Jitsi
jitsi.orgWeb, Windows, MacOS, Linux, Android, iOSEncrypted, free and open source video calling app, which does not require creating an account/ providing any personal details. Available as a web app, and native app for Windows, MacOS, Linux, Android and iOS. You can use the public Jitsi instance, self-host your own, or use a community hosted instance.
- Homepage:jitsi.org
- GitHub:github.com/jitsi/jitsi-meet
- Privacy:tosdr.org/en/service/2201
- Web info:web-check.xyz/check/jitsi.org
Jitsi Privacy Policy
Privacy Policy Summary
- There is a date of the last update of the agreements
- This service collects your IP address, which can be used to view your approximate location
- The service provides a complaint mechanism for the handling of personal data
- Your personal data is used for limited purposes
- The service can delete your account without prior notice and without a reason
- You maintain ownership of your data
- Prohibits the posting of pornographic content
- The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
- This service throttles your use
- This service does not condone any ideas contained in its user-generated contents
- This service prohibits users sending chain letters, junk mail, spam or any unsolicited messages
- They may stop providing the service at any time
- You waive your right to a class action.
- You have the right to leave this service at any time
- Users agree not to use the service for illegal purposes
- This service prohibits users from attempting to gain unauthorized access to other computer systems
- If you offer suggestions to the service, they may use that without your approval or compensation, but they do not become the owner
- Failure to enforce any provision of the Terms of Service does not constitute a waiver of such provision
- Any liability on behalf of the service is only limited to USD $10
- This service does not guarantee that it or the products obtained through it meet the users' expectations or requirements
- Invalidity of any portion of the Terms of Service does not entail invalidity of its remainder
- The service provides information about how they intend to use your personal data
- The service provides details about what kinds of personal information they collect
- The court of law governing the terms is in New York, USA.
- The court of law governing the terms is in a jurisdiction that is less friendly to user privacy protection.
- Your personal data is not sold
- The service is provided 'as is' and to be used at the users' sole risk
- This service is only available to users over a certain age
- Business Users are solely responsible for claims made against the service and agree to indemnify and hold harmless the service.
- The service may change its terms at any time, but the user will receive notification of the changes.
- Third parties are involved in operating the service
- The copyright license that users grant this service is limited to the parties that make up the service's broader platform.
- The service allows you to use pseudonyms
- This service assumes no liability for any losses or damages resulting from any matter relating to the service
- User logs are deleted after a finite period of time
Score
Documents
- Terms of ServiceCreated 04 Jan 21, Last modified 1 year ago
- Privacy SupplementCreated 06 Sept 20, Last modified 1 year ago
Domains Covered by Policy
- jitsi.org
- meet.jit.si
About the Data
This data is kindly provided by tosdr.org. Read full report at: #2201
Jitsi Source Code
Author
Description
Jitsi Meet - Secure, Simple and Scalable Video Conferences that you use as a standalone app or embed in your web application.
Homepage
https://jitsi.org/meetRepository
- LicenseApache-2.0
- Created16 Dec 13
- Primary languageTypeScript
- Size385,574 KB
- Stars30,138
- Forks8,103
- Watchers30,138
Top Contributors
@saghul (2093)
@damencho (2066)
@hristoterezov (1177)
@paweldomas (658)
@Calinteodor (656)
@lyubomir (621)
@jallamsetty1 (604)
@yanas (577)
@virtuacoplenny (541)
@bgrozev (504)
@robertpin (457)
@zbettenbuk (318)
@gpolitis (208)
@horymury (186)
@vp8x8 (152)
