Current Affairs Security

India's War on Bitchat: When Governments Fear Mesh Networks

2026-07-25

India's government just ordered GitHub to delete Jack Dorsey's Bitchat repositories. Three hours. Gone. The Ministry of Home Affairs invoked Section 79(3)(b) of the IT Act 2000 on July 23, 2026, directing the removal of the Android app and its release files because, they say, a Bluetooth mesh platform that works offline is a threat to national security.

The timing isn't accidental. Delhi's been in chaos since June. Gen Z protesters occupied Jantar Mantar demanding the Education Minister resign over the NEET paper leak—examination fraud that sparked riots. Authorities suspended mobile internet in a 1.5-kilometer radius. Then, predictably, protesters switched to Bitchat. Because it works without cell networks. Because it's built for exactly this scenario.

Here's what makes Bitchat dangerous to governments: it doesn't need phone numbers. No mandatory registration. No central servers logging who said what to whom. Messages hop phone-to-phone via Bluetooth Low Energy mesh. No internet, no mobile network, no trace. Dorsey released it open-source in July 2025 specifically to let Bitcoin transactions survive blackouts and shutdowns. You can broadcast a tx when connectivity returns. But civilians discovered it also works for coordinating protests when your state cuts the internet.

The government's case is straightforward. The Indian Cyber Crime Coordination Centre (I4C) claims the app's architecture makes lawful interception impossible. No logging means no investigation. Anonymous coordination during public disorder, terrorism, organised crime—the usual regulatory talking points. They threatened GitHub with losing safe harbour status and criminal prosecution if they didn't comply.

Digital rights organizations fired back immediately. The Internet Freedom Foundation pointed out something obvious: Section 79 doesn't give the government blanket blocking powers. I4C never identified specific unlawful content in the repositories. And here's the killer detail—removing code from GitHub doesn't disable apps already installed on thousands of phones. The order is security theatre.

Better yet, it probably didn't work. Open-source code gets mirrored everywhere. Experts noted it was unclear whether GitHub even complied within the three-hour deadline. Come Friday, Bitchat remained available on major app stores. You can't kill software by deleting a GitHub repo.

This is what regulatory overreach looks like in real time. India's government watched protesters organize without internet. They saw a tool designed to survive state control. So they issued an order their own tech lawyer probably knew was unenforceable, just to signal: we don't accept this. We will try to stop this.

The deeper issue is structural. Dorsey built Bitchat for resilience. It works during disasters, blackouts, shutdowns. That same resilience terrifies governments because surveillance requires infrastructure. Governments control the pipes. Mesh networks don't need pipes. You can't intercept what has no center.

India's takedown attempt exposes the real fight ahead: decentralized tech versus state power. And it's not going away.

Source & further reading:

Sources