Step-by-step guides and detailed information on secure messaging apps for Android, iOS, Windows, Mac and Linux.
Note: This website is no longer updated and is for historical reference purposes only!
Note: this page is best viewed on a desktop computer with a large screen!
This matrix shows many of the features of each app I have reviewed in detail. There is a lot of data to display so I have tried to make it possible for you to hide columns in the table and show only the columns you wish to compare. Javascript is required for this feature.
In the top right corner of the features table is a menu titled “Columns”. Click on this to show a menu where you can hide the columns you do not wish to see. If the table is still too large to view all at once after removing some columns you can also use your web browser’s zoom setting to shrink the entire page. A zoom setting of 80% may be enough to view the entire table.
To prevent some level of infomation overload, I have not included applications in this matrix that are not recommended for obvious reasons (cost, not E2EE, enterprise only) as listed on my Rejected Apps page.
Country Key:
5 Eyes Member |
9 Eyes Member |
14 Eyes Member |
Encryption Methods:
Shared Secret Exchange | Message Encryption Cipher | |
---|---|---|
Best: |
X3DH Curve25519, X3DH Curve448 ECDH25519, ECDHC brainpoolp256r1, ECDH P256, ECDH P521 (Diffie-Hellman Elliptical Curves) RSA 4096 PKI and higher |
XSalsa20, XChaCha20 AES-192, AES-256 |
Good: |
DH MODP1536 through MODP8192 (Diffie-Hellman Modular Exponential) RSA 2048 PKI |
Salsa20, ChaCha20 AES-128 |
Not Recommended: | RSA 1024 PKI | RC4+ |
Features Matrix:
Name | Infrastructure | Source Code | Platforms | Encryption Protocol | Shared Secret Exchange | Message Encryption Cipher | Country of Origin | Requires Phone# or Email | ID contains personal info | Locally Encrypted Data | Uses Perfect Forward Secrecy | Ephemeral Messages | Foolproof (All Messages Encrypted) | Has Contact Verification | Leaks Files | Android Trackers | Business Model | |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Adamant | Decentralized | open | iOS, Web | NaCl | ECDH25519 | Salsa20 | Republic of Ireland | No | No | Yes | No | No | Yes | No | ? | N/A | Per message cryptocurrency fee | |
Antox | P2P | open | Android | NaCl | ECDH25519 | XSalsa20 | No centralized servers | No | No | ? | Yes | No | Yes | No | Android | None | Free open source project | |
BabelNet | Decentralized | closed | Android, iOS, MacOS, Windows | Babelnet | DH MODP2048 | AES-128 | Czech Republic | No | No | Yes | Yes | Yes | Yes | Yes | No | Google Firebase Analytics | Enterprise version of the platform | |
Bat Messenger | Centralized | closed | Android, iOS | ? | ECDH25519 | AES-256 | Singapore | No | No | Yes | Yes | Yes | Yes | No | No | None | ||
Blackberry Messenger Enterprise | Centralized | closed | Android, iOS, MacOS, Windows | BlackBerry Certicom | ECDH P521 | AES-256 | Canada | No | Yes | Yes | No | Yes | Yes | No | Glympse, MixPanel | Subscriptions | ||
Blabber.im | Decentralized | open | Android | Signal | ECDH25519 | AES-128 | Germany | No | No | Yes | Yes | No | No (Unless OMEMO Encyption is set to Always) | Yes | Android | None | blabber.im is 100% self-contained, independent and a self-financed German community based in NRW. The servers are located in Germany. | |
Briar Project | P2P | open | Android (via Google Play, F-Droid repo or APK) | Bramble, SpongyCastle | ECDHC brainpoolp256r1 | AES-256 | None | No | No | Yes | Yes | Yes | Yes | Yes | No | None | Free open source project, Bitcoin donations, other funding | |
Brosix | Centralized | closed | Android, iOS, MacOS, Windows, Linux (many) | ? | ? | AES-256 | Bulgaria | No | ? | Yes | No | Yes | No | No | None | Enterprise version of the platform | ||
Confide | Centralized | closed | Android, iOS, MacOS, Windows | ? | ? | ? | USA | Phone or Email | N/A (messages deleted immediately) | No | Yes | Yes | No | No | Facebook Login, Facebook Share, Google CrashLytics, Google Firebase Analytics | Subscription plans for premium features or enterprise | ||
Conion (XMPP) | Decentralized | open | Android | Signal | ECDH25519 | AES-128 | No | No | Yes | Yes | No | No (Unless OMEMO Encyption is set to Always) | Yes | Android | None | |||
