DecoyIM – Secure XMPP Chat Client

DecoyIM (a fork of CoyIM) is a secure, privacy-first XMPP chat client built in Go with a minimalist GTK UI. It defaults to strong, sane security settings—OTR encryption, Tor routing, and TLS validation—with no setup required.

We aim to make encrypted chat accessible and safe, even for high-risk users.

---

🚨 Security Warning

OTR3 code has been audited; the rest hasn't. Use with caution if you're a high-risk target.

All binary releases are compiled on Github servers, and not our machines. This ensure highest security in event developers are compromised

---

🧪 Quick Start

• 📦 Download latest release binaries or build from source.

First launch shows a setup wizard.

You can:

• Import Jabber/OTR accounts from other clients (like Pidgin via ~/.purple)
• Skip it and import later via Accounts → Import

---

⚙️ Building

Requires:

• Go ≥ 1.19
• GTK+ ≥ 3.12

Ubuntu

sudo apt-get install libgtk-3-dev ruby-full

MacOS

brew install gnome-icon-theme
brew install gtk+3 gtk-mac-integration

In order to build DecoyIM, you should check out the source code, and run:

make deps
make build

It might be possible to build DecoyIM using go get but we currently do not support this method.

NOTE: If esc isn't found after make deps, it's likely in $HOME/go/bin.
Run export PATH="$HOME/go/bin:$PATH" to fix it.

Contributing to DecoyIM

We have instructions here on how you can get started contributing to DecoyIM.

Reproducibility

DecoyIM supports reproducible builds for Linux on AMD64. See REPRODUCIBILITY for instructions on how to build and verify these builds.

License

The DecoyIM project and all source files licensed under the GPL version 3, unless otherwise noted.