service permissions. Consent: Content and social data: Contract: Oranges.LT, Lithuania, is the controller for personal data processed to provide OrangChat. For privacy questions or to exercise your rights, email {email}. Cookie and Local Storage Policy Cookies we use Copyright Deleting an account scrubs identifying account and profile fields and removes personal side records. Messages and necessary moderation records may remain under a deleted identity. You can delete all messages separately before deleting the account. Depending on the feature and deployment configuration, data may be handled by: Device data: Direct messages and group direct messages are end-to-end encrypted once every participant has enrolled an encryption-capable device. Until then, the conversation is clearly labelled as plaintext. Server channels remain readable by OrangChat so their public history, search, moderation, and role-based access controls can work. Encrypted conversations keep message bodies, attachment keys, drafts, and search data on participating devices; OrangChat still processes delivery metadata such as participants, timestamps, and ciphertext sizes. No system is perfectly secure, so users should also protect their credentials and devices. Distribute malware, steal credentials, evade access controls, or disrupt the service. Do not sell, transfer, share, or impersonate another person through an account. Effective {date} Email email address, username, display name, password hash, OAuth login identifiers, profile fields, privacy preferences, and security settings. Enforcement may include warnings, content restrictions, content removal, feature limits, suspension, termination, evidence preservation, or referral to authorities. We consider context, severity, intent, harm, history, and the risk of repetition. Evade a suspension, ban, rate limit, moderation action, or technical restriction. Exploit, groom, endanger, or sexualise a minor. Google Firebase Cloud Messaging and Web Push providers for notifications. identifiers, names, profile links, and OAuth tokens needed for account connections you choose to enable. Infrastructure, database, caching, and security providers needed to host OrangChat. Integration data: IP address, user agent, session records, authentication tokens, rate-limit records, audit logs, push subscriptions, error details, and request metadata. Keeps your account signed in and rotates sessions securely. Keep the service trustworthy Keep your password, backup codes, devices, and authentication methods secure. Large OrangMove attachments normally expire within one hour. Legal and safety requests Legal documents Legal Notice Legal obligations: Legitimate interests: Lithuania Lithuanian law governs these terms, without taking away mandatory protections available to consumers in their country of residence. Please contact us first so we can try to resolve a concern. Consumers may bring a claim before any court that has jurisdiction under applicable consumer law. Other claims are subject to the courts of Lithuania. LiveKit infrastructure for real-time voice, video, and screen sharing. Local device storage locally stored theme, accessibility, notification, download, plugin, and interface preferences. Location Login and profile connection providers you select, such as Google, Discord, GitHub, GitLab, Twitch, YouTube, Reddit, X, or Steam. Managing storage Messages and profile information are shared with the people and communities you choose, according to channel permissions, membership, and privacy settings. Server owners and moderators can access moderation and audit information for communities they manage. Public or invite-accessible spaces may expose content to a wider audience. messages, attachments, reactions, drafts, friendships, memberships, roles, bans, events, server settings, and linked profiles. Name Cookies Guidelines Legal notice Privacy Terms No credible threats, encouragement of violence, or celebration of violent harm. No evasion of bans, moderation, rate limits, or security controls. No harassment, stalking, targeted humiliation, or coordinated abuse. No hateful conduct based on protected characteristics. No impersonation intended to deceive or defraud. No infringement of copyright, trademark, privacy, or other rights. No non-consensual intimate content or sexual content involving minors. No promotion or coordination of unlawful goods, services, or conduct. No scams, phishing, malware, credential theft, or malicious links. No sexual exploitation, grooming, or endangerment of minors. No sharing private or intimate information without permission. No spam, unsolicited bulk messaging, artificial engagement, or abusive bots. Nothing in these terms excludes liability that cannot lawfully be excluded, including liability for intentional misconduct, gross negligence, or mandatory consumer rights. If you are a consumer, you keep all protections given to you by the law of your country. OpenAI for automated safety classification of uploaded images. OrangChat is operated by Oranges.LT in Lithuania. Contact us at {email}. More operator information is available in our {legalNotice}. Operational, security, and moderation records are kept only as long as reasonably needed. Operator Orang OrangChat OrangChat can connect to or display third-party services. Those services have their own terms and privacy practices. We do not control and are not responsible for third-party content, availability, or conduct. OrangChat has no advertising, analytics SDK, cross-site tracker, or data broker relationship. We do not sell personal data, use behavioural advertising, or create profiles for marketing. OrangChat