Conversations (XMPP) | Decentralized | open | Android | Signal | ECDH25519 | AES-128 | Germany | No | No | Yes | Yes | No | No (Unless OMEMO Encyption is set to Always) | Yes | Android | None | Funded through one time purchase of app and subscriptions to the conversations.im xmpp server | |
Crypho | Centralized | partialopen | Android, iOS, Mac, Windows, Web | ? | El-Gamal EC384 | AES-256 | Norway | Phone and Email | Yes | Yes | No | Yes | Yes | Android | Google Firebase Analytics | Enterprise version of the platform | ||
Crypviser | Centralized | closed | Android, iOS | CSMP | CVBlockchain | Salsa20 | Germany | No | No | Yes | ? | Yes | Yes | No | No | AppsFlyer, Flurry, Google CrashLytics, Google Firebase Analytics | CV Secure Business and CVCore SaaS enterprise subscriptions | |
Cwtch | Decentralized | open | Android, Windows, Linux | Tor hidden services/TLS | ECDH25519 | AES-128 | Canada | No | No | ? | ? | Yes | Yes | ? | ? Needs more testing | ? | Free open source project | |
Element (Matrix) | Decentralized | open | Android (on F-Droid), iOS, MacOS, Windows, Linux (Debian, Ubuntu), Web | Matrix | X3DH Curve25519 | AES-256 | UK | false | No | N/A (Android app is a web app) | Yes | No | No | Yes | No | None | Open source, Matrix.org funded through donations and investors | |
FortKnoxster | Centralized | closed | Android, iOS, Web | FortKnoxster | ECDH P521 | AES-256 | UK | Phone | No | ? | For mail yes, others ? | No | Yes | No | Android | AppsFlyer, Google CrashLytics, Google Firebase Analytics | Purchasing additional cloud storage, future enterprise platform | |
get2clouds | Centralized | closed | Android, iOS, Windows | ? | ? | AES-256 | UK | No | No | Yes/No | ? | Yes | No | No | Android | Facebook Analytics, Facebook Login, Facebook Places, Facebook Share | Enterprise version of the platform | |
Ginlo | Centralized | closed | Android, iOS | ? | ? | ? | Germany | Phone | Phone | Yes | No | Yes | Yes | Yes | No | None | Enterprise version of the platform | |
HoopMessenger | Centralized | closed | Android, iOS | ? | ? | AES-256 | Canada | Phone | No | Yes | Yes | Yes | No | No | Android | Google CrashLytics, Google Firebase Analytics | ? | |
Jami | P2P | open | Android, iOS, Linux, MacOS, Windows | GnuTLS | RSA 4096 PKI | AES-256 | Canada | No | No | Yes | Yes | No | Yes | No | MacOS | None | Open source, side project of Savoir-faire Linux | |
Kedr | Centralized | closed | Android, iOS | ? | ? | ? | Germany | No | No | Yes | ? | No | Yes | Yes | No | Matomo (Piwik), Googl Firebase Analytics | ? | |
Keybase | Centralized | partialopen | Android, iOS, MacOS, Windows, Linux (many) | NaCl | ECDH25519 | XSalsa20 | USA | No | Yes | Only for "exploding" messages | Yes | Yes | No | No | Google Firebase Analytics | Investors? | ||
Kontalk | Centralized | open | Android (on F-Droid), Java client | OpenPGP | ECDH P256 | AES-192 | None | Phone | Phone | No | Yes | No | Yes | Yes | Android | Google CrashLytics, Google Firebase Analytics | Free open source project, servers run by volunteers | |
LinkCast | P2P | closed | Android, iOS | ? | ECDH | AES-256 | Japan | Phone | No | Yes | Yes | Yes | Yes | No | Android | Google Analytics, Google CrashLytics, Google Firebase Analytics | Purchasing of coins and stickers in the app | |
Molly | Centralized | partialopen | Android | Signal | X3DH Curve25519 or Curve448 | AES-256 | USA | Phone | Phone | Yes | Yes | Yes | Yes | Yes | No | None | Free open source project supported by donations | |
MySudo | Centralized | closed | Android, iOS | Anonyome Cloud Platform | RSA 2048 PKI | AES-256 | USA | No | No | Yes | ? | Yes for MySudo contacts, No for SMS | Yes for MySudo contacts, No for SMS | No | No | N/A | Monthly subscription fee | |
OnionShare | Centralized | open | Linux, MacOS, Windows, Android | Tor hidden services/TLS | ECDH25519 | AES-128 or better | None | No | No | Yes | Yes | Yes | Yes | No | No | N/A | Free open source project | |
Patchwork | P2P | open | Linux (AppImage), MacOS, Windows | Scuttlebutt | ECDH25519 | Salsa20 | None | No | No | Yes | Yes | No | No | No | No | N/A | Free open source project | |
Pinngle | P2P | closed | Android, iOS | ? | ? | ? | Latvia | Phone | Phone | ? | ? | No | Yes | No | Android | Facebook Analytics, Facebook Login, Facebook Share, Google Analytics, Google CrashLytics, Google Firebase Analytics | Fee for calling out to phone numbers | |
Quicksy (XMPP) | Decentralized | open | Android | Signal | ECDH25519 | AES-128 | Germany | Phone | Phone | Yes | Yes | No | No (Unless OMEMO Encyption is set to Always) | Yes | Android | None | Funded through the the quicksy.im directory service | |
