DeXCHAT 0.8.2 - Windows x64

1. Extract this ZIP to a folder you choose and open DeXCHAT.exe.
   Python is not needed. If required, install the bundled vc_redist.x64.exe.
2. Choose Create chat, then Internet or Same Wi-Fi. A name is optional.
   Enable Group for up to 8 devices; keep the creator online.
3. Save the invitation password and acknowledge it. Send the link and password
   separately. Your friend opens the internet link in a phone browser or pastes
   an invitation into Join chat in Windows or the browser.
4. A local phone opens the exact Short link on the same Wi-Fi/hotspot.
   Acknowledge the HTTP risk before entering the password. HTTP pages can be
   tampered with and expose passwords, keys and plaintext despite E2E.
5. Compare the six safety emojis and fingerprint through a trusted conversation.
   Recheck when keys/membership change. Names do not prove identity.

Website: https://chat.duxalife.com/dexchat/ (English and Russian).
Both private chats and groups use one current DeXCHAT protocol and endpoint:
wss://chat.duxalife.com. WSS protects transport; E2E protects message contents.
Only current clients, profiles and invitations are accepted. Create fresh ones.

Photos <=10 MiB, files <=25 MiB, voice <=120 seconds work in both clients.
Photo compression defaults to JPEG; choose Original to preserve file bytes.
Key checks and membership notices appear in chat with action buttons.
Click photos for a RAM viewer. Timers, download controls and one-time photos/
voice are client rules, not a guarantee against cameras or modified clients.
Windows audio uses native WinMM with RAM buffers.
Browser microphone capture needs HTTPS; LAN HTTP can listen, Windows can record.
Short local invitations stay in server RAM for 15 minutes; passwords are separate.
QR generation is offline. Windows Firewall may ask for private-network permission.
The round ? in Settings explains WSS, the local server and laptop hotspot setup.

Private mode: XChaCha20-Poly1305, ephemeral X25519, Ed25519, Argon2id, HKDF/HMAC.
Group mode: creator-signed membership and pairwise encrypted epoch keys.
Removal rotates future keys and invalidates admission invitations. Create fresh
invitations for new members. New members receive no earlier messages.
These are unaudited custom protocols, not Signal/MLS or proof of invulnerability.

Messages and keys default to RAM. Profiles/files save only on explicit export.
Panic clears the session. Optional PIN hides the UI while keys remain in memory.
Erase All handles selected app export folders and exact compiled app files.
Reselect older export folders. Backups/copies elsewhere cannot be erased remotely.
This is not forensic erasure: paging/crash files and native library extraction
may leave OS traces. Use trusted Wi-Fi; HTTPS better protects browser code delivery.

The app is unsigned; the official bundled Microsoft runtime is separately signed.
Full mesh/WebRTC/Bluetooth live chat/offline queues/accounts are not included.
Runtime: https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist/
