AES-256-GCM · Argon2id · HKDF Ratchet · Zero-Knowledge
Nulkratos-Core is a free, browser-based, zero-knowledge encrypted messaging app. Send private messages with AES-256-GCM encryption and Argon2id key derivation. No account, no phone number, no email needed. Start a secure anonymous chat channel instantly. Your PIN never leaves your device. All cryptography runs client-side in your browser. Compatible with Tor Browser and VPN for maximum anonymity. No metadata, no identity, no plaintext ever stored on any server.
console.firebase.google.comFIREBASE_CONFIG in the scriptNulkratos-Core is a zero-knowledge, browser-based encrypted messenger. It lets two people communicate privately using nothing more than a shared Channel ID and a 6-digit PIN — no account, no phone number, no app install required.
Every message is encrypted with AES-256-GCM directly inside your browser before it ever reaches the internet. The server only ever sees random-looking ciphertext — it is technically impossible for us, Google Firebase, or any third party to read your conversations. Your PIN never leaves your device.
It is designed for situations where maximum privacy matters more than convenience — no identity, no metadata, no backdoors.
Tap Create New Channel. Enter a unique Channel ID (like a room name), your name, your contact's name, and choose a 6-digit PIN. This PIN is your shared encryption key — both of you must use the same one. Share it in person or via a phone call, never in a message.
After creating the channel, use the 🔗 Share button or copy the Channel ID and send it to your contact. The Channel ID is not secret — only the PIN unlocks the messages.
Your contact opens Nulkratos-Core, enters the same Channel ID, their name, and the same 6-digit PIN. They do not need to create a new channel — they just enter the existing one.
Type in the message box and hit Send. Every message is encrypted in your browser before transmission. You can long-press any message to copy, reply, or delete it. Tap ↩️ Reply to quote a specific message.
Inside a chat, the ⋯ (three-dots) button opens extra options:
Tap 🔒 Lock to immediately wipe the session key from memory. Your messages remain encrypted on the server — re-enter the same Channel ID, name, and PIN to access them again. No data is lost.
If you forget your PIN, your messages are permanently unrecoverable. There is no reset, no recovery code, and no way for us to help — this is by design. Always share your PIN via a trusted offline channel (face-to-face or phone call) and never forget it.
Tap · my channels · on the home screen to view channels you have previously accessed on this device. This list is stored locally in your browser and never sent to any server.
Page Integrity tool (in the ⋯ menu inside a chat) to verify the app hash with your contact.