Bitchat App Controversy

Why Did the Indian Government Order the Removal of Bitchat?

The Indian Cybercrime Coordination Centre (I4C), functioning under the Ministry of Home Affairs (MHA), directed GitHub to disable access to repositories hosting Bitchat, an offline Bluetooth-based messaging application developed by former Twitter CEO Jack Dorsey. The order, issued on 23 July 2026 and made public on 24 July, cited national security concerns and the app’s potential misuse by anti-national elements, terrorist organisations, organised crime networks, and cybercriminals.

What is Bitchat and How Does It Work?

Bitchat is an open-source, peer-to-peer messaging application that operates through Bluetooth Low Energy (BLE) mesh networking. Unlike conventional messaging apps, it does not require:

• Internet connectivity
• Mobile networks
• Phone numbers
• User registration
• Central servers

Instead, encrypted messages travel between nearby devices over a range of approximately 30–100 metres, with intermediate devices relaying messages to extend communication across the mesh network. This decentralised architecture enhances privacy and enables communication even during internet shutdowns.

Legal Provisions Invoked by the Government

The takedown notice relied on:

• Section 79(3)(b) of the Information Technology Act, 2000, which removes intermediary protection if lawful government directions are ignored.
• Rule 3(1)(d) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, which mandates due diligence and compliance by intermediaries.

Accordingly, GitHub was instructed to disable three Bitchat repositories, including the Android version.

Security Concerns and UPSC Relevance

Authorities argued that Bitchat’s anonymous, decentralised design makes lawful interception, attribution, and criminal investigation difficult. Since the application functions without telecom infrastructure, it could facilitate covert communication, misinformation, and coordination during internet restrictions. A 2025 security assessment had also identified a man-in-the-middle vulnerability, prompting the developer to caution users against relying on the app’s security without further review.

Important Facts for Exams

• I4C functions under the Ministry of Home Affairs.
• GitHub is a Microsoft-owned platform for hosting open-source software.
• Bluetooth Low Energy (BLE) enables low-power, short-range wireless communication.
• Section 79 of the IT Act, 2000 deals with intermediary liability and safe harbour provisions.
• Rule 3 of the IT Rules, 2021 prescribes due diligence obligations for digital intermediaries.
• The issue highlights the growing policy debate between privacy, encryption, national security, and digital governance in India.