is built for conversation and community. These rules apply to accounts, profiles, messages, calls, files, servers, links, and every other part of the service. OrangChat is currently provided without a paid subscription. We may change, add, limit, or discontinue features and may perform maintenance. We do not promise uninterrupted, error-free, or permanently available service. We will provide reasonable notice when a material change is likely to significantly affect users, where practical. OrangChat is not available to children under 14. We do not knowingly collect personal data from a child below the applicable minimum age. Contact us if you believe a child has provided data in breach of this rule. OrangChat is privacy-focused. We do not track you across the web, build advertising profiles, run product analytics, sell personal data, or collect information simply because it might be useful later. This policy explains the limited information that must be processed to provide the web, desktop, and Android service you request. OrangChat uses only storage needed to sign you in, secure account linking, remember your choices, and provide requested features. We do not use advertising or analytics cookies. Oranges.LT OrangMove for temporary storage of large files, normally for up to one hour. Prevents forgery during Google or Discord login. Privacy Policy Protect people Provide accurate registration information and keep it current. Purpose Refresh sessions normally expire after 30 days and are rotated or revoked on logout. Reporting and enforcement Report serious violations to server moderators and to {email}. Include relevant message links, user or server identifiers, timestamps, and a concise explanation. Do not redistribute harmful material merely to document a report. Security and technical data: Send privacy requests, content notices, intellectual property notices, safety reports, and lawful authority requests to the email above. Clearly identify the request, the relevant content or account, your authority or rights, and reliable contact details. We may request additional information needed to verify and process the request. Send spam, run abusive automation, scrape users, or manipulate platform features. Server owners and moderators may set additional rules and may remove content or members from their communities. Their actions are their own. OrangChat may investigate reports, restrict visibility, remove content, disable features, suspend accounts, preserve evidence, or contact competent authorities when reasonably necessary. Server owners should publish clear local rules, choose trustworthy moderators, use permissions carefully, respond to reports, and protect younger members. Local rules may be stricter than these guidelines but may not authorise conduct prohibited by them. Server responsibilities Service Service operator Some providers may process data outside Lithuania or the European Economic Area. Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer safeguard. You may ask us for information about the safeguard relevant to a particular provider. Subject to applicable law, you may request access, correction, deletion, restriction, portability, or a copy of your data. You may object to processing based on legitimate interests and withdraw consent where processing relies on consent. You may also complain to the Lithuanian State Data Protection Inspectorate or your local supervisory authority. Tell us promptly if you believe your account or the service has been compromised. Temporary OAuth and QR login state normally expires within minutes. Terms of Service The OrangChat name, software, interface, graphics, and original materials are protected by applicable intellectual property law. User content remains the responsibility and property of its respective owner, subject to the licence in the Terms of Service. These cookies are strictly necessary to provide authentication that you request. They are Secure in production, and authentication cookies are not available to page scripts. These terms govern your use of OrangChat, including its website, desktop application, Android application, messaging, calls, servers, integrations, and related services. The web and desktop apps store interface preferences on your device, including theme, accessibility, message density, notification choices, plugin settings, GIF favourites, download prompts, and dismissed notices. The Android app stores equivalent settings and encrypted sign-in credentials in app storage. This information stays on your device unless a feature explicitly synchronises it with your account. Threaten violence, harass people, publish private information, or promote hatred. to create accounts, deliver messages and calls, store content, manage communities, authenticate sessions, and provide requested features. To request review of a platform-level action, email us from the address associated with your account. Explain the action, why you believe it should change, and any relevant context. Another review does not guarantee reversal. to respond to valid legal requests, protect rights, retain required records, and meet regulatory duties. to secure the service, prevent abuse, debug failures, moderate content, maintain reliability, and understand operational usage. To the fullest extent permitted by law, OrangChat is provided as available and without warranties beyond those that cannot legally be excluded. We are not responsible for user content or for indirect, incidental, special, consequential, or punitive losses arising from use of the service. Typical duration Updated {date} Upload content you do not have permission to