Azfar Alam
Back to Projects
Private Communication Platform

Eywa - Private Communication Platform

Eywa is a modern private communication platform built for secure messaging with selected users. Unlike public chat apps, Eywa only allows pre-approved users to access the platform, providing a clean, distraction-free environment for trusted connections.

Project Vision

Create a private digital space where only trusted, pre-approved users can connect for encrypted, real-time communication. Eywa is designed for teams, circles, and groups that value security, privacy, and complete control over who has access.

Why Eywa?

Zero Public Exposure

Not open to everyone. Only trusted, pre-approved users as decided by the administrator.

Military-Grade Encryption

Messages encrypted with AES before database storage ensuring privacy at every layer.

Distraction-Free

Clean, simple interface focused on secure communication without ads or unnecessary features.

Complete Admin Control

Full control over user access through .env configuration without code deployment.

Real-Time Communication

Instant messaging, voice, and video calls powered by Socket.IO and WebRTC.

Browser-Based

No app installation needed. Works seamlessly across all modern browsers and devices.

Access Control System (The Key Differentiator)

Eywa is NOT a public platform

Unlike other communication apps, Eywa does NOT allow open registration. Only pre-approved Gmail addresses can access it.

How Access Control Works

USER_EMAIL_mdazfaralam440_gmail_com=azfar21

Email format in .env (@ and . replaced with _)

1

Original Email

mdazfaralam440@gmail.com

2

Converted to .env Key

USER_EMAIL_mdazfaralam440_gmail_com

3

Internal Username

azfar21 (value in .env)

Allowed

Email exists in .env file → User can login

Denied

Email NOT in .env → Access immediately blocked

Access Control Features

Email Whitelist Only

Only Gmail accounts listed in production .env can authenticate via Google OAuth.

No Public Signup

Open registration is disabled. Access is exclusively controlled by the administrator.

No Random Users

Unlike public platforms, Eywa ensures only trusted, pre-approved users can connect.

Environment-Based Control

Manage access through .env variables without code changes. Add/remove users instantly.

Complete Platform Flow

1

Login via Google OAuth

Users authenticate with their Gmail account. System checks if email exists in .env whitelist.

2

Profile Creation

Upon first login, user profile is created with username derived from .env configuration.

3

Search & Add Friends

Search for approved users by username. Username must exist in the whitelist.

4

Friend Request

Send friend request to target user. Other user receives notification and can accept/decline.

5

Connect & Communicate

Once friends, users can instantly chat, share media, and make voice/video calls.

Communication Channels

Encrypted Chat

Send and receive messages with end-to-end encryption. Full conversation history encrypted in database.

Voice Calls

Peer-to-peer voice communication using WebRTC for crystal-clear audio quality.

Video Calls

High-definition video conversations with stable connection handling and quality adaptation.

Media Sharing

Share images, files, and media with temporary availability inspired by Snapchat.

Encryption & Security

AES Message Encryption

All messages are encrypted using AES before storage in MongoDB. Database contains only encrypted ciphertext.

Real-Time Delivery

Socket.IO broadcasts decrypted messages directly to recipient in real-time without storing plaintext.

Access Control Layer

Multi-level authentication ensuring only verified, whitelisted users can access the platform.

Ephemeral Media

Media files are temporary like Snapchat, automatically removed after viewing or expiration.

AES Encryption Example

Original Message:

Hello Azfar

↓ AES Encrypted ↓

Stored in Database:

U2FsdGVkX1+93hHhH32kshd2jh2k3jkl2k32...

Only encrypted ciphertext is stored. Database provides zero intelligence without decryption key.

Technology Stack

frontend

React 18.x

Modern UI framework with hooks and state management

Socket.IO Client

Real-time WebSocket communication layer

WebRTC

Peer-to-peer audio and video calling

Tailwind CSS

Modern utility-first CSS framework

backend

Flask

Python web framework for API and real-time server

Flask-SocketIO

WebSocket support for real-time messaging

MongoDB

NoSQL database for user, message, and friend data

AES Encryption

Message encryption before database storage

infrastructure

Vercel

Frontend deployment with global CDN

MongoDB Atlas

Cloud-hosted MongoDB with automatic scaling

WebRTC Signaling

Real-time signaling for voice and video calls

Key Features

Private Access Control

Only pre-approved Gmail users can access the platform via .env configuration. Complete control over who joins.

Real-Time Chat

Instant encrypted messaging with Socket.IO powered real-time delivery between approved users.

Voice Calling

Crystal-clear peer-to-peer voice communication built directly into the browser.

Video Calling

High-quality video conversations with your trusted connections, all within the platform.

Message Encryption

AES encryption ensures messages are encrypted before storage in database for database-level privacy.

Ephemeral Media

Snapchat-style media sharing where images and files are temporary, maintaining privacy.

Who Should Use Eywa?

Private Team Communication

Trusted teams wanting a secure, distraction-free alternative to public messaging platforms.

Executive Conversations

C-level executives requiring completely private, encrypted communication channels.

Secure Group Coordination

Closed groups needing restricted access with strong privacy guarantees.

Family & Friends Network

Close-knit circles of trusted individuals wanting private encrypted communication.

What Makes Eywa Different?

🚫

Not a Public Platform

Unlike Facebook, WhatsApp, or Telegram, Eywa doesn't let anyone sign up. It's exclusive by design.

🔐

Database-Level Privacy

All messages encrypted before storage. Even database admins cannot read message content without decryption keys.

👤

Zero Strangers

You can only communicate with people explicitly whitelisted by the administrator. No random connections.

Secure Private Communication Awaits

Eywa provides a private, encrypted communication space for trusted users only. No public signups, no random connections, just secure conversations between verified team members.