{"id":1827,"date":"2016-08-15T16:45:17","date_gmt":"2016-08-15T13:45:17","guid":{"rendered":"https:\/\/www.protectimus.com\/blog\/?p=1827"},"modified":"2019-06-06T13:26:22","modified_gmt":"2019-06-06T10:26:22","slug":"trustworthy-messaging-apps","status":"publish","type":"post","link":"https:\/\/www.protectimus.com\/blog\/trustworthy-messaging-apps\/","title":{"rendered":"Which messaging apps are trustworthy?"},"content":{"rendered":"<p>Last time we analyzed the question of <a href=\"https:\/\/www.protectimus.com\/blog\/secure-messaging-app\/\">what makes for secure messaging apps<\/a>. Now we\u2019ll take a look at the level of security provided by several of today\u2019s popular message exchange programs.<\/p>\n<h2><a href=\"https:\/\/www.messenger.com\/\" target=\"_blank\" rel=\"nofollow noopener\">Facebook Messenger<\/a> and <a href=\"https:\/\/hangouts.google.com\/\" target=\"_blank\" rel=\"nofollow noopener\">Google Hangouts<\/a><\/h2>\n<p>These apps are built into their respective social networks. For this reason alone, they\u2019re certainly not in the running to win \u201cmost secure messaging apps of 2016\u201d. The lion\u2019s share of these companies\u2019 profits comes from targeted advertisements. As such, these companies are always trying to gather more data about their customers. It would be naive to think that they don\u2019t use the same methods with their own messaging apps. In short: it\u2019s inadvisable to discuss business or confidential information through Google Hangouts or Facebook Messenger.<\/p>\n<h2><a href=\"http:\/\/www.viber.com\/en\/\" target=\"_blank\" rel=\"nofollow noopener\">Viber<\/a><\/h2>\n<p>Viber is rich in functionality &#8211; besides the usual options, it even allows users to send money through Western Union. In the past, Viber has had weak security, but recently its developers have been working hard to turn it into a real, secure messaging app by, for example, adding hidden chats and end-to-end encryption. However, this is not yet available in all countries. Another issue is that messages are stored on company servers (which means they can be read by people other than their sender and intended recipient). The app also lacks password protection.<\/p>\n<h2><a href=\"https:\/\/www.skype.com\/en\/\" target=\"_blank\" rel=\"nofollow noopener\">Skype<\/a><\/h2>\n<p>The reputation of this truly mighty yet warmly loved communications juggernaut is somewhat compromised by its belonging to Microsoft, which, naturally, collects users\u2019 data. The elderly among us internet users might remember a time when Skype was an independent program and was, if not the most secure messenger, then certainly among the best.<\/p>\n<h2><a href=\"https:\/\/telegram.org\/\" target=\"_blank\" rel=\"nofollow noopener\">Telegram<\/a><\/h2>\n<p>Pavel Durov\u2019s project was fated for success: it came out at the same time as Edward Snowden\u2019s revelations showed people that privacy online isn\u2019t a luxury, but a necessity. Telegram has always supported end-to-end encryption, but for some reason this function isn\u2019t enabled by default. It also supports automatic deletion of messages. Data that has not been destroyed is stored on company servers in an encrypted format. Every cluster is encoded with a separate key. Many experts, however, have questions about the encryption protocol this company uses. It was developed in-house and is not used by anyone else. Who knows whether it\u2019s adequate?<\/p>\n<h2><a href=\"https:\/\/play.google.com\/store\/apps\/details?id=org.thoughtcrime.securesms&amp;hl=en\" target=\"_blank\" rel=\"nofollow noopener\">Signal<\/a><\/h2>\n<p>Secure messengers for iOS are old news. Apple has always placed a large, and from a user\u2019s point of view, perhaps excessive, emphasis on security. This secure messenger was first designed for iPhones and iPads. It now has an Android version too. The best testimony for Signal comes from Edward Snowden &#8211; he stated on his Twitter account that he prefers it. Everything is as it should be: end-to-end encryption, impossibility of server side access, and open-source. The only thing lacking is that messages can\u2019t self-delete after being read by their addressee.<\/p>\n<h2><a href=\"https:\/\/www.whatsapp.com\/?l=en&amp;\" target=\"_blank\" rel=\"nofollow noopener\">WhatsApp<\/a><\/h2>\n<p>This is the world\u2019s most popular messenger, for many reasons. One of them is its security. Although WhatsApp belongs to Facebook, it\u2019s developed by a separate, independent entity. It\u2019s based on an open-source code base, supports end-to-end encryption as of this year, and does not allow the service provider to read messages. It uses the same encryption protocol as Signal &#8211; Open Whisper Systems. This can be safely called a secure messenger.