use. Up to 30 days Use account and security settings where possible, or email us. We may need to verify your identity before completing a request. Use OrangChat for illegal, fraudulent, deceptive, or harmful activity. Voice and presence data: We aim to apply restrictions diligently, objectively, and proportionately. If we take a platform-level action against your account or content, you may ask for a review by emailing us with the relevant account and content details. Website We disclose information to authorities or other parties when required by law or reasonably necessary to protect users, rights, safety, and service security. We give you a personal, limited, revocable, non-transferable right to use OrangChat software for its intended purpose. You may not bypass security measures, misuse private interfaces, or reverse engineer the software where law permits us to restrict that activity. We may suspend or terminate access for a serious or repeated breach, legal requirement, security risk, or material harm to users or the service. Immediate action may be taken where delay would create risk. Otherwise, we will use reasonable efforts to explain the action and available review process. We may update these terms for legal, security, operational, or product reasons. We will provide notice of significant changes through the service or another appropriate channel. The effective date at the top identifies the current version. We may update this policy when our service or legal obligations change. Significant changes will be communicated through the service or another appropriate channel. We minimise data collection. If information is not needed to provide a feature, protect the service, or meet a legal duty, we do not ask for or intentionally retain it. where you choose optional device permissions, push notifications, or an optional connection that legally requires consent. You may withdraw consent without affecting earlier processing. You are responsible for activity performed through your account until you notify us. You can clear OrangChat site data through your browser or app settings. Blocking the necessary authentication cookie prevents persistent sign-in. Clearing local storage resets device preferences but does not delete your OrangChat account or server content. Because we do not set optional advertising or analytics cookies, OrangChat does not display a consent banner. You confirm that you have the rights needed to submit your content and that its use on OrangChat does not violate law, privacy, intellectual property, or these terms. You keep ownership of messages, files, profile information, server content, custom emoji, sounds, events, and other material you submit. You give OrangChat a worldwide, non-exclusive, royalty-free licence to host, store, reproduce, process, transmit, display, and adapt that content only as needed to operate, secure, improve, and provide the service. This licence ends when the content is deleted, except for copies that must remain temporarily in backups, security records, or material shared with others. You may stop using OrangChat at any time and may delete your account in Security settings. You must transfer or delete servers you own first. Account deletion removes identifying profile and account data, but messages may remain under a Deleted User identity so other participants retain their conversation history. You can separately delete your message history before deleting your account. You must be at least 14 years old. If the law where you live requires parental or guardian permission, you may use OrangChat only after obtaining that permission. A parent or guardian who permits a minor to use OrangChat should help them understand these terms and use the service safely. You must follow the Community Guidelines. You must not: Authenticator code Confirm with your passkey to finish signing in. Create an account Email Email code Email me a code instead Enter the 6-digit code from your app, or a recovery code. Log in Log in to keep the conversation going. Lost your authenticator? New to OrangChat? Password Send a new code Sign in Sign in with a passkey Sign in with your phone Use passkey Verify We emailed you a sign-in code. It expires in 10 minutes. Welcome back Spoiler, click to reveal Install Installed App themes override OrangChat color variables. Every entry is reviewed through a pull request and bundled with the client. Want to contribute? {repo}. No themes match \"{query}\". Search themes See the marketplace repo Ban Ban {name} Change nickname Kick Kick {name} Members Message Nickname Offline - {count} Online - {count} Reason (optional) Roles Server owner They can rejoin with a new invite. They won\'t be able to rejoin unless unbanned. View profile Decrypt Decrypting {filename}… Expired - large files are only kept for an hour This image was hidden by automatic moderation Inappropriate content Show {size} · encrypted Spoiler This file could not be decrypted on this device Add Reaction Apps Copy Message ID Copy Message Link Copy Text Delete Message Edit Message Forward Mark Unread Pin Message Reply Report Message Speak Message Unpin Message Delete message (edited) Edit message Enter to save · Esc to cancel Jump to the replied message Original message Pinned Reply Couldn\'t find that message - it may have been deleted. Load earlier messages New messages New messages start here This is the start of the channel. Say something! Welcome to #{channel} Find friends Search by name or username Add a passkey Added {added} · last used {lastUsed} Added {added} · never used Authenticator code Create passkey Current password Name No passkeys yet. Passkeys Personal