The warm, free place for your people — servers, voice, video, 4K screen-share — on a server that literally can't read your messages. Open source. Yours to host.
We host it so it just works — but it's end-to-end encrypted (we can't read it), you can export everything anytime, and you're one button from moving it to your own box. Minecraft Realms, if Realms couldn't read your world.
A shinier avatar, bigger emoji, HD — for one person. The real server perks are paywalled again behind Boosts (~$4.99 each). A 20-person crew that all wants HD pays ~$200/mo. Forever.
An always-on, encrypted server for your entire community — every "premium" thing included, for everyone. Or run it free (it naps when idle). Or self-host for $0. Cost-per-person only drops as you grow.
One Discord Nitro buys you a fancier avatar. The same money runs your whole community — encrypted — on Ohiyo.
All the stuff Discord charges Nitro for is just how Ohiyo works. For $0.
Built on the Signal Protocol (no hand-rolled crypto): X3DH + Double Ratchet for 1:1, sender keys + epoch rekey for groups. A removed member can't read a single future message. The server only ever relays ciphertext.
integration-testedHop into a call in one tap. Studio-grade audio, HD video, high-fps screen-share — free, no catch.
Per-conversation TTL that wipes server-side, plus an inactivity wipe if you go dark for N days.
Bigger uploads, custom emoji, HD video, themes, roles, polls, events. The things behind Nitro are just… included. No ads, no telemetry.
Third-party plugins run in a genuinely isolated Web Worker — no network, no token access.
The warm Daybreak & Dusk themes, a build-your-own theme editor, and motion that respects reduced-motion.
One Rust binary + SQLite. Deploy to a $5 box and own your community — code, server, and conversations.
Warm inside, sealed shut. We didn't invent the crypto — we used the real, audited thing, and built the server to be blind by design.
The server moves sealed envelopes between devices, enforces membership, and stores nothing it can read — proven by a Rust integration suite that shows a removed member loses access and a pinned identity can't be silently swapped.
Async key agreement — message someone offline, forward-secret from the first byte.
Per-message keys with forward secrecy & post-compromise recovery, via audited libsignal.
Every membership change rekeys; a removed member reads zero future messages.
Out-of-band verification across a contact's devices; a swapped key raises a loud banner.
| Ohiyo | Discord | |
|---|---|---|
| End-to-end encrypted DMs & groups | ✓ Signal Protocol | ✕ plaintext on servers |
| The full feature set | ✓ everything free | ✕ Nitro subscription |
| Launch your own server | ✓ one tap, < a Nitro | ✕ not a thing |
| Self-hostable & open source | ✓ single binary, AGPL | ✕ closed SaaS |
| Disappearing messages & dead-man switch | ✓ built in | ✕ none |
| Reads your data to monetize it | ✓ can't — blind server | ✕ analytics & ads |
One Rust binary + SQLite. Deploy to a tiny box, point the app at it, and your community is genuinely yours — no exit tax, no rug-pull.
git clone https://github.com/New1Direction/ohiyo
The warmth and reach of Discord, the privacy of Signal, and a server that can't betray you because it can't read you. Kikka kept you a seat.