CallChat help center
Chat first. Protection runs automatically.
Use this guide when you are new, moving to another device, checking Shield, recovering older content, or fixing a call. Most people never need to enter a key or open Advanced options.
First 3 minutes
Start without touching Advanced options
The everyday path is intentionally short.
- 1Create or sign in
Use the CallChat account page. Usernames are lowercase and passwords must be 12 to 128 characters.
- 2Verify if asked
Approve only devices you recognize. Store the Matrix recovery key privately.
- 3Open a conversation
CallChat prepares or synchronizes protected chat inside the encrypted room.
- 4Use it normally
When the badge says Protected, send messages, attach files, or start a call.
Shield panel
What the status means
Ready means continue chatting. The references and recovery tools are there for support and exceptional cases.
No manual action is required for this conversation.
- Matrix room
- Room transport encryption
- Matrix identity
- Verify devices in Account
- Local vault
- Trusted-browser recovery is ready
- Protected chat
- The room profile matches this device
Protected status, messages, attachments, voice, video, and screen sharing.
Legacy passphrase and pattern, IonQ factor, Matrix-only mode, reset, self-test, and technical identifiers.
New phone or browser
Let the devices meet briefly
- 1Sign in and verify Matrix
Use the same account and approve the new device from one you trust.
- 2Open the same conversation
Keep the old and new devices online for the first protected exchange.
- 3Wait for Protected
CallChat requests the matching room profile automatically inside Matrix E2EE.
If no active device still has an older profile, new traffic can continue safely, but older protected content still needs its exact original recovery material.
Fix a problem
Choose what you can see
A new message says it is still preparing
Keep the conversation open briefly and keep a trusted room device online. Confirm both devices are signed into the intended account. CallChat retries synchronization automatically.
An older message will not open
Do not reset a device that can still read it. Bring that device online first. If the original profile is no longer available, use the exact legacy passphrase and exact original pattern image under Advanced options.
The call connects but there is no sound
Unmute the site and call, select the correct speaker and microphone, raise device volume, and press Enable sound if it appears. On mobile, check that the browser has microphone permission. Camera permission is separate and is requested only after you press Start video.
I am moving to another phone
Keep the old phone signed in until the new phone is verified and shows Protected in the conversations you need. Do not delete the old browser profile first.
I need to send or recover a protected file
Send new files through the attachment button. For an older ZME1 container, use compatible CallChat tooling and the exact matching recovery material. Matrix recovery alone does not replace the ZME1 factor.
I want to reset Shield
Reset removes local ZMath setup from this browser, not the Matrix account. Export or confirm any required recovery material first because older protected content may become unavailable on this device.
Search the help center
Questions and answers
Search by the words you see on screen or choose a topic.
Do I need to configure Shield before I chat?
No. Sign in, open a conversation, and use CallChat normally. The hosted client creates or synchronizes the protected-chat profile when it is needed. Recovery and diagnostic controls stay under Advanced options.
What should I do when the badge says Protected?
Nothing extra. Send a message, attach a file, or start a call normally. Protected means the current browser has the room profile it needs.
How do I create an account?
Open Web Chat, choose Sign up, use a lowercase username, enter a password between 12 and 128 characters, and answer the local arithmetic question.
Which homeserver should I use?
Use callchat.org. The hosted CallChat client is already configured for it. In another Matrix client, choose a custom homeserver and enter callchat.org.
Can I use Element?
Yes for normal Matrix rooms, identity verification, recovery, and compatible calls. Use the hosted CallChat client when you need the additional Shield/ZMath message, file, recovery, or call-policy layer.
Why does CallChat show Matrix and ZMath?
They do different jobs. Matrix end-to-end encryption protects room transport and device identity. ZMath adds a room-scoped application layer for protected content and the CallChat call-policy path. CallChat coordinates both automatically.
What do Local vault and Protected chat mean?
Local vault means this browser can restore its trusted protection data. Protected chat means this conversation has a matching room profile on this device. Ready is the only status most people need.
What are the long profile references?