laptop You\'ve reached the limit of {max} passkeys. Remove one to add another. Remove {name} Remove passkey Removing this only affects OrangChat. Delete it from the device\'s own passkey settings too, or it will keep showing up there. Rename {name} Sign in with your fingerprint, face or device PIN instead of a password. A passkey only works on the site that created it, so it can\'t be phished - which is why we ask for one instead of an emailed code when your account has one. So you can tell it apart from your other devices later. Synced to your device\'s keychain. This browser doesn\'t support passkeys. Passkeys you add elsewhere will still work on your other devices. This conversation is not encrypted yet {who} has not set up encryption on any device, and a locked message needs a key on their side to open it. Messages here are stored the ordinary way until then - it switches on by itself the moment they open OrangChat on a phone or computer. {who} have not set up encryption on any device, and a locked message needs a key on each of their side to open it. Messages here are stored the ordinary way until then - it switches on by itself the moment they all open OrangChat on a phone or computer. Enable Enabled Built-in plugins tweak how this browser shows OrangChat. They ship with the app - nothing is downloaded or run from elsewhere - and each choice is stored on this device only. {count} enabled. Want to contribute? {repo}. No plugins match \"{query}\". Search plugins See the marketplace repo Check people before messaging them Direct messages Encryption Every direct message is encrypted, always, and that part cannot be switched off. This setting is about how carefully the other person\'s lock is checked before your messages are sent to it. Friend notifications Friend requests Friends coming online Leaving it off is not \"unprotected\". Every lock is still checked against a logbook that can only be added to, which your own devices read on every start. The difference is whether a swapped lock is stopped before it can be used, or caught right after. Group conversations always send straight away, either way. Let people see “is typing…” while you write. Notify me when someone accepts my friend request. Notify me when someone sends me a friend request. Off by default - this fires for every friend each time they open the app. Requests accepted Send typing indicators Stop requiring verification What you share Who can open a new conversation with you. Conversations you\'re already in stay open either way. Who can send you a friend request. With someone new, your messages wait on this device - locked, sent nowhere - until you have seen their code in person or read the numbers to each other on a call. Worth turning on only if you can realistically meet or ring the people you message. About me Member since Accept Message Install Installed Profile themes style your public profile card - each preview below is your own card with that theme applied. Every entry is reviewed through a pull request, bundled with the client, and sanitized before it renders. Want to contribute? {repo}. No profile themes match \"{query}\". Search profile themes See the marketplace repo This is how your About me reads with this theme applied. username Your name Code expired Confirm on your phone Could not start QR sign-in. New code Open OrangChat on your phone, and point it at this code to sign in here. Scan with the OrangChat app Sign-in QR code Try again Use email and password instead Camera preview for scanning a code Paste instead Paste the code text instead. It starts with Use the camera Use this code Approve sign-in Approve this sign-in? Checking sign-in code… Only approve a code shown on a device you trust. This will sign that device into your OrangChat account. Point your camera at the QR code on the device you want to sign in. You will review and approve the request before it is allowed. Scan another code Scan a sign-in code Sign-in approved The other device can now finish signing in. Add reaction Add context that will help review this report Reporting deliberately reveals this one decrypted message and a one-message key. It does not reveal the conversation key, earlier messages, or later messages. Send report What happened? (optional) Checking them here is safer than reading along - sixty digits is more than anyone actually compares by eye. That is {digits} of 60 digits. Nothing is compared until the whole code is there, so a partial one is never called a mismatch. Not in the same room? These do not match. Most often that is a digit misheard or mistyped, so check it once more. If it still differs, somebody is standing between you - do not send anything here until you know which. These numbers appear once both accounts have set up encryption on a device. Working it out… No messages found for “{query}”. Only this channel Searched on this device. Encrypted messages this device has never opened are not in these results. Search messages Search this conversation… Search this server… Server search matches whole words. Try {phrase} or {exclude} a word. Type to search messages. Account {subject} Accepting starts this contact over as unverified and lets messages flow again. Anything they sent before they started over stays unreadable, and it does not confirm who they are - compare safety numbers once you can. I understand 1. Scan this code 2. Enter the 6-digit code Account standing Ask for a code from your phone in addition to your password when you sign in. At least 8 characters. Banned from {server} Can\'t scan? Change email Change password Changing your password signs out every other session. Code from your app Code