Dark.z3r0

Tor-only chat. No vendor relay.

A small Windows package. Put it on a USB, boot a machine you control, open a Tor-only channel with a peer who is online. Free. No accounts. Built by S3CT0R Z3R0.

Carry it

Dark.z3r0 is a folder you keep, not a cloud account. Verify the zip once, keep the signed files, and run from wherever you can start a Windows session you trust.

  1. Save the package

    Download the signed Windows zip. Keep the zip, SHA256SUMS, and .asc together so you can re-check later.

  2. Carry the channel

    Copy the folder to a USB or encrypted drive. No phone number, no email, no vendor login.

  3. Connect when both are ready

    Exchange contact cards out of band, unlock, wait for onion live, then chat peer to peer over Tor. If either side is offline, messages do not queue.

Same package on a travel laptop or a spare machine — identity lives in the vault on that device, not on our servers. No vendor servers sit in the message path.

In the product

Windows client. Quiet chrome. Seal always visible. Illustrative UI — not a live vault.

Lock
Contacts
Chat

Download

Windows first. Android when that line ships. Packages are free — no licence key, no in-app checkout.

Verify

Before you run a binary, check the hash and the PGP signature against the published sz-01 key. Fingerprints must match what you see on Contact and PGP.

Signing key · sz-01
1CF9 C4D4 013B A15D 7765 640C 61CB 4BD7 D6B3 341E
  1. Import /keys/sz-01.asc and confirm the fingerprint above.
  2. Download the zip, SHA256SUMS, and *.asc from the same release folder.
  3. Check the signature: gpg --verify SHA256SUMS.asc SHA256SUMS
  4. Check the hash (PowerShell): Get-FileHash .\Dark.z3r0-windows-x64.zip -Algorithm SHA256 — match the line in SHA256SUMS.

Honest limits

  • Your local network can see that Tor is in use. The app seal blocks clearnet from Dark.z3r0 itself; it does not hide Tor from the ISP or Wi‑Fi operator.
  • Both peers must be online. There is no store-and-forward server — a closed or killed app is unreachable.
  • A wiped or lost identity cannot be recovered. Duress PIN destroys the vault on purpose.
  • Not a wholesale Signal replacement for ambient chat. Prefer it for scheduled, high-sensitivity sessions when both sides can stay reachable.

Built by S3CT0R Z3R0 · s3ct0rz3r0.io