Secure messaging is about much more than end-to-end encryption. Metadata collection, open-source transparency, independent audits, default encryption, account requirements, backups, and jurisdiction all influence how private a messaging platform actually is. This comparison examines the major privacy-focused messaging apps and discusses the trade-offs each one makes instead of trying to crown a single “best” option.

  • Zachariah
    link
    fedilink
    English
    arrow-up
    24
    arrow-down
    2
    ·
    1 day ago

    THE FULL SCORECARD

    Rank App Score Verdict
    1 Cwtch +21 Zero compromise
    2 Briar +21 Zero compromise
    3 SimpleX Chat +11 High privacy
    4 Threema +9 Strong privacy
    5 Session +8 Strong privacy
    6 Signal +7 Pragmatic standard
    7 Wire +4 Moderate
    8 Matrix +3 Moderate
    9 iMessage -7 Poor
    10 WhatsApp -11 Avoid for sensitive use
    11 Viber -13 Avoid
    12 Telegram -14 Avoid despite reputation
    13 Discord -15 Public chats only
    14 RCS / SMS -21 Zero protection
    • LincolnsDogFido@lemmy.zip
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      17 hours ago

      I use SimpleX and one of the features I really like is the self-destruct code. You can have one pin that allows you to open your chats like normal, but if you input a self-destruct code instead the app opens like normal but deletes all information in the background and wipes your profile. All the user sees is an empty profile and empty chat history.

      So if you’re at a protest or something and MUST have your phone, you still have a safeguard against communication snooping. Say your phone is confiscated and they obtain your device lock, there’s nothing they can do about the self-destruct code. “I just downloaded the app in case I ever needed to use it for sensitive data with my wife, but we never ended up using it.”

      I do wish that they allowed keypad scrambling though. Even stock Android allows lockscreen pinpad scrambling to avoid fingerprint code hinting.

        • LincolnsDogFido@lemmy.zip
          link
          fedilink
          English
          arrow-up
          2
          ·
          17 hours ago

          Not sure what you mean, but you can set it to immediately lock when the device is locked. So all it takes is for the screen to sleep or manually lock the phone.

          I set mine to immediately lock but there’s options for 5, 10, 30 seconds, etc.

          • Zachariah
            link
            fedilink
            English
            arrow-up
            3
            ·
            17 hours ago

            It would be an auto-self destruct if you take more than X amount of days between successfully entering a code. So, like, if you died, it’d wipe itself after a certain number of days automatically.

            • LincolnsDogFido@lemmy.zip
              link
              fedilink
              English
              arrow-up
              2
              ·
              16 hours ago

              Ah, not to my knowledge. But for me, considering everything is locally encrypted, thats sufficient. I’d imagine that the prospect of accidentally wiping the contents with an incorrect passcode would delay any attempts to crack it.

    • Lemmayng
      link
      fedilink
      English
      arrow-up
      5
      ·
      24 hours ago

      Where would Delta Chat fall in this test?

  • whyNotSquirrel@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    13
    ·
    22 hours ago

    Matrix for me, because I don’t know anyone that have an active account, so I’m not messaging anyone. The best privacy

    Then there’s Signal

    • phanto@lemmy.ca
      link
      fedilink
      English
      arrow-up
      8
      ·
      18 hours ago

      I put up my own Matrix server! It’s great! I can use it to talk to myself, but with extra steps!

    • lyralycan@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      23 hours ago

      I like to think folk would trust me, an enthusiast, with absolute sovereign security for their information over superficial centralised security from a corporation. Well, as it is a Matrix server doesn’t need any personal info from a client, just the bare essentials from their device to make comms work.

  • newton@feddit.online
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    1
    ·
    edit-2
    1 day ago

    SimpeX chat , lxmf ,xmpp , ratspeak ,sideband ,meshchat ,nomad network .

    Never heard of Linddun ,will give it a try.

    • badgermurphy
      link
      fedilink
      English
      arrow-up
      3
      ·
      16 hours ago

      I dont think it is an app itself, but a scoring system to grade the privacy of existing other apps more empirically vs. their marketing BS.

    • UnLocoPocoOP
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      1 day ago

      Linddun is basically 7 parameters for privacy. Yes a bit less known true