from your app (or a recovery code) Confirm new password Confirm your password Consider generating a new set. Continue Copied Copy Delete account Delete all my messages Delete all your messages Deleted {count} message. Deleted {count} messages. Delete my account Delete them all Email & password Email changed to {email}. Enter this key manually: Freezes the account if you think someone else is in it: signs out every other device, blocks new sign-ins, and closes new DMs and friend requests until you lift it. Generate codes I\'ve saved them Leave all servers Leaves every server you\'re in except the ones you own. You\'ll need a new invite to get back into any of them. Left {count} server. Left {count} servers. Lift lockdown Lockdown Lock down my account New email New password New recovery codes No server is currently restricting you. Nothing can sign in, and no new DMs or friend requests reach you. This device stays signed in. Password changed. Password changed. {count} other session was signed out. Password changed. {count} other sessions were signed out. Permanently delete Reason: {reason} Recovery codes {count} recovery code left. {count} recovery codes left. Removes every message you\'ve sent, in every server and group - including the ones you\'ve left. Attachments you uploaded aren\'t removed from storage. This can\'t be undone. Save these now - each works once if you lose your phone, and this is the only time they\'re shown. Set a password Set password Signed in as Signed out {count} other session. Signed out {count} other sessions. Still yours: {names}. This replaces every existing recovery code. Those don\'t match. Timed out in {server} Turn off Turn off two-factor Turn on two-factor Two-factor authentication Two-factor authentication is on Two-factor QR code Type {username} to confirm Until {time} Used to sign in. There\'s no confirmation email, so double-check it. Turning off two-factor makes your password the only thing protecting your account. Yes, leave them all You\'ll need an authenticator app - Google Authenticator, 1Password, Aegis, or any other TOTP app. Your account is in good standing Your account is locked down Your current password Your messages stay in the conversations they\'re part of, shown as from a deleted user. Everything else - profile, connections, friends, server memberships - is erased. This can\'t be undone. Your password Copy Server ID Create Category Create Channel Edit Per-server Profile Invite to Server Leave Server Mark As Read Mute Server Notification Settings Privacy Settings Server Settings Unmute Server Add a server Home Leave server Members of this server see this nickname instead of your display name. Leave it empty to use your display name. Nickname Servers unread direct messages You\'ll need a new invite to get back in. Audit log Bans Color Danger zone Delete forever Delete role Delete server Deleting a server removes all its channels and messages. This cannot be undone. Description Emoji Leave empty for initials. Loading bans… Members lose this role immediately. New role No banned users. No roles yet. Overview Role name Roles Shown on the invite page. {count}/1024 Save changes Save role Server icon Server name Server settings Sounds This permanently deletes the server, its channels, and every message. Unban What is this server about? Couldn\'t load this server No text channels yet - create one from the server menu. Allow camera & microphone Applies the next time you join a call. Camera Camera and microphone access is granted. Camera and microphone are blocked. Re-allow them for this site in your browser\'s address bar, then reload. Chrome and Edge only - other browsers always use the system default. Input device Join muted Join with camera on Microphone OrangChat only opens your camera and microphone during a call, and while you\'re testing them here. Output Permissions Speaker Start every call with your microphone off. Start voice channels with video already publishing. These choices are stored on this device only - they\'re never sent to the server. This browser doesn\'t expose camera or microphone controls. Video device When joining a call Already have an account? Check your email for a verification link. You must verify it before signing in. Claim your username and start chatting. Community Guidelines Create account Create your account Display name (optional) Email By creating an account, you agree to the {terms} and {guidelines}, and acknowledge the {privacy}. Log in Lowercase letters, numbers, underscores, and dots. Password Privacy Policy Terms of Service Username Delete {name} Sound must be 1 MB or smaller. MP3, OGG, WAV or FLAC up to 1 MB and {seconds} seconds. No sounds yet. Upload one to play it in this server\'s voice channels. Preview {name} Rename {name} Soundboard Sounds must be {max} seconds or shorter (that one is {actual}s). Upload Uploading… Volume for {name} No sounds yet. Add some in Server settings → Sounds. Soundboard Loading OrangChat App updates Cached data on this device. Cached data on this device: ~{usage}. Check for updates Checking for updates… Clear cache & reload Connected Connecting… Couldn\'t check right now. Try again later. Couldn\'t check right now. Try again later. ({message}) Desktop notifications Disconnected Enable notifications Notifications Notifications are blocked. Enable them for this site in your browser settings. Off, notifications show who wrote and nothing more. Encrypted messages are then never unlocked to make a notification at all. This browser only. You\'re on the latest version. You\'re on the latest version ({version}). OrangChat for {platform}. OrangChat {version} for {platform}. Push