ZEQAT SEARCH
ZEQAT SEARCH
ZEQAT runs on a hardened PHP + MySQL core with browser-side cryptography, silent dual-PIN authentication, device binding, and a QR handoff protocol. Every layer was chosen to keep your data on your device — not ours.
A lean PHP/MySQL core, a browser-side encryption layer, and a login system that treats your device as your second factor. No bloated SDKs, no analytics payload, no external identity provider.
How It WorksServer-rendered PHP with real prepared statements. No framework, no bundle bloat, no supply-chain surprises.
Every query is a server-side prepared statement. Every write goes through a transaction where it matters.
Keys are generated in the browser and never sent. The server only ever sees ciphertext.
No Firebase, no Google Auth, no third-party identity provider. OneSignal is used only for push notifications.
Five layers stand between an attacker and your account — from the browser that holds your private key down to the row in the database that only your device can unlock.
Explore SecurityX25519 key exchange + AES-GCM. Private key never leaves the browser.
Password, silent dual-PIN, trusted device binding, QR handoff.
Server-side prepared statements, bcrypt password hashing, transactional writes.
Cloudflare proxying, strict CSP, HSTS, and CSRF tokens on every state change.
ZQID only — no phone number, no email, no personal data required.
Every feature in ZEQAT is downstream of one design rule: the server should know as little as possible. Anonymous identity, silent destruction, device binding and QR handoff all fall out of that rule.
See All FeaturesMessage bodies are encrypted before they leave your device. The server stores ciphertext.
A 7-digit identifier and a 24-word recovery phrase. No email, no phone, no PII.
Arm wipes ahead of time, trigger them from the login screen with your second PIN.
Sign in on desktop by scanning with your phone. The old session ends immediately.
Cryptography, browsers and threat models all move. ZEQAT is designed so that when one layer weakens, the others still hold — and so we can swap pieces out without breaking your account.
Our RoadmapResearching hybrid X25519 + ML-KEM key exchange.
Flag suspicious login patterns without profiling content.
Share your identity across your own devices — encrypted end-to-end.
Lower latency while keeping data in your chosen region.