vault / bitchat-android / v2.0.1

bitchat-android @ v2.0.1

integrity

size: 15.7 MiB
downloaded: 2026-08-12 02:49 UTC
last checked: 2026-08-31 02:50 UTC

source https://github.com/permissionlesstech/bitchat-android · available · github

release notes

Bitchat Android 2.0.1

Highlights

Bitchat for Wear OS: join the nearby mesh from your watch, use public chat and encrypted direct messages, browse People, manage favorites and verification, receive notifications, record voice notes, and receive images and files.
New chat styles: choose the classic Matrix layout or peer-colored message bubbles, including bubble-aware media, timestamps, and delivery indicators.
Live push-to-talk: stream voice in public channels and encrypted direct messages on Android and Wear OS, with improved recording feedback, waveforms, haptics, and slide-to-cancel controls.
Cashu support: recognize and preview Cashu eCash tokens, use /pay, and redeem with a compatible external wallet or web flow. Cashu tokens are bearer instruments; anyone who obtains a token may be able to redeem it.
Persistent private conversations: keep conversation history, unread state, aliases, favorites, and previews across restarts, with clearer controls for deleting conversations.
Offline geohash globe: explore geohash channels with a native animated 3D globe, country borders, cities, polar coverage, and adjustable render quality.
Language picker: change the app language from within Bitchat, with expanded translations.
Local-first APK sharing and updates: share an installed APK nearby and resume signature-verified update downloads with clearer progress and rate-limit handling.
Reliability and privacy: stronger queued-message delivery and ordering, Noise session recovery and identity binding, more reliable receipts and peer lifecycle handling, safer Wi-Fi Direct cleanup, bounded payload processing, quieter sensitive logging, and a more complete panic wipe of in-memory networking state.

First reproducible full-app release

This is Bitchat Android's first reproducible full-app release. The unsigned phone and Wear OS APKs and Android App Bundles were built twice in independent GitHub Actions jobs using the pinned container environment, and every canonical byte matched before the release artifacts were promoted for local signing.

The release includes the signed phone and Wear OS APKs, the signed Play upload bundles, BITCHAT_BUILDINFO.json, the attested BITCHAT_SHA256SUMS.unsigned manifest, and the final BITCHAT_SHA256SUMS. The canonical unsigned binaries are intentionally not attached; their exact hashes are committed by the attested unsigned manifest and they can be rebuilt from the signed source tag. The signed APK and AAB payloads were checked against those canonical unsigned builds before publication.

To rebuild and verify everything from source (requires Git, GitHub CLI, Docker with Linux/amd64 support, and 16 GiB of memory recommended for Docker):

git clone https://github.com/permissionlesstech/bitchat-android.git
cd bitchat-android
git checkout v2.0.1
gh release download v2.0.1 --pattern 'BITCHAT_BUILDINFO.json' --pattern 'BITCHAT_SHA256SUMS*' --dir .reproducible-build/release-metadata-v2.0.1
gh attestation verify .reproducible-build/release-metadata-v2.0.1/BITCHAT_BUILDINFO.json --repo permissionlesstech/bitchat-android
gh attestation verify .reproducible-build/release-metadata-v2.0.1/BITCHAT_SHA256SUMS.unsigned --repo permissionlesstech/bitchat-android
tools/reproducible-builds/build-in-container.sh .reproducible-build/verify-v2.0.1
cmp .reproducible-build/verify-v2.0.1/SHA256SUMS.unsigned .reproducible-build/release-metadata-v2.0.1/BITCHAT_SHA256SUMS.unsigned

To verify the checksums of the published signed files without rebuilding:

gh release download v2.0.1 --dir .reproducible-build/download-v2.0.1
(cd .reproducible-build/download-v2.0.1 && shasum -a 256 -c BITCHAT_SHA256SUMS)

Most phones should use bitchat-android-universal.apk; bitchat-android-arm64.apk is a smaller download for modern ARM64 phones. Install bitchat-android-wear.apk directly on a Wear OS device. The Play upload bundles are signed separately for Google Play and are not intended for direct installation.

Full changelog: https://github.com/permissionlesstech/bitchat-android/compare/1.7.4...v2.0.1

download

unix · zip

curl -fL -o v2.0.1.zip https://ratatoskr.space/pkg/bitchat-android/v2.0.1.zip
                    printf '%s  %s\n' 'a909c85141b41e603b822ae8e351878b9a2b9de7c4d2b7a8829e20d2ae243c30' 'v2.0.1.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/bitchat-android/v2.0.1.zip"
$out = "v2.0.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a909c85141b41e603b822ae8e351878b9a2b9de7c4d2b7a8829e20d2ae243c30") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v2.0.1.tar.gz https://ratatoskr.space/pkg/bitchat-android/v2.0.1.tar.gz
                    printf '%s  %s\n' 'e3256390fc36d7d447938d8278d292fcada5c1393cbd13114dad02d8dd1891c7' 'v2.0.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/bitchat-android/v2.0.1.tar.gz"
$out = "v2.0.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "e3256390fc36d7d447938d8278d292fcada5c1393cbd13114dad02d8dd1891c7") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v2.0.1.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat-android/v2.0.1.zip
                    printf '%s  %s\n' 'a909c85141b41e603b822ae8e351878b9a2b9de7c4d2b7a8829e20d2ae243c30' 'v2.0.1.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat-android/v2.0.1.zip"
$out = "v2.0.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a909c85141b41e603b822ae8e351878b9a2b9de7c4d2b7a8829e20d2ae243c30") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v2.0.1.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat-android/v2.0.1.tar.gz
                    printf '%s  %s\n' 'e3256390fc36d7d447938d8278d292fcada5c1393cbd13114dad02d8dd1891c7' 'v2.0.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat-android/v2.0.1.tar.gz"
$out = "v2.0.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "e3256390fc36d7d447938d8278d292fcada5c1393cbd13114dad02d8dd1891c7") { throw "sha256 mismatch" }

artifact	format	size	hashes
v2.0.1.zip	zip	16.2 MiB	blake3-24 b01337927dc2af6fc5cd5b8342f938cb563ae787e2b5857b sha256 a909c85141b41e603b822ae8e351878b9a2b9de7c4d2b7a8829e20d2ae243c30 sha1 5c39db271630b33197b449dcadb2410cb864ae71
v2.0.1.tar.gz	tar.gz	15.8 MiB	blake3-24 8f283085ce1ecf80bbca87ca8a136267ba83eedd577c516f sha256 e3256390fc36d7d447938d8278d292fcada5c1393cbd13114dad02d8dd1891c7 sha1 f0af1c99886a0e979c34ac6147faee389443ecc4

install

bazel

http_archive(
    name = "bitchat-android",
    urls = ["https://ratatoskr.space/pkg/bitchat-android/v2.0.1.tar.gz"],
    integrity = "sha256-4yVjkPw219RHk42CeNKS/K2lwTk8vRMRTa0C2N0Ykcc=",
    strip_prefix = "bitchat-android-v2.0.1",
)

zig

.url = "https://ratatoskr.space/pkg/bitchat-android/v2.0.1.tar.gz",

install via yggdrasil mesh

bazel

http_archive(
    name = "bitchat-android",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat-android/v2.0.1.tar.gz"],
    integrity = "sha256-4yVjkPw219RHk42CeNKS/K2lwTk8vRMRTa0C2N0Ykcc=",
    strip_prefix = "bitchat-android-v2.0.1",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat-android/v2.0.1.tar.gz",

1.7.4 →