xox is now on Tor too
Encrypting what you say is only half the job. The other half is that nobody can tell who is talking, or from where. From today xox runs inside the Tor network, at an .onion address of our own — and when you use it that way, your IP address does not reach our servers at all.
What changed
xox now has its own Tor onion service. It is not a copy of the site or a cut-down version: it is the whole app — your area, your identities, your conversations, your vault — running inside Tor. Open it with Tor Browser and everything works as it always did.
Why it matters
Without Tor, two parties learn something even though they cannot read a word you write: your internet provider sees that you connect to xox, and our hosting company sees the address you connect from. With Tor, the connection ends inside the Tor network and never comes out to reach us. We could not tell anyone where you connect from, because we do not know it.
How to get in
Open xox.is with Tor Browser and it offers you the .onion address on its own — we publish it in the page headers, so you do not have to copy anything by hand. Or go straight to the address below. The app notices it is running over Tor and switches to Tor mode by itself.
What works and what doesn't, plainly
Messaging, groups, voice notes, files, several identities and the local vault: all of it works over Tor. Live calls and live rooms do not, and we would rather say so than let you find out: Tor Browser switches off the technology those calls need, precisely because a live call would reveal your real address behind the proxy. In Tor mode the app blocks any connection that would leave the .onion, so nothing can slip out by accident.
Five ways to use xox
In your browser, with nothing to install. On Android, downloading the app straight from us without going through a store. On GrapheneOS, with no Google services anywhere. On iPhone. And now inside Tor. Same encryption in all five — pick the one that fits how exposed you are.
Address on Tor: usslpd5ggt6lc4wh
None of this asks anything of you: no account, no phone number, no email. It never did, and over Tor there is even less to ask for.