@mihhu (148)
@onceupondev (130)
@dependabot[bot] (121)
@ibauersachs (120)
@fippo (119)
@tmoldovan8x8 (97)
@aaronkvanmeerten (85)
@emcho (71)
@andrei-gavrilescu (61)
@turint (55)
@jluisfa (45)
@csett86 (38)
@jitsi-pootle (35)
@tudor-phd (30)
@gabiborlea (29)
@m-voloshin (28)
@muscat1 (27)
@kkrisstoff (26)
@shawnchin (25)
@fouksf (22)
@NullIsNot0 (21)
@c0m1t (21)
@danielob (20)
@tsareg (19)
@Julian1203 (18)
@chipechop (18)
@ali-alhaidary (18)
@alexbumbu (18)
@emrahcom (17)
@wfleischer (16)
@joshuai96 (16)
@bbaldino (15)
@muskan-creates352 (15)
@JonathanLennox (15)
@JohnProv (15)
@Stephan-P (14)
@gpatel-fr (14)
@SamWhited (14)
@Mejans (13)
@daimoc (13)
@abora8x8 (13)
@dudumanbogdan (13)
@jmontane (12)
@thttg (12)
@nils-ohlmeier (12)
@gerges-zz (11)
@vishal2005025 (11)
@hlvhe (10)
@iospro (9)
@skolmer (9)
@keremoge (8)
@marclaporte (8)
@5idereal (8)
@ujdhesa (8)
@guusdk (8)
@vanmatten (8)
@dimitardelchev93 (8)
@mishraditi (8)
@filiprejmus (7)
@bickelj (7)
@manuhabitela (7)
@WillLiang918 (7)
@wliang67 (7)
@wilsonfurtado2000 (7)
@dwilson6 (7)
@ilaydadastan (7)
@quitrk (7)
@champtar (7)
@ravindra-RKB (7)
@zalmoxisus (7)
@Yash1927 (6)
@apetrus20 (6)
@nbeckindy (6)
@dandv (6)
@ahmadkadri (6)
@codewithabhay10 (6)
@raduanastase8x8 (6)
@dortegau (6)
@andioltean (6)
@nomadbyte (5)
@sawall (5)
@abbasrm (5)
@Aaravanand00 (5)
@luixxiul (5)
@Subhajit578 (5)
Recent Commits
damencho(23 Oct 26)
fix(ci): post a failed PR torture check when the tests did not run When the test job stops before producing reports (the PR doesn't build or doesn't merge with its target branch), there is no artifact and the report job failed without posting anything, so the PR showed no <repo>-PR-torture check. Now it posts a failed one, linking to the run.
Дамян Минков(23 Oct 26)
feat(ci): run the PR tests on the self-hosted runner (#18083) * feat(ci): run the PR tests on the self-hosted runner The PR tests (jitsi-pr-testing-scripts) run on the self-hosted runner on oracle-prtorture. Members of the PR_TEST_ADMIN_TEAM team can start them on any PR with "ok to test", force a new run with "test this please" or run them from the Actions tab. The PRs of the PR_TEST_ADMIN_TEAM and PR_TEST_TRUSTED_TEAM members run on every push. * fix(ci): no write token for the PR code, comment case, closed PRs - The token in the environment of the PR code only has checks write on the PR repo and actions read on jitsi-meet, without listing jitsi-meet twice. The reports are pushed with a separate token for jitsi-pr-tests-pages (PAGES_TOKEN). - "test this please" matches in any case, like the job filter. - Closed and merged PRs are not tested. * fix(ci): keep the GitHub tokens away from the PR code, dial-in only for trusted authors - The job that runs the PR code on the self-hosted runner gets no App token, only the workflow token without permissions for reading the public PRs. It uploads the reports as an artifact. - A new job on a hosted runner downloads them, publishes them and posts the check run with the App tokens. - The VoxImplant credentials, and so the dial-in tests, only for PRs of admins and trusted members. * fix(ci): run the PR tests as jenkins, the runner as ghrunner The runner on oracle-prtorture runs as ghrunner, which has the runner credentials and the scripts deploy key. The tests run as jenkins through /usr/local/bin/pr-torture-run (sudo), in /var/lib/pr-torture/work, so the PR code can read neither. Only regular files and directories of the reports go into the uploaded artifact.
Calin-Teodor(23 Oct 26)
chore(ios): update JitsiWebRTC to 155.0.1
Michael Lohmann(23 Oct 26)
fix(native): fix year not being shown in recent-list, but "gggg" instead (#18080) For calls from the last year, the literal text "gggg" was displayed, since this is not a valid formatting string. I assume this was a typo, since it was like this since the introduction of the recent-list.
Muskan Kumari(22 Oct 26)
fix(native): add accessibility labels, roles and states to invite dialog (#18076)
Joan Montané(22 Oct 26)
Update Catalan translation (13 strings) Automated by Minairó; reviewed and approved by Joan Montané.
