Secure Temp Chat

1 Choose a chat network

Network type

Server address

Nickname

Account password (optional)

A password logs you in to the server with SASL (IRC) or SASL SCRAM/PLAIN (XMPP). It identifies you to the server; it is never sent to your chat partner. Leave blank to stay anonymous (XMPP needs a server that allows ANONYMOUS).

Advanced

IRC WebSocket sub-protocol IRC server password (PASS) (optional) I use a TLS client certificate (CertFP / SASL EXTERNAL) installed in my browser

Web pages cannot choose or inspect client certificates - the browser does that itself. This tick-box is only your own note and is not counted in the scores.

How to pick a safe server

Insist on TLS. Use wss:// (WebSocket over TLS) addresses, or TLS ports (IRC 6697) through the bridge. Never plain ws://, port 6667, or XMPP without TLS. Browsers refuse ws:// from this https page anyway.
Check the certificate is valid (padlock). XMPP admins can test servers at compliance.conversations.im.
The server can still see who talks to whom. TLS only protects the road to the server. Only end-to-end encryption (step 2) hides message text from the server's operator - so always turn it on.
Prefer servers with a clear no-logging policy, host/IP cloaking (IRC) and SASL accounts.
Want to hide your IP? Use the bridge with Tor or I2P (step 3).

2 Choose your encryption

End-to-end protocol

Key-exchange curve

Authentication (proves who you're talking to)

Disappearing messages

3 Route (optional): Tor / I2P / direct TCP

How should your connection leave this browser? Directly from my browser (WebSocket) Through my local bridge (needed for Tor, I2P, plain IRC ports, and to see the real TLS cipher)

Anonymity network

Secure Temp Chat

1 Choose a chat network

2 Choose your encryption

3 Route (optional): Tor / I2P / direct TCP

4 Connect & chat

Support the grid