Fogata

Pre-release 0.1.0-beta.4

Your friends.
Nobody in between.

Text, voice and video for small groups of friends, peer to peer. No accounts. No servers. Just your friends.

The friends list in Fogata
A direct chat in Fogata
A voice room of five friends watching a shared screen, with the room's chat on the right

01 / Features

What's inside

A campfire for your people.

Chat, hang out in voice rooms, share a screen or call one friend. Everything travels from device to device, and nobody else keeps a copy.

Peer to peer01

Every device talks straight to the others

No accounts, no Fogata servers and no relays run by anyone else. When two friends can't reach each other, another member of the group may carry their traffic, still encrypted end to end.

Encrypted02

Signed, sealed, compared

Everything a device says is signed by it and encrypted between devices. Friends compare a short code once, so each device knows the other's key.

Voice rooms03

Rooms that light up

Groups of up to 20 friends, with voice rooms for up to 8 that light up when someone comes in. Cameras, and screens shared with their sound.

Direct chats & calls04
A direct chat between Foga and Emma

One to one, on two devices only

Message and call a friend, with pictures, voice messages and messages that disappear on a timer. Direct chats live only on the two devices, encrypted on disk.

Files05

Files, device to device

Share files in a room or a chat, sent straight from one device to the other and checked on arrival.

Fits your desktop06

At home on every desktop

Linux, macOS and Windows, a tray icon, light and dark looks, and nine languages.

02 / How it works

No servers, start to finish

From a link to a call, direct.

There is no Fogata server to sign up to, to hold your contacts or to carry your calls. Your devices do all of it themselves.

  1. 01

    Add a friend

    Share a one-time link, code or QR code, then compare a short fingerprint. Now each device knows the other's key.

  2. 02

    Start a group

    A group is a signed list of its members that every member keeps. Nobody else holds it.

  3. 03

    Find each other

    Devices look each other up in the public IPFS distributed hash table, used only as a phone book.

  4. 04

    Connect directly

    Then they connect straight to each other, also through home routers. If two can't, another member of the group may carry their traffic, encrypted end to end.

Read the architecture and threat model

03 / Screens

Dark look · Linux

Home with a live group: who is in which voice room
01Home
The friends list, and adding a friend with a QR code
02Friends
Marcus is calling: decline or accept
03Incoming call
A direct call with Marcus, with its chat on the right
04Direct call
Calling Jake: it rings on their computer for up to 30 seconds
05Calling
A direct chat with Emma, with her profile card
06Direct chat

04 / Install

Pre-release 0.1.0-beta.4 · GitHub Releases

Pull up a seat.

Each release on GitHub has the files for every system. Nothing is signed with a paid certificate, so check your download first and your system asks you to confirm the first start once.

Linux

Flatpak
  1. Download Fogata-0.1.0-beta.4-linux.flatpak and, in a terminal in its folder, run:
flatpak install --user Fogata-0.1.0-beta.4-linux.flatpak
  1. It needs the Freedesktop 26.08 runtime from Flathub, which Flatpak offers to install.
  2. Open Fogata from your applications menu.

Windows

10 · 11 · x64
  1. Unzip Fogata-0.1.0-beta.4-windows-x64.zip (right click, Extract All), open the folder and double-click Install Fogata.
  2. If SmartScreen says "Windows protected your PC", and only if the checksum matched, click More info, then Run anyway.
  3. The installer shows the zip's checksum again and asks you to type yes to confirm you checked it yourself. Then it checks every file, installs Fogata for you only, without an administrator password, and opens it. It is in the Start menu.

macOS

12+ · Apple silicon
  1. Open Fogata-0.1.0-beta.4-macos-arm64.zip and drag Fogata to Applications.
  2. Fogata is signed but not notarized, so macOS can't check it the first time. Only if the checksum matched, click Done, then open System Settings → Privacy & Security, click Open Anyway next to Fogata and confirm.
  3. This is needed only once.

Before you open it

Check that it's the real Fogata

Without a paid certificate, the checksum is what shows a file is the one holypanda.dev made. The list of checksums, SHA256SUMS, is signed with Fogata's pre-release key. Save tools/allowed_signers from the source code next to it, not from where you downloaded the files, and check the list:

ssh-keygen -Y verify -f allowed_signers -I fogata-prerelease -n file -s SHA256SUMS.sig < SHA256SUMS

It must say Good "file" signature for fogata-prerelease. Then work out your file's checksum yourself and compare it with its line in SHA256SUMS:

Windows
Get-FileHash .\Fogata-0.1.0-beta.4-windows-x64.zip
macOS
shasum -a 256 Fogata-0.1.0-beta.4-macos-arm64.zip
Linux
sha256sum Fogata-0.1.0-beta.4-linux.flatpak

If the signature isn't good or the checksum differs, don't open the file and write to [email protected].

Updates

Fogata keeps itself up to date. At every start it looks for a new version on its releases page and among your friends, and installs it before it opens; one that arrives while it runs waits for a restart. It takes only versions signed with the holypanda.dev release key and checks every byte. Your profile, friends, groups and chats stay as they are.

Early days

This is a pre-release: things will go wrong now and then. Settings → Report a problem shows you the whole report before you send it.

05 / Privacy

No account · No telemetry

What's said around the fire stays there.

Messages, calls and files go from device to device. There is nobody in the middle to collect them, and nothing to sign up for.

Full privacy details
  • No account. No sign-in, no phone number and no e-mail address.
  • No telemetry. No analytics and no crash reporting. A problem report is something you read first and send yourself.
  • Chats that don't linger. Room chats are gone when the last person leaves the room. Direct chats stay on the two devices, encrypted on disk.
  • Honest about the rest. Lookups in the public IPFS hash table see this device's network addresses, as any peer you connect to does. To look for updates, Fogata checks its releases on GitHub, which sees your address and that you run Fogata.
  • Not audited yet. Fogata has not been reviewed by an outside security auditor. Don't rely on it for anything that would put you in danger.

06 / Open source

AGPL-3.0

Built in the open, by design.

Fogata is free software under the GNU Affero General Public License v3.0. Read the code, build it from source, or help translate it into your language.