Qor Chat
Qor-Chat is a decentralized post-quantum private messaging built so the server can carry your traffic without knowing your identity, contacts, searches, recipients, or conversations. EVER.
Download Qor-Client
Choose the platform that matches your system.
Desktop build version from GitHub releases. Package format is handled on the releases page.
What Qor solves
Qor is built for the problem encrypted messengers still leave behind: trusting someone else with your metadata.
Most apps can protect message contents while centralized servers, third-party services, sign-ins, analytics, and hosted infrastructure still learn who you are, who you contact, when you reconnect, and how your social graph fits together.
Qor is designed so the server is never given the identity, discovery, routing, or delivery fields it would need to build a user profile, even if someone modified or watched the server.
Why Qor?
Most secure messengers are secure in the normal way: standard encryption wrapped around accounts, identifiers, third-party services, cloud dependencies, or server-visible routing.
Qor takes the stricter path. It does not use third-party services for core messaging, discovery, authentication, routing, or P2P setup. Those systems are built into Qor and run through Qor's own protocol instead of relying on Google sign-ins, hosted analytics, external STUN shortcuts, or paid services that can become another place your data lives.
The result is a messenger where the server carries encrypted traffic without receiving the information needed to know who you are, who you search for, who messages are for, or what the messages say.
Who is this for?
Qor is for people and communities who want metadata privacy treated as seriously as message contents.
That includes privacy-focused users, developers, researchers, journalists, organizers, self-hosters, security-conscious teams, and anyone who does not want a central service mapping their identity, contacts, searches, calls, or conversations.
It is also for people who want infrastructure they can inspect and run themselves. Qor is built around anonymous credentials, private discovery, and blind routing instead of account systems that expose identity to the server.
What makes it different?
Qor combines protections that are usually split across separate systems, or skipped entirely, into one desktop messenger built carefully from the protocol layer up.
Messages use LibSignal Double Ratchet with post-quantum PQXDH, hybrid ML-KEM-1024 + X25519 encryption, ML-DSA-87 signatures, sealed-sender envelopes, fixed-size padded transport frames, post-quantum WebSocket sessions, and mutually authenticated post-quantum QUIC for P2P paths when available.
Discovery and routing are blind by design: OPRF, computational PIR, encrypted discovery blobs, opaque sealed envelopes, cover traffic, and mix delivery help keep lookups, senders, and recipients unlinkable from the server's point of view.
Qor is intentionally overbuilt: no third-party core services, no identity-provider shortcut, no default reliance on someone else's relay path, and no server-side data trail to sell.
For the full technical design and threat model, read the technical docs.