alerts for direct messages and @mentions, even when OrangChat is closed. Realtime connection Show message text Status Storage This app build can\'t check from here - use Help → Check for Updates… in the window menu, or the tray icon. This browser doesn\'t support notifications. Update checks only run in the installed app. Update {version} found - downloading. You\'ll be asked to restart. Dismiss notification Adding a device is a security event, so it takes a fresh second-factor code. Every other device on your account will be told about it. Add phone to this account Add this device A one-time code is on its way to your email - it expires in 10 minutes. Authorizing your phone Both screens should show the same six digits. If they differ, something is between your two devices - stop here. Connecting to the other device… Creating one-time code… Device transfer code Digits confirmed Email me a code Encrypting conversation-history keys, signing the new device, and waiting for the phone to store them securely… Enter the security code on the authorized device. This device is waiting for the encrypted history and signed authorization. On a device you\'re already signed in on, open Settings → Encryption and choose \"Add another device\", then point it at this code. Keep them close together - the transfer only goes over your local network. Open Settings → Encryption → Add this phone. Resend email code Scan the code shown on the new device, or use the paste option if this PC has no camera. Scan this with your phone Show a code for my phone to scan Tap “Scan code from PC” and point OrangChat at this code. They don\'t They match This account has no authenticator app set up, so OrangChat will email a one-time code to the address on your account. Check your email before entering it here. Transfer progress Try again Update the phone to OrangChat 0.5.4 and sign in to this account. Use a code shown by the new device instead Use an email code instead Waiting for the other device… Waiting for your phone to scan… Dismiss update notice OrangChat {latest} fixes problems in the version you are running. OrangChat {latest} is available. This version of OrangChat is no longer supported and can no longer connect. Update to continue. This version of OrangChat is no longer supported and can no longer connect. Update to {latest} to continue. Reload Update Update required User settings About About me Accent color App icon Applied Apply CSS Avatar Banner Browse app themes Browse profile themes Clear Close settings Community themes Could not save the icon CSS file is too large (max 100 KB). Custom CSS Custom CSS is active. Custom CSS theme Dark Display name Download default Download template Icon Identity Leave empty to use your accent color. Light Load example Load starter Lowercase letters, numbers, underscores, and dots. About Accessibility Activity Appearance Camera & Mic Connections Devices Download app Encryption Account App Appearance Privacy & Security Plugins Privacy Profile Profile theme Scan sign-in QR Security System Theme .oc-pf-body { background: #1a1030; } PNG, JPEG, WebP, or animated GIF. Prebuilt colour themes and profile-card themes, reviewed and bundled with the app. Installing one recolours everything without writing any CSS. Preview Profile theme (CSS) Pronouns Replaces the OrangChat mark for you everywhere you are signed in - browser tab, in-app branding, and the desktop window and tray. Nobody else sees it. Restyle the app for yourself - paste CSS below or upload a .css file. It applies the moment you save, and it outranks the built-in theme, so overriding a design token (the --oc-* variables) is enough to recolour everything. Download the default stylesheet to see the full list. :root { --oc-primary: #22c55e; } Saved! Save profile About Accessibility Activity Appearance Camera & Microphone Connections Devices Download app Encryption Plugins Privacy Profile Profile theme Scan sign-in QR Security System Theme Settings sections Signed in as Sign out Square images work best. Leave empty for the OrangChat mark. Status Style your profile card however you like - everyone sees it. It\'s sandboxed: scoped to your card only, no external URLs, and it can\'t cover or escape the card. The preview above updates live. Tell people about yourself… Theme “{name}” is installed. they/them Upload CSS Username Check them Check people You asked to check people before messaging them, and you have not checked {who} yet. The message is sitting on this device, locked - it has not been sent anywhere. Scan their code, or compare numbers on a call, and it goes. Your message is waiting, not lost Done. Everything from here on uses the new key. Everything sent from now on uses a new key. Existing messages stay readable, and everyone still in the conversation keeps access. Forget that I checked them Make a new key My verification code Point this at the code on {name} screen. They will find it under the lock at the top of this conversation, or in Settings → Encryption. Replaces the key used from now on, so a device that has since been removed cannot read anything new. Messages already here stay readable, and nobody is locked out. Scan their code Send without checking them first Show my code You have checked {name}. They have not checked you yet - have them scan this code now, so it works both ways. Standing together? Scan each other\'s codes - one scan proves one direction, so do both. Apart, compare the numbers below instead. Start a fresh key Start a fresh key here their This code holds nothing secret. It is safe for anyone to see; being in the room is what makes scanning it mean something. Seek video Got it What\'s new