RetroShare | Decentralized | open | Windows, MacOS, Linux (many), FreeBSD | OpenPGP | RSA 2048 PKI | ? | None | No | No | Yes | Yes | No | Yes | No | No | N/A | Free open source project | |
Ricochet | P2P | open | Windows, MacOS, Linux (many) | Tor hidden services/TLS | ECDH25519 | AES-128 | No centralized servers | No | No | ? | Yes | Yes | Yes | No | No | N/A | Free open source project | |
SafeSwiss | Centralized | closed | Android, iOS, Windows | NaCl | ECDH25519 | XSalsa20 | Switzerland | No | No | Yes | Yes | Yes | Yes | Yes | No | Google CrashLytics, Google Firebase Analytics, HockeyApp | Digital communication security solutions | |
SafeText | Centralized | closed | Android, iOS, Web | ? | ? | ? | UK | No | No | ? | ? | Yes | Yes | No | No | Google CrashLytics | ? | |
SecEMS | Centralized | closed | Android, iOS (MacOS and Windows coming soon) | ? | ? | AES-256 | China | No | No | Yes | Yes | Yes | Yes | No | No | Baidu Location | Who knows, it's China | |
Sense Chat | Centralized | closed | Android, iOS | ? | ECDH P256 | ? | USA | No | No | Yes | No | No | Yes | No | ? | Branch, Google CrashLytics, Google Firebase Analytics, Instabug, OneSignal | EOS token fees? | |
Session Messenger | Decentralized | open | Android, iOS, MacOS, Windows, Linux | Session Protocol (using libsodium) | ECDH25519 | XSalsa20 | Australia | No | No | Yes | No | Yes | Yes | Yes | No | None | Loki Services | |
Signal | Centralized | partialopen | Android (Direct APK download), iOS, MacOS, Windows, Linux (Debian) | Signal | X3DH Curve25519 or Curve448 | AES-256 | USA | Phone | Phone | Yes | Yes | Yes | No | Yes | No | None | Free open source project supported by grants and donations | |
Silence | P2P | open | Android | Signal | ECDH25519 | AES-256 | No centralized servers | Phone | Phone | Yes | Yes | No | No | Yes | No | None | Free open source project, Bitcoin donations | |
Skred | P2P | closed | Android, iOS | WebRTC/TLS | ECDH | AES-256 | France | No | No | Yes | Yes | No | Yes | No | No | None | Operated by SKRED SAS with a capital of €1,387,000 | |
Snikket (XMPP) | Decentralized | open | Android, iOS | Signal | ECDH25519 | AES-128 | No | No | Yes | Yes | No | No (Unless OMEMO Encyption is set to Always) | Yes | Android | None | Donations, planned paid Snikket server hosting | ||
Status | P2P | open | Android, iOS, MacOS, Windows, Linux | Signal | ECDH P256 | AES-256 | Switzerland | No | No | Yes | Yes | No | Yes | Yes | No | Google Firebase Analytics | Self-funded, grants | |
StealthChat | P2P | closed | Android, iOS | OTR | ? | AES-? | USA | Phone | Phone | Yes | Yes | Yes | Yes | Yes | No | Google Analytics, Google Tag Manager | A project of Rockliffe software. | |
Surespot | Centralized | open | Android, iOS | Crypto++ | ECDH P521 | AES-256 | USA | No | No | Yes | No | Yes | Yes | No | Android | Google Analytics, Google Firebase Analytics, Google Tag Manager, uACRA | Free open source project, Bitcoin donations | |
Telegram | Centralized | partialopen | Android, iOS, Windows, MacOS, Web | MProto | DH MODP2048 | AES-256 | UK | Phone | Optional aliases | No | Yes | Yes | No | Yes | Android | Google Firebase Analytics, HockeyApp | Self funded by Pavel Durov | |
Threema | Centralized | partialopen | Android (Threema Shop), iOS, Web | NaCl | ECDH25519 | XSalsa20 | Switzerland | No | No | Yes | No | No | Yes | Yes | No | Mapbox | One time app purchase fee | |
Twicie | Centralized | closed | Android, iOS | ? | ? | ? | Canada | Phone or Email | No | ? | ? | Yes | ? | ? | ? | None | ? | |
TwinMe | P2P | closed | Android, iOS | WebRTC/TLS | ECDH | AES-256 | France | No | No | Yes | Yes | No | Yes | No | No | None | Pro version of the platform | |
Vanish Messenger | Centralized | closed | Android, iOS | Vanish | ? | ? | Canada | No | No | Yes | ? | No | Yes | No | No | Google CrashLytics, Google Firebase Analytics | ? | |
Vega | Centralized | closed | Android, iOS | ? | DH MODP1536 | AES-128 | Belgium | Phone | Phone | Yes | Yes | Yes | Yes | No | Android | Google CrashLytics, Google Firebase Analytics | Enterprise version of the platform | |
Viber | Centralized | closed | Android, iOS, MacOS, Windows, Linux | ? | ECDH25519 | Salsa20 | Japan | Phone | Phone | No | Yes | Yes | Yes | Yes | Android | Adjust, App Nexus, Apptimize, Braze, Google Ads, Google CrashLytics, Google DoubleClick, Google Firebase