X Chat will be available for download on the App Store this Friday. The media has already run through the feature list: disappearing messages, screenshot prevention, 481-person groups, Grok integration, and no phone number registration, which has generally positioned it as the "Western WeChat". However, there are three questions that have hardly been clarified in any reporting.

On X's official help page, there is a phrase that still hangs on the X official help page: "If a malicious insider or X itself causes encrypted conversations to be leaked due to legal proceedings, both the sender and recipient will be completely unaware."

Question 1: Is this encryption the same as Signal's encryption?

No. The difference lies in where the keys are stored.

Signal's end-to-end encryption never allows the keys to leave your device. X, the court, or any external parties do not have your keys; Signal's servers have nothing that can decrypt your messages, and when subpoenaed, they can only provide the registration timestamp and last connection time, with historical subpoena records as evidence.

X Chat uses the Juicebox protocol. This solution splits the key into three parts and stores them on three servers operated by X itself. When restoring the key with a PIN, the system retrieves these three fragments from X's servers and reassembles them. Regardless of how complex the PIN is, the actual custodian of the key is X, not the user.

This is the technical background of "the phrase on the help page": since the keys are on X's servers, X has the ability to respond to legal proceedings without the user's knowledge. Signal does not have this capability, not due to policy, but because it simply does not have the keys.

The image above compares the security mechanisms of Signal, WhatsApp, Telegram, and X Chat across six dimensions. X Chat is the only one among the four where the platform holds the keys, and it is also the only one without forward secrecy.

The significance of forward secrecy is that even if the key at a particular point in time is compromised, past messages cannot be decrypted because the key for each message is different. Signal's Double Ratchet protocol automatically updates the keys after each message; X Chat does not have this mechanism.

Matthew Green, a cryptography professor at Johns Hopkins University, analyzed the X Chat architecture in June 2025 and commented, "If we judge XChat as an end-to-end encryption scheme, this seems like a pretty game-over type of vulnerability." He later added, "I would not trust this any more than I trust current unencrypted DMs."

From the reports in September 2025 by TechCrunch to its launch in April 2026, this architecture has not changed at all.

On February 9, 2026, Musk tweeted a promise that X Chat would undergo rigorous security tests ("rigorous security tests of X Chat") and that all code would be open-sourced ("open source all the code").

As of April 17 when it was launched, no independent third-party audit had been completed, there was no official code repository on GitHub, and the privacy label in the App Store showed that X Chat collects location, contact information, search history, and more than five types of data, directly contradicting the launch marketing statement "No Ads, No Trackers".

Question 2: Does Grok know what you are messaging privately?

It is not continuous monitoring, but there is a clear entry point.

On each message in X Chat, users can long-press and select "Ask Grok". When this button is clicked, the message is transmitted to Grok in plain text, transitioning from an encrypted state to an unencrypted state at this step.

This design is not a flaw; it is a feature. However, X Chat's privacy policy does not explain whether this plain text data will be used for Grok's model training, nor does it specify whether Grok will store the content of that conversation. When users actively click "Ask Grok", they are effectively removing the encryption protection from that message.

There is also a structural issue: how quickly this button will transition from "optional feature" to "default habit". The higher the quality of Grok's responses, the more frequently users rely on it, and thus the greater the proportion of messages that leak out of encryption protection. The actual encryption strength of X Chat, in the long term, depends not only on the design of the Juicebox protocol but also on the frequency with which users click "Ask Grok".

Question 3: Why is there no Android version?

X Chat's initial release only supports iOS; the Android version simply states "coming soon" with no timeline.

In the global smartphone market, Android accounts for about 73%, while iOS accounts for about 27% (IDC/Statista, 2025). Among WhatsApp's 3.14 billion monthly active users, 73% are on Android (according to Demand Sage). In India, WhatsApp reaches 854 million users, with an Android penetration rate exceeding 95%. In Brazil, there are 148 million users, with 81% on Android; in Indonesia, there are 112 million users, with 87% on Android.

WhatsApp's dominance in the global communications market is built on Android. Signal has about 85 million monthly active users, also primarily relying on privacy-conscious users in Android countries.

X Chat has sidestepped this battleground, which can be interpreted in two ways. One is technical debt; X Chat is built with Rust, making cross-platform support not easy, and prioritizing iOS may be due to engineering pace. The second is a strategic choice; the iOS market share in the American market is nearly 55%, and X's core user base is in the United States, so prioritizing iOS effectively focuses on its base rather than confronting the emerging market dominated by Android and WhatsApp.

These two interpretations are not mutually exclusive; the outcome is the same: X Chat's initial release actively abandoned 73% of global smartphone users.

Musk's "Universal App"

This matter has already been described by someone: X Chat combined with X Money and Grok forms a data closed loop, parallel to existing infrastructure, logically similar to the WeChat ecosystem. This judgment is not new, but at this point of X Chat's launch, it is worth revisiting the wiring diagram.

X Chat generates communication metadata, including who is chatting with whom, for how long, and how frequently, and this data flows into X's identity system. Part of the message content enters Grok's processing chain through the Ask Grok feature. Financial transactions are handled by X Money: external public testing was completed in March, and in April, it opened to the public, enabling fiat currency peer-to-peer transfers through Visa Direct. Fireblocks executives confirmed that cryptocurrency payment plans will be launched by the end of the year, and it currently holds currency transmission licenses in over 40 states in the U.S.

Each function of WeChat operates within the regulatory framework of China. Musk's system operates within the regulatory framework of the West, but he also serves as the head of the Department of Government Efficiency (DOGE). This is not a copy of WeChat; it is a reenactment of the same logic under different political conditions.

The difference is that WeChat has never stated on its main interface that it is "end-to-end encrypted", while X Chat has. "End-to-end encryption" in user perception means that no one can see your messages, including the platform itself. X Chat's architectural design does not meet this perception expectation, yet it uses this term.

X Chat consolidates three data lines of "who this person is, who he talks to, where his money comes from and goes" into one company.

The phrase on the help page has always been more than just a technical explanation.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。