<\/p>\n<h2><a href=\"https:\/\/threema.ch\/en\" target=\"_blank\" rel=\"nofollow noopener\">Threema<\/a><\/h2>\n<p>This app is little known but very interesting. If we were to judge by technical parameters, it is the single most secure messenger. It\u2019s a Swiss program that deletes messages immediately after they\u2019re read &#8211; they cannot be copied or screenshot. Moreover, to use Threema you don\u2019t need to add a telephone number or e-mail address &#8211; this messenger can be used anonymously. During registration, a random Threema ID is generated. It can be obtained by simply dragging your finger on the screen of your smartphone! The developers recommend adding new contacts in person by scanning a QR code from your friend\u2019s phone. Such contacts get the highest level of verification and security. There is only one flaw with this service &#8211; it\u2019s paid, and costs $2.50. But for such a level of security, perhaps it\u2019s okay to pay. The messenger also has many other advantages, such as its convenient and elegant interface and a large set of additional functions.<\/p>\n<h2>Here we present our rating of secure messengers in a table:<\/h2>\n<table style=\"height: 416px;\" width=\"1369\">\n<tbody>\n<tr>\n<td><\/td>\n<td><strong>End-to-end encryption<\/strong><\/td>\n<td><strong>Open Source<\/strong><\/td>\n<td><strong>Protected from service provider access<\/strong><\/td>\n<td><strong>Required personal data<\/strong><\/td>\n<td><strong>Deletion of messages after reading<\/strong><\/td>\n<\/tr>\n<tr>\n<td><strong>Facebook Messenger<\/strong><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #00ccff;\">Facebook account (e-mail, telephone number)<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Google Hangouts<\/strong><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #00ccff;\">Google account (e-mail, telephone number)<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Viber<\/strong><\/td>\n<td><span style=\"color: #00ccff;\">yes (being implemented)<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #00ccff;\">telephone number<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Skype<\/strong><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<td><span style=\"color: #00ccff;\">e-mail, telephone number<\/span><\/td>\n<td style=\"text-align: justify;\"><span style=\"color: #ff0000;\">no<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Telegram<\/strong><\/td>\n<td><span style=\"color: #00ccff;\">only in secret chats<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ccff;\">telephone number<\/span><\/td>\n<td><span style=\"color: #00ccff;\">only in secret chats<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>WhatsApp<\/strong><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ccff;\">telephone number &#8211; copies contacts from address book<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Signal<\/strong><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ccff;\">telephone number &#8211; copies contacts from address book<\/span><\/td>\n<td><span style=\"color: #ff0000;\">no<\/span><\/td>\n<\/tr>\n<tr>\n<td><strong>Threema<\/strong><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<td><span style=\"color: #00ff00;\">none<\/span><\/td>\n<td><span style=\"color: #00ff00;\">yes<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>As we see, the most popular messaging apps are not the most secure. And the safest are not particularly popular. Perhaps it\u2019s time to changes our habits? To start using the most secure messenger for iOS or Android, and convince your friends to do the same?<\/p>\n<span class=\"et_bloom_bottom_trigger\"><\/span>","protected":false},"excerpt":{"rendered":"<p>Last time we analyzed the question of what makes for secure messaging apps. Now we\u2019ll take a look at the level of security provided by several of today\u2019s popular message exchange programs. Facebook Messenger and Google Hangouts These apps are built into their respective social networks. For this reason alone, they\u2019re certainly not in the [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":4327,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[7,15],"tags":[202,118,230,291],"class_list":["post-1827","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-news","category-rd","tag-cybersecurity","tag-data-protection","tag-information-security","tag-messaging-apps"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/1827","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/comments?post=1827"}],"version-history":[{"count":3,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/1827\/revisions"}],"predecessor-version":[{"id":2824,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/posts\/1827\/revisions\/2824"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media\/4327"}],"wp:attachment":[{"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/media?parent=1827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/categories?post=1827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.protectimus.com\/blog\/wp-json\/wp\/v2\/tags?post=1827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}