Muskan Kumari(23 Oct 26)
fix(native): add accessibility labels to poll results and create options (#18078)
Jaya Allamsetty(22 Oct 26)
fix(prosody): replay voice-agent events of rooms that are gone A replay uses what verify_room answered for the same token while the room existed, and skips a gone room the token was never checked against instead of falling back to a snapshot; streams without a token replay everything.
Jaya Allamsetty(22 Oct 26)
fix(prosody): voice-agent token scoping for breakout rooms, tenants and streams A room claim is required; a breakout room is checked as its main room, and verify_room gets the room's tenant. Event streams carry only the rooms a token may act on, instead of refusing scoped tokens.
Jaya Allamsetty(22 Oct 26)
fix(prosody): scope voice-agent tokens to their room and tenant claims token/util's verify_room checks the token's room and sub claims against the resolved room on every /voice-agent route; a stream for every room, or for a room that does not exist yet, needs the wildcard claims.
Calin-Teodor(22 Oct 26)
fix(shared-video): reset native error on input change and enforce allowed domains
Calin-Teodor(22 Oct 26)
feat(settings): remove toggle from native notifications
Calin-Teodor(22 Oct 26)
feat(flags): remove unused flag
puneetnith28(22 Oct 26)
fix(shared-video): reset error state on input change
Muskan Kumari(21 Oct 26)
fix(native): add accessibility labels and roles to breakout room context menu (#18061)
Muskan Kumari(20 Oct 26)
fix(native): add accessibility roles, labels and states to settings and language selectors (#18048)
Jaya Allamsetty(21 Oct 26)
feat(voice-agents): voice agents in meetings, provisioned through prosody (#17869) mod_voice_agent_component provisions agents (invite/get/list/dismiss, relay-reported lifecycle, signed webhooks, an event stream); the client shows them as participants with an AI badge, speaking indicators and opt-in consent. Agents and E2EE exclude each other; lib-jitsi-meet goes to v2233.0.0+7634be62.
Leonid Makarov(21 Oct 26)
fix(config): Fix missing comma.
Aarav Anand(21 Oct 26)
test(reactions): add E2E test suite for toolbar reactions and emojis (#17992) * test(reactions): add E2E test suite for toolbar reactions and emojis * fix(tests): address review comments on reactions and emojis E2E test * fix(tests): fix reactions menu hover trigger and emoji waitForExist
anirudhprmar(16 Oct 26)
fix(authentication): improve edge case handling
Muskan Kumari(20 Oct 26)
fix(native): add accessibility labels to more moderation actions and context menus (#18043)
Muskan Kumari(19 Oct 26)
fix(native): add accessibility labels to header navigation and chat recipient buttons (#18040)
Joan Montané(21 Oct 26)
fix(lang) Update Catalan translation (16 strings) (#18055) Automated by Minairó; reviewed and approved by Joan Montané. Co-authored-by: Joan Montané <[email protected]>
damencho(20 Oct 26)
fix(chat): restrict group chat and poll creation by the room permissions too The group chat input and the poll creation button followed only the dynamic branding flags, groupChatRequiresPermission and pollCreationRequiresPermission. The server also sets permissions.groupChatRestricted and permissions.pollCreationRestricted in the room metadata from the settings of the meeting, and enforces them. A participant without the send-groupchat or create-polls feature then still saw the controls, and what they sent was dropped by the server. Treat both sources the same: the restriction is on when either the branding flag or the room permission is set. Private chat already reads the room permission.
Ravindra Kumar Bundela(15 Oct 26)
test(iframe): add specs for setLowBandwidthMode command and events - Adds e2e test coverage for external iframe API setLowBandwidthMode command and lowBandwidthModeChanged event. - Uses waitForEventResult helper to assert event delivery when toggling low bandwidth mode. - Verifies in-meeting DOM video resolution indicator inside the iframe.