They are diagnostic references used to distinguish profiles. They are not passwords and do not need to be memorized or shared. They now appear only under Technical identifiers.
What does Review in Account mean?
Matrix device verification and encrypted-history recovery are managed in Account. Verify devices you recognize and keep the Matrix recovery key somewhere safe. Never send it to support.
How are protected files sent?
A selected file can be wrapped locally as an authenticated ZME1 container before the Matrix client uploads it. Matrix then applies its encrypted attachment transport. A compatible CallChat tool and the matching recovery material are required to open the ZME1 layer.
Why can an earlier protected message be unavailable?
That device may not have the exact authenticated profile that created the older event. CallChat does not guess or bypass the integrity check. New messages can continue with current protection while the older item waits for its original profile or exact legacy recovery pair.
What happens on a new phone or browser?
Sign in, complete Matrix verification if prompted, and open the conversation. If an active verified room device holds the profile, CallChat requests and installs it inside the Matrix-encrypted room automatically. Keep both devices online briefly during the first exchange.
When do I use the shared passphrase and pattern image?
Only for legacy recovery or an approved manual profile transfer. Use the exact original passphrase and exact original image. Normal conversations do not require these fields.
What does Auto-unlock on this trusted device do?
It stores an encrypted trusted-browser copy protected by a non-exportable device key. Use it only on a device and browser profile you control.
What is Matrix-only sending?
It pauses the additional ZMath sending layer while Matrix end-to-end encryption continues. Turn it off before using a protected Q Call or sending content that must use the room profile.
What do Pause this session and Reset this device do?
Pause clears active ZMath material from memory until it is restored. Reset removes the local trusted ZMath setup from this browser. Reset does not delete the Matrix account, rooms, or server history, but older protected content may then need recovery.
What does the encryption self-test do?
It performs a local protect-and-open check with the active profile. It does not send the test plaintext or recovery material to an AI provider.
Can I make voice and video calls?
Yes. CallChat uses the hosted MatrixRTC, LiveKit, and TURN path for voice, video, and screen sharing. Joining requests microphone access only. The camera stays off and is requested separately when you press Start video.
How does the protected call layer work?
The call client uses encoded-frame encryption and mixes the current room-scoped ZMath factor into the media-key path when protected-call policy is active. The room profile is not sent to the media service.
What is the IonQ hardware factor option?
It is an optional separately generated hardware-linked factor for an approved profile. Standard ZMath protection remains active without it. It is not quantum key distribution and it does not send Matrix keys, passphrases, patterns, call secrets, or plaintext to IonQ.
The call connects but I cannot hear sound. What should I do?
Check that the site is not muted, select the correct speaker, raise device volume, and press Enable sound if CallChat shows it. Safari and some mobile browsers require that extra user action before remote audio can play.
Is normal chat free?
Yes. Standard Matrix-compatible messaging on CallChat remains free. The hosted Shield showcase is included for active callchat.org accounts.
What is Zero Bot?
Zero Bot is the optional room assistant for approved rooms. It can explain CallChat and setup, but protected secrets and recovery material must never be sent to the bot.
Which AI powers Zero Bot?
The server owner chooses the configured provider. Provider keys stay on the server, and ZMath factors, Matrix keys, recovery material, and protected-room plaintext are excluded from provider requests.
Can an administrator recover my Shield content?
An administrator should not be treated as a plaintext recovery agent. Support will not ask for passwords, pattern images, Matrix recovery keys, private keys, or raw Shield secrets.
How much is the self-hosted license?
The self-hosted ZMath Shield and Q Call offer is USD $55 per month or USD $550 per year for unlimited users on one approved public server IP. Hosted callchat.org Shield is included as the showcase.
Can CallChat be self-hosted?
Yes. The community Matrix-compatible foundation can be self-hosted. The proprietary Shield policy and premium ZMath deployment require the appropriate license.
No matching answer. Try fewer words or open the full manual.
Still stuck?
Keep secrets out of support messages.
Describe the status text and device type. Never send passwords, pattern images, Matrix recovery keys, private keys, or raw Shield material.