India Orders GitHub to Remove Bitchat App

The Indian Cybercrime Coordination Centre (I4C) under the Ministry of Home Affairs ordered GitHub to remove the Bluetooth-based chat application Bitchat on 23 July 2026. The order was made public on 24 July 2026 by Jack Dorsey, the developer of Bitchat and former Chief Executive Officer of Twitter.

Bitchat and its technical design

Bitchat is an open-source, peer-to-peer messaging application that uses Bluetooth Low Energy mesh networks. The app enables encrypted communication between nearby devices, usually within a range of 30 to 100 metres, without internet access, mobile networks, user registration, phone numbers, or central servers.

Legal basis and regulatory framework

The directive invoked Section 79(3)(b) of the Information Technology Act, 2000, and Rule 3(1)(d) of the Information Technology Rules, 2021. The order asked GitHub to disable access to three Bitchat repositories, including the Android version, within hours. Section 79 of the Information Technology Act, 2000, deals with intermediary liability in India. Rule 3(1)(d) of the IT Rules, 2021, relates to due diligence obligations for intermediaries and content-related compliance.

Security concerns linked to encrypted decentralised apps

The government stated that Bitchat’s decentralised and anonymous structure impedes lawful interception, attribution, and investigation by law enforcement agencies. The order also cited possible misuse by anti-national elements, terrorist organisations, organised criminal groups, and cybercriminals. Such applications can function during internet restrictions and can be used for coordination, misinformation, and unlawful communication. Bluetooth-based mesh systems are designed for local device-to-device connectivity and do not depend on central internet infrastructure.

Important Facts for Exams

• Indian Cybercrime Coordination Centre is a specialised unit under the Ministry of Home Affairs.
• GitHub is a Microsoft subsidiary and a major platform for open-source software repositories.
• Bluetooth Low Energy is a short-range wireless communication standard used in low-power devices.
• Section 79 of the Information Technology Act, 2000, is a key provision on intermediary liability in India.

Previous security concerns

In July 2025, security researchers identified a man-in-the-middle attack vulnerability in Bitchat. Jack Dorsey also placed a disclaimer on GitHub advising against using the app for production or relying on its security without further review.