Verdict: BitChat is an open-source, decentralized Bluetooth mesh messaging app that works entirely without internet, SIM cards, phone numbers, or central servers. When India shut down mobile internet around the NEET exam-leak protests at Delhi's Jantar Mantar in July 2026, demonstrators used BitChat to keep communicating — prompting India's cybercrime agency to order GitHub to remove the app's source code within three hours. The order is legally novel: it targets an open-source tool's architecture, not illegal content, and digital-rights groups call it unconstitutional. Understanding how Bluetooth mesh networking works is now essential for anyone building privacy-first or protest-resilient technology.
Last verified: July 30, 2026
- BitChat uses Bluetooth Low Energy (BLE) mesh networking — messages hop phone-to-phone with no internet.
- India's I4C ordered GitHub to remove 3 BitChat repositories within 3 hours on July 23, 2026.
- The order invokes Section 79(3)(b) of the IT Act, 2000 + Rule 3(1)(d) of the IT Rules, 2021.
- The Internet Freedom Foundation called the order "unconstitutional and authoritarian."
- Education Minister Dharmendra Pradhan resigned on July 25, 2026, over the NEET paper leak that sparked the protests.
Volatile facts: legal status of BitChat in India and GitHub compliance may change. Last checked July 30, 2026.
What Is BitChat and How Does It Work Without Internet?
BitChat is a decentralized, peer-to-peer messaging application that operates over Bluetooth Low Energy (BLE) mesh networks. Built by Twitter co-founder Jack Dorsey's team at Block (the company formerly known as Square) under the "permissionlesstech" initiative, it was released as open-source software in July 2025. The app uses Bluetooth — the same low-power wireless technology in your smartwatch or wireless earbuds — to create a self-organizing network of nearby phones that relay encrypted messages to one another, with zero dependency on cellular towers, Wi-Fi routers, internet service providers, or centralized servers.
According to the BitChat protocol whitepaper (Version 2.0, dated July 6, 2026, hosted on GitHub), the app's design goals are confidentiality (end-to-end encryption), authentication (peers identified by cryptographic keys), resilience (functioning in low-bandwidth, partitioned environments), and eventual delivery (messages to out-of-range peers arrive via relays, couriers, or Nostr relay mailboxes when an internet connection exists). The app has no accounts, no phone numbers, no email addresses, and no registration of any kind. Messages live in device memory by default and are never written to disk in plaintext — a "panic wipe" feature clears all identity keys, favorites, and carried mail instantly.
Dorsey described the app as having "IRC vibes" — evoking the minimalist, user-controlled chat systems from the early days of the internet. For group chats, users create rooms using hashtags with optional password protection. Large messages are automatically fragmented into 500-byte segments. A store-and-forward system caches messages for offline peers, so if someone is out of range when you send a message, a moving person (a "courier") can carry it in encrypted form and deliver it when they come within range of the recipient.
How Does Bluetooth Mesh Networking Route Messages Without Servers?
Bluetooth mesh networking works by turning every phone running the app into both a sender and a relay node. When you send a message, your phone transmits it over BLE to nearby phones within Bluetooth range. Each of those phones then forwards it to other nearby phones, and so on, until the message reaches its intended recipient or a relay node holding it in store-and-forward cache for later delivery. The more phones running the app in a given area, the denser the mesh and the farther messages can travel.
The technical specifications, per the whitepaper and Dorsey's own description:
- Communication range: Messages pass between devices over a maximum range of roughly 30 meters (about 100 feet) per hop, with bridge devices connecting isolated clusters.
- Beyond 300 meters: According to Dorsey's claims and reporting, BitChat's mesh can extend well beyond 300 meters where enough devices form a dense relay chain.
- BLE mesh: Each device acts as both a "peripheral" (advertising its presence) and a "central" (scanning and connecting), creating a self-organizing peer-to-peer network.
- Two transports: BitChat coordinates a BLE mesh transport and a Nostr protocol transport (used when internet access exists) via a shared
MessageRouterinterface. Distant peers are reached over Nostr relays when a connection is available. - Store-and-forward layers: A persistent sender outbox, opportunistic couriers with a "spray-and-wait" copy budget, gossip-synced public history, and Nostr relay mailboxes deliver messages to peers who are out of range at send time.
