HexChat: IRC Client

From Whonix

(Redirected from XChat)

HexChat Logo


HexChat [archive] is an open source IRC client based on XChat [archive]. It includes basic functionality found in IRC clients, like secure connections, multiple server connections, nick completion, a client-to-client protocol, direct client-to-client file transfer and chat, and a plugin system which allows extension of features and further customization. [1] [2]

HexChat in Whonix ™ has been hardened according to The Tor Project's Torrifying HexChat guide. [3] All servers, besides the secure (SSL) version of the Open and Free Technology Community (OFTC) [archive] have been removed. [4] It is recommended to add the securely encrypted version of the IRC server, preferably an onion service which uses SSL as a fallback or at best, both. Also see: Torifying HexChat [archive].

Note that the official #Tor channel is on OFTC, but no Whonix ™ developers are active there! Upstream Tor developers do not support Whonix ™. For help with Whonix ™-related issues, see Support.

HexChat Operations[edit]

Start HexChat[edit]

If you are using Qubes-Whonix ™, complete the following steps.

Qubes App Launcher (blue/grey "Q")Whonix-Workstation ™ AppVM (commonly named anon-whonix)HexChat IRC

If you are using a graphical Whonix-Workstation ™, complete the following steps.

Start menuApplicationsInternetHexChat IRC

Reset the HexChat Identity[edit]

Ambox warning pn.svg.png Warning: This will kill HexChat, delete all settings, scripts and logs and finally create a fresh HexChat identity.

Open a terminal.

If you are using Qubes-Whonix ™, complete the following steps.

Qubes App Launcher (blue/grey "Q")Whonix-Workstation ™ AppVM (commonly named anon-whonix)Xfce Terminal

If you are using a graphical Whonix with XFCE, run.

Start MenuXfce Terminal





Some networks and hidden IRC servers (like freenode) require Simple Authentication and Security Layer (SASL) [archive] to connect to them.

Setting up SASL is outside the scope of this entry; refer to The Tor Project SASL Authentication [archive] instructions.

Privacy Check[edit]

Before joining any channels, run the whois function from the status window.

/whois your-user-name your-user-name

The following example Chat (IRC client) screenshot shows the /whois output for user TNTBOMBOM (/whois TNTBOMBOM TNTBOMBOM).

Figure: IRC /whois Output

HexChat (IRC Client), showing /whois of oneself.

Disabling Hardening and File Transfers[edit]

See: [archive]

IRC General[edit]

The Ident Protocol [5] is automatically blocked because Whonix-Workstation ™ is firewalled. [6]

The Tor Project Internet Relay Chat [archive] page contains general IRC safety techniques and other tips. Another useful resource is the IRC Security [archive] page. Key information and advice is provided on:

  • The importance of (additional) encrypted connections:
    • If an onion service is available, then use it. It is also safer to combine additional layers of encryption like SSL, TLS or GPG if possible.
    • If an IRC server uses a self-signed certificate, then explicitly check the SSL/TLS certificate is correct to prevent man-in-the-middle attacks [archive].
  • Avoiding Trojan Horse attacks [archive] via malicious, downloaded files.
  • Defense against Denial of Service attacks [archive]. [7]
  • Dangers associated with downloaded files.
  • Firewall considerations.
  • The impact of potential back-doors in IRC clients.
  • Circumvention of Tor censorship.
  • End-to-end encryption using OTR and other plugins.
  • Social safety measures to prevent de-anonymization.
  • Other miscellaneous security advice.

Connection Issues[edit]

If a message similar to the following appears.

* Closing Link: (No more connections permitted from your host)
* Disconnected (Remote host closed socket)

This most likely means the connection to the IRC server is working, but the server disconnects because they are not accepting Tor network connections. This is a general Tor censorship problem and unrelated to Whonix; see List Of Services Blocking Tor [archive].

Unfortunately there is no easy solution and each available workaround has pros and cons:

To follow the associated Whonix ™ development ticket, see: Migrating from IRC OFTC to Tor friendly IRC network [archive].


Figure: HexChat IRC Client Chat Window Hexchat.png

See Also[edit]


  1. [archive]
  2. [archive]
  3. [archive]
  4. This is an IRC network which provides collaboration services for members of the free software community, anywhere in the world.
  5. [archive]
  6. The Tor Project notes [archive]:

    In both UNIX and Windows systems, the logged in username becomes the default ident. The ident is seen by most clients during channel join and when performing the /​whois command. It is therefore recommended to fake your ident before you connect to any IRC servers.

  7. Which otherwise can make networked computers disconnect or crash.
  8. Or conduct an Internet search for "Tor-friendly IRC server".
  9. This is a time-consuming and steep learning curve just to solve this issue.

text=Jobs in USA
Jobs in USA

Search engines: YaCy | Qwant | ecosia | MetaGer | peekier | Whonix ™ Wiki

Follow: Twitter.png Facebook.png 1280px-Gab text logo.svg.png Iconfinder news 18421.png Rss.png Matrix logo.svg.png 1024px-Telegram 2019 Logo.svg.png Discourse logo.svg Reddit.jpg Diaspora.png Gnusocial.png Mewe.png 500px-Tumblr Wordmark.svg.png Iconfinder youtube 317714.png 200px-Minds logo.svg.png 200px-Mastodon Logotype (Simple).svg.png 200px-LinkedIn Logo 2013.svg.png

Donate: Donate Bank Wire Paypal Bitcoin accepted here Monero accepted here Contriute

Whonix donate bitcoin.png Monero donate whonix.png United Federation of Planets 1000px.png

Share: Twitter | Facebook

https link onion link

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix ™, then Edit! Edits are held for moderation. Policy of Whonix Website and Whonix Chat and Policy On Nonfreedom Software applies.

Copyright (C) 2012 - 2020 ENCRYPTED SUPPORT LP. Whonix ™ is a trademark. Whonix ™ is a licensee [archive] of the Open Invention Network [archive]. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix ™ itself. (Why?)

Whonix ™ is a derivative of and not affiliated with Debian [archive]. Debian is a registered trademark [archive] owned by Software in the Public Interest, Inc [archive].

Whonix ™ is produced independently from the Tor® [archive] anonymity software and carries no guarantee from The Tor Project [archive] about quality, suitability or anything else.

By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix ™ is provided by ENCRYPTED SUPPORT LP. See Imprint, Contact.