ravindra-RKB(20 Oct 26)
test(iframe): add specs for subject command and events (#17999) * test(iframe): add specs for subject command and events - Adds e2e test coverage for external iframe API subject command and subjectChange event. - Uses waitForEventResult helper to assert event delivery on subject updates. - Verifies conference subject DOM text for both local and remote participants. * refactor(tests): address PR review comments for subject iframe spec - Join participants via joinMuc with separate options to avoid sharing moderator JWT with p2. - Assert p1 isModerator status right after joining. - Add subjectChange listener on p2 to verify remote event delivery. - Enhance checkSubject in tests/helpers/participants.ts to poll with waitUntil. - Deduplicate test cases via changeSubjectAndVerify helper. * test(iframe): update test title in subject spec * test(iframe): wrap long JSDoc line in subject spec
ravindra-RKB(20 Oct 26)
test(iframe): add specs for displayName command and events (#18012) * test(iframe): add specs for displayName command and events - Adds e2e test coverage for external iframe API displayName command and displayNameChange event. - Verifies local and remote displayNameChange event emissions upon executing displayName command. - Verifies in-meeting DOM display name updates for local thumbnail and remote filmstrip. * refactor(tests): move displayName iframe test into participantsPresence spec - Address PR review comments from damencho. - Move displayName command and displayNameChange event coverage to participantsPresence.spec.ts to reuse existing 2-participant meeting setup without token dependency. - Verify local and remote displayNameChange event emissions and in-meeting DOM updates. - Remove separate displayName.spec.ts. * test(iframe): run displayName test before overwrite names * test(iframe): switch p1 to main frame before overwrite names
Jaya Allamsetty(20 Oct 26)
chore(deps) lib-jitsi-meet@latest https://github.com/jitsi/lib-jitsi-meet/compare/v2223.0.0+a8e7d0b1...v2231.0.0+f88763ea
Md Ikbal Hossain(20 Oct 26)
fix(polls): handle answers exceeding poll options (#18026) * fix(polls): handle answers exceeding poll options * fix(polls): reject mismatched answer counts * fix(polls): log sender for mismatched answer count in polls
ravindra-RKB(20 Oct 26)
test(iframe): add specs for email command and events (#18041) * test(iframe): add specs for email command and events - Adds e2e test coverage for external iframe API email command and emailChange event. - Verifies emailChange event emission with participant id and updated email payload. - Verifies in-meeting settings dialog profile email updates inside the iframe. * refactor(tests): move email iframe test into participantsPresence spec - Address PR review comments from damencho. - Move email iframe command and emailChange event coverage to participantsPresence.spec.ts to reuse existing meeting setup without token dependency. - Read profile email value before closing settings dialog, asserting value after dialog closes. - Remove separate email.spec.ts.
Jitsi Security
Security Advisories (5)
- mediumPatched
CVE-2025-64754DOM Redirect on Microsoft OAuth Flow
- lowPatched
GHSA-rj5g-9fmh-p5fjPoll vote manipulation
- lowPatched
GHSA-8f5r-2qpr-4g34Misleading E2EE cues on unsupported clients
- highPatched
CVE-2021-39215Authentication Bypass via Token Forgery
- lowPatched
CVE-2021-39205DOM-based XSS/Content Spoofing via Prototype Pollution
Jitsi Website
Website
Free Video Conferencing Software for Web & Mobile | Jitsi
Learn more about Jitsi, a free open-source video conferencing software for web & mobile. Make a call, launch on your own servers, integrate into your app, and more.
Redirects
Does not redirect
Security Checks
All 65 security checks passed
Server Details
- IP Address172.64.154.22
- LocationSan Francisco,California,United States of America,NA
- ISPCloudFlare Inc.
- ASNAS13335
Associated Countries
US
CA
Safety Score
Website marked as safe
100%
Trackers
No known trackers found
Blacklist Check
jitsi.org was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
Jitsi Reviews
More Secure Conference Calls
A free and open source, distributed video, calling and screenshare platform with a focus on security. Jami is completely peer-to-peer, and has full end-to-end encryption with perfect forward secrecy for all communications, complying with the X.509 standard. Supported natively on Windows, macOS, iOS, GNU/Linux, Android and Android TV. Video quality is quite good, but very dependent on network speeds, some of the apps are lacking in features.
About the Data: Jitsi
Edit Jitsi Data
You can edit Jitsi's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external
sources, a list of these can be found data documentation.
Origin Data
Modify Data
API
You can access Jitsi's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/jitsiThe REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share Jitsi
Help your friends compare Secure Conference Calls, and pick privacy-respecting software and services.
Share Jitsi and Awesome Privacy with your network!