This is the key technical distinction from apps like WhatsApp or Signal: those apps route messages through centralized servers operated by a company. BitChat routes messages directly between devices over radio waves. There is no company in the middle, no server to compel with a takedown order, no subscriber database to subpoena.
| Feature | BitChat (BLE Mesh) | WhatsApp / Signal (Server-Based) |
|---|---|---|
| Internet required | No | Yes |
| Central server | None | Yes (WhatsApp: Meta servers; Signal: Signal servers) |
| Phone number required | No | Yes (both) |
| Works during shutdown | Yes | No |
| Government can block at server | No (no server) | Yes (block service or compel provider) |
| End-to-end encrypted | Yes | Yes |
| Range per hop | ~30 meters (BLE) | Global (via internet) |
| Source | Open-source (GitHub) | Closed-source (WhatsApp); open-source (Signal) |
What Triggered India's BitChat GitHub Takedown Order?
The immediate trigger was the Cockroach Janta Party (CJP) protests at Delhi's Jantar Mantar. The CJP began as a satirical social media page started by digital strategist Abhijeet Dipke in May 2026, in response to the NEET-UG 2026 exam paper leak. By June, it had become a real protest camp — the largest youth mobilization Delhi had seen in years. The NEET-UG 2026 exam, held on May 3, 2026, was cancelled on May 12 after investigations confirmed the question papers had been leaked. At least eleven students reportedly died by suicide following the cancellation, according to media reporting.
Activist and educator Sonam Wangchuk went on an indefinite hunger strike at Jantar Mantar, lasting 26 days before ending it on July 23, 2026, after what he described as "long negotiations" with officials. His fast drew national and international attention, with solidarity protests held in New York, London, and Dublin.
When authorities suspended mobile internet services around the protest site, demonstrators turned to Bluetooth mesh messaging apps — BitChat, Bridgefy, and Briar — to stay connected without any network dependency at all. This workaround did not sit well with the government.
On July 23, 2026, at 11:16 pm, India's Indian Cyber Crime Coordination Centre (I4C) — the cybercrime arm of the Ministry of Home Affairs — issued a notice directing GitHub to remove or disable access to three BitChat repositories within three hours. Dorsey published screenshots of the notice on X, writing: "The government of India does not like technologies like bitchat and wants it taken down."
The notice named three repositories under the "permissionlesstech" GitHub account: the main BitChat project, its Android build, and the Android releases page. It described BitChat as "a communication platform capable of establishing decentralised peer-to-peer messaging over Bluetooth mesh networks without relying on mobile networks, internet connectivity, or centralized servers," arguing the architecture "significantly impedes lawful interception, attribution, and investigation by law enforcement agencies."
What Law Did India Use to Order the BitChat Takedown?
India's order invokes Section 79(3)(b) of the Information Technology Act, 2000, read with Rule 3(1)(d) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Section 79(3)(b) removes an intermediary's legal safe harbor — its protection from liability for user content — if it fails to remove unlawful material after receiving a government order or actual knowledge of its illegality. Rule 3(1)(d) obliges intermediaries to remove access to content within 36 hours (or within the time specified by a competent authority) upon receiving such an order.
The I4C notice gave GitHub a three-hour compliance deadline. The order cited risks of misuse for "coordinating violent protests, spreading misinformation, radicalization, and criminal conspiracies," and for evading surveillance and lawful interception during "public disorder, riots, terrorism," or internet shutdowns.
What makes this order legally novel is that it targets source code — the tool itself — rather than any specific illegal content posted using the tool. The BitChat repositories contain the app's implementation. There are no messages, no user data, and no content in a code repository. The government's argument is that the app's decentralized architecture is itself the problem: because there is no central server and no subscriber database, law enforcement cannot lawfully intercept communications or obtain subscriber records even with a warrant.
This is a categorically different legal action from previous takedowns. Section 79 was designed for intermediary content moderation — removing a defamatory post, a copyright-violating video, or illegal content hosted on a platform. Applying it to an open-source software project's architecture, rather than to content transmitted through it, extends the framework to banning a tool's design.
Is the BitChat Takedown Order Constitutional?
The Internet Freedom Foundation (IFF), a New Delhi-based digital rights organization, condemned the order as "unconstitutional and authoritarian" in a statement dated July 24, 2026. IFF's core arguments:
Wrong legal mechanism: The order used Section 79(3)(b) — which governs intermediary liability for content — instead of India's formal website-blocking process under Section 69A of the IT Act, which includes procedural safeguards, review committees, and a requirement to publish orders. IFF called this an end-run around due process.
