Your server can’t read your direct messages

Nexus is community chat you run yourself, with voice, screen sharing and direct messages only the people in them can read.

Create account
Six telephone operators seen from behind, seated in a row at a large switchboard, headsets on, plugging in calls

An operator connected every call, and could listen in. Your Nexus server connects every message, and can’t read your DMs.

Chesapeake and Potomac Telephone Company operators, 7 April 1927. U.S. National Archives.

Try the encryption

Type your own message above. Your browser seals it right here with fresh X25519 keys, one copy for each person, the way Nexus does. Nothing you type leaves this page.A sealed message, recorded. With JavaScript on, your browser seals whatever you type here, one copy for each person, the way Nexus does.

What the server stores
NEXUS_E2EE:{"v":1,"r":{"sam":{"ephemeral_pub":"e3715c525921959cb9c04d5265ecf316bee4adb45bbf163304b6825da41e1555","nonce":"8a43f29eea96cfdb4afb243c","ciphertext":"780754d68bbd7edc7dd0ceb3a73a856be0cf652148a1947894aeb177"},"you":{"ephemeral_pub":"c4fafa8fe058dce73873c98f0e12eabb5878ee56c378a597c2c125462f2f0204","nonce":"11dc67990f12defb5dd3a269","ciphertext":"69e08f0cccb3c2402984d53891962f08d57d1fe0aa1abf40e70b5aa2"}}}
Sam opens it
Dinner at 8?

How joining works

First, pick a name

A username, an email address and a password. That’s the whole form.

Then save your recovery code

It’s the only way back into your encrypted messages if you forget your password and no device is signed in. Nexus shows it once, and the server never sees it.

Next, add a second factor

Every account on this server signs in with two factors. Google Authenticator, Authy, 1Password or any authenticator app will do.

Then say hello

You’re in. Pick a channel, join a voice room, or start a DM. Your DMs are encrypted from the first message.

Show a step

What’s in it

Channels sort into categories, and roles decide who can see what. Messages take replies, threads, polls, GIFs and reactions . Voice channels carry calls and screen sharing, with noise suppression built in.

Direct messages, one-to-one or in a group, are end-to-end encrypted. Server channels aren’t: they’re stored on the server, which is yours.

Get the desktop app

Install it, or
just open a tab

Downloads
LinuxAppImageDownload
Linux.deb packageDownload
Linux.rpm packageDownload
WindowsInstaller that updates itselfDownload
macOSUniversal .dmgComing soon
WebRight here, in your browserOpen
Every releaseChangelog and older buildsGitHub