Every device talks straight to the others
No accounts, no Fogata servers and no relays run by anyone else. When two friends can't reach each other, another member of the group may carry their traffic, still encrypted end to end.
Fogata
Pre-release 0.1.0-beta.4
Your friends.
Nobody in between.
Text, voice and video for small groups of friends, peer to peer. No accounts. No servers. Just your friends.
Pre-release 0.1.0-beta.4 · Check your download first · SHA256SUMS · signature · release notes
01 / Features
A campfire for your people.
Chat, hang out in voice rooms, share a screen or call one friend. Everything travels from device to device, and nobody else keeps a copy.
Signed, sealed, compared
Everything a device says is signed by it and encrypted between devices. Friends compare a short code once, so each device knows the other's key.
Rooms that light up
Groups of up to 20 friends, with voice rooms for up to 8 that light up when someone comes in. Cameras, and screens shared with their sound.
One to one, on two devices only
Message and call a friend, with pictures, voice messages and messages that disappear on a timer. Direct chats live only on the two devices, encrypted on disk.
Files, device to device
Share files in a room or a chat, sent straight from one device to the other and checked on arrival.
At home on every desktop
Linux, macOS and Windows, a tray icon, light and dark looks, and nine languages.
02 / How it works
From a link to a call, direct.
There is no Fogata server to sign up to, to hold your contacts or to carry your calls. Your devices do all of it themselves.
- 01
Add a friend
Share a one-time link, code or QR code, then compare a short fingerprint. Now each device knows the other's key.
- 02
Start a group
A group is a signed list of its members that every member keeps. Nobody else holds it.
- 03
Find each other
Devices look each other up in the public IPFS distributed hash table, used only as a phone book.
- 04
Connect directly
Then they connect straight to each other, also through home routers. If two can't, another member of the group may carry their traffic, encrypted end to end.
03 / Screens
04 / Install
Pull up a seat.
Each release on GitHub has the files for every system. Nothing is signed with a paid certificate, so check your download first and your system asks you to confirm the first start once.
Linux
Flatpak- Download
Fogata-0.1.0-beta.4-linux.flatpakand, in a terminal in its folder, run:
flatpak install --user Fogata-0.1.0-beta.4-linux.flatpak- It needs the Freedesktop 26.08 runtime from Flathub, which Flatpak offers to install.
- Open Fogata from your applications menu.
Windows
10 · 11 · x64- Unzip
Fogata-0.1.0-beta.4-windows-x64.zip(right click, Extract All), open the folder and double-click Install Fogata. - If SmartScreen says "Windows protected your PC", and only if the checksum matched, click More info, then Run anyway.
- The installer shows the zip's checksum again and asks you to type yes to confirm you checked it yourself. Then it checks every file, installs Fogata for you only, without an administrator password, and opens it. It is in the Start menu.
macOS
12+ · Apple silicon- Open
Fogata-0.1.0-beta.4-macos-arm64.zipand drag Fogata to Applications. - Fogata is signed but not notarized, so macOS can't check it the first time. Only if the checksum matched, click Done, then open System Settings → Privacy & Security, click Open Anyway next to Fogata and confirm.
- This is needed only once.
Before you open it
Check that it's the real Fogata
Without a paid certificate, the checksum is what shows a file is the one holypanda.dev made. The list of checksums, SHA256SUMS, is signed with Fogata's pre-release key. Save tools/allowed_signers from the source code next to it, not from where you downloaded the files, and check the list:
ssh-keygen -Y verify -f allowed_signers -I fogata-prerelease -n file -s SHA256SUMS.sig < SHA256SUMSIt must say Good "file" signature for fogata-prerelease. Then work out your file's checksum yourself and compare it with its line in SHA256SUMS:
- Windows
Get-FileHash .\Fogata-0.1.0-beta.4-windows-x64.zip- macOS
shasum -a 256 Fogata-0.1.0-beta.4-macos-arm64.zip- Linux
sha256sum Fogata-0.1.0-beta.4-linux.flatpak
If the signature isn't good or the checksum differs, don't open the file and write to contact@holypanda.dev.
Updates
Fogata keeps itself up to date. At every start it looks for a new version on its releases page and among your friends, and installs it before it opens; one that arrives while it runs waits for a restart. It takes only versions signed with the holypanda.dev release key and checks every byte. Your profile, friends, groups and chats stay as they are.
Early days
This is a pre-release: things will go wrong now and then. Settings → Report a problem shows you the whole report before you send it.
05 / Privacy
What's said around the fire stays there.
Messages, calls and files go from device to device. There is nobody in the middle to collect them, and nothing to sign up for.
Full privacy details- No account. No sign-in, no phone number and no e-mail address.
- No telemetry. No analytics and no crash reporting. A problem report is something you read first and send yourself.
- Chats that don't linger. Room chats are gone when the last person leaves the room. Direct chats stay on the two devices, encrypted on disk.
- Honest about the rest. Lookups in the public IPFS hash table see this device's network addresses, as any peer you connect to does. To look for updates, Fogata checks its releases on GitHub, which sees your address and that you run Fogata.
- Not audited yet. Fogata has not been reviewed by an outside security auditor. Don't rely on it for anything that would put you in danger.
06 / Open source
Built in the open, by design.
Fogata is free software under the GNU Affero General Public License v3.0. Read the code, build it from source, or help translate it into your language.