No unlawful content identified: The order did not identify any unlawful content in the repositories. Instead, it argued the app's decentralized design was itself grounds for removal. IFF noted this targets an entire software architecture rather than specific misuse.
Prior restraint on code: Deleting a repository does not delete the app from any phone that already carries it, and the mesh keeps functioning without servers. The practical effect is not elimination but friction — making it harder for new users to discover and download the app from a trusted source.
Censorship by disclosure: No copy of the order was published by the Government of India. The public learned of it only because Dorsey posted screenshots. IFF stated: "Censorship in India now comes to light through disclosure by the censored."
IFF called on the government to withdraw the notice and publish all takedown orders issued under the provision. As of July 30, 2026, the constitutional validity of the order has not been adjudicated by any court.
How Are AI Surveillance Tools Being Used Against the Protesters?
Beyond the BitChat takedown, the protests revealed a deeper layer of state surveillance technology. Delhi Police deployed two specialized surveillance vehicles near the Jantar Mantar protest site:
- Mobile Command and Control Vehicle: A larger van that streams live CCTV feeds from cameras installed around the protest area.
- Ikshana vehicle: A smaller van equipped with 360-degree cameras, AI-powered facial recognition software, and automatic number plate recognition (ANPR) technology. Officers inside the van run footage through AI that shows green boxes around each face as it tries to match against a police database. The screen reportedly displays photographs, names, and other details of individuals whose faces are captured.
The Ikshana surveillance vehicle was first introduced ahead of the 2023 G20 Summit in New Delhi as part of Delhi Police's enhanced security infrastructure. Police officials maintained the system is designed to identify individuals with criminal records rather than monitor all protesters, stating: "We have a large database of criminals, with their pictures. So, we run facial recognition on the footage... to see if it flags any face the software matches with someone on our criminal database."
However, viral videos of the vans on social media prompted speculation that the system may be linked to the Aadhaar biometric database. Delhi Police has not confirmed any Aadhaar connection, and there is no official evidence suggesting Aadhaar records are being accessed. The lack of transparency about which database is being used — and the absence of a fixed timeline for deleting recorded footage — raised concerns among civil rights groups and privacy advocates.
A petition before the Delhi High Court argues that continuous monitoring of protesters violates their rights to privacy and peaceful assembly. The government's solicitor general, Tushar Mehta, told the court the surveillance was "routine policing" and dismissed the petition as "luxury litigation." Delhi Police maintained videography is conducted solely to maintain law and order and ensure public safety.
What Does India's Internet Shutdown Pattern Tell Us?
The BitChat takedown did not happen in isolation. India has been one of the world's leading countries for internet shutdowns for several consecutive years, according to data tracked by the Software Freedom Law Centre (SFLC.in) and Access Now.
- 926 total shutdowns documented by SFLC.in since tracking began in 2012.
- 84 shutdowns in 2024 alone — India ranked second globally behind Myanmar (85) in 2024, per Access Now's "#KeepItOn" coalition report, after being the top country for several prior years.
- 54 countries experienced at least 296 internet shutdowns in 2024 collectively — a 35% increase over the previous record set in 2022.
- Protests triggered 74 shutdowns globally in 2024; exams triggered 16.
The SFLC.in Internet Shutdown Tracker records a shutdown on July 20, 2026, "in response to the CJP's Chalo Sansad march from Jantar Mantar to Parliament." The logic of shutdowns is to cut communication, disrupt coordination, and limit information flow. The logic of the BitChat ban is the next step in that sequence: when people find tools that work around shutdowns, the state bans those tools too.
The progression is worth naming explicitly:
- Shut down the internet around a protest site.
- When protesters use Bluetooth mesh apps to keep communicating without internet, order the apps' source code removed from code-hosting platforms.
- Deploy AI facial recognition vans to identify and catalog protesters from camera footage.
What Does This Mean for You?
Whether you are a developer, a founder, or someone who relies on digital communication, the BitChat India ban has practical implications:
For developers: Hosting open-source code on GitHub now carries a potential legal risk under Indian law if that code enables decentralized, surveillance-resistant communication. Consider multi-platform mirroring, decentralized hosting options, and the legal implications of your tool's architecture under the IT Act and IT Rules 2021. The order does not mean you should stop building — but build with awareness of the legal environment. If you are building for the Indian market, our guide on governance technology choices walks through the trade-offs.
For users: If you already have BitChat installed, it continues to work — the Bluetooth mesh does not depend on GitHub or any central server. The takedown affects new downloads, not existing installations. Exercise extreme caution with unofficial APK downloads from unknown sources, as the removal of the canonical repository creates opportunities for malicious modified versions. Verify checksums and signatures before installing anything from an unofficial mirror.
For founders and small businesses in India: This is part of a broader pattern of digital risk. The same month, a major data breach exposed Aadhaar and loan files on the dark web. If your business operates in India's digital economy, understanding the intersection of internet shutdowns, surveillance, and intermediary liability is now part of operational risk management.
The Bigger Picture: Why Decentralized Tech Now Matters
The BitChat story is a case study in a global shift. When a government's response to student protesters is bigger than its response to the exam leak that started it — facial recognition vans, a code takedown order, and quiet words to university deans — the technology layer of civic space becomes the frontline. Decentralized, serverless, encryption-first tools are no longer a niche for crypto enthusiasts. They are the infrastructure of the right to assemble, to speak, and to be heard — especially when the conventional network goes dark.
The irony of the BitChat ban is that it validates the design. The government banned the tool precisely because it cannot be controlled through central infrastructure. The ban proves the architecture works as intended. For anyone building the next generation of communication tools, the lesson is clear: the battle over digital rights is no longer just about what platforms host — it is about what architectures are allowed to exist.
FAQ
Q: Is BitChat banned in India?
A: As of July 30, 2026, India ordered GitHub to remove three BitChat repositories (the main project, the Android build, and the Android releases page) within three hours. The app itself is not criminalized — using it is not a specific criminal offense, and existing installations continue to work because the Bluetooth mesh operates device-to-device without any server. The order targets the primary distribution channel, not the installed base.
Q: How does BitChat work without internet?
A: BitChat uses Bluetooth Low Energy (BLE) to create a mesh network of nearby phones. Each phone running the app acts as both a sender and a relay node, passing encrypted messages to other nearby phones. Messages hop from device to device until they reach the intended recipient, with a maximum range of roughly 30 meters per hop and extended range when enough phones form a dense relay chain.
Q: What law did India use to take down BitChat?
A: The Indian Cyber Crime Coordination Centre (I4C) invoked Section 79(3)(b) of the Information Technology Act, 2000, read with Rule 3(1)(d) of the IT Rules, 2021. Section 79(3)(b) removes an intermediary's safe harbor if it fails to remove unlawful content after a government order. The Internet Freedom Foundation argued this is the wrong legal mechanism — the order targets an app's architecture, not content — and should have used Section 69A, which includes procedural safeguards.
Q: Can the government ban other apps like Signal or Telegram this way?
A: Not directly. The order specifically targets BitChat repositories. However, the legal mechanism — using Section 79 and the IT Rules to order a platform to remove an app's code — could theoretically be applied to any tool the government deems a threat to public order. The constitutional validity of this approach has not been tested in court.
Q: Who is Jack Dorsey and what is his role in BitChat?
A: Jack Dorsey is the co-founder and former CEO of Twitter (now X) and the founder of Block (formerly Square). BitChat was developed by his team under the "permissionlesstech" initiative and released as open-source software in July 2025. Dorsey advocates for decentralized, censorship-resistant communication tools. When the I4C notice was issued, Dorsey published screenshots on X, stating: "The government of India does not like technologies like bitchat and wants it taken down." Our prior coverage of Dorsey's free AI agent workspace Buzz by Block covers his broader product philosophy.
Q: What were the NEET protests about?
A: The NEET-UG 2026 exam (India's medical college entrance test) was held on May 3, 2026, and cancelled on May 12 after investigations confirmed the question papers had been leaked. This was a repeat of a similar scandal in 2024. Students protested demanding accountability and the resignation of Union Education Minister Dharmendra Pradhan, who resigned on July 25, 2026. The protests grew into the Cockroach Janta Party movement. The broader reform agenda — including Nandan Nilekani's exam task force — is covered in our guide on India's exam reform challenge.
Q: Will the BitChat GitHub takedown stop protesters from communicating?
A: No. Deleting a repository does not remove the app from phones where it is already installed, and the Bluetooth mesh keeps functioning without any server. The practical effect is friction: new users cannot easily discover and download the app from a trusted source. Forks, mirrors, and direct APK sharing continue. The Internet Freedom Foundation noted that the order "does not identify any unlawful content in the repositories and instead argued the app's decentralized design was itself grounds for removal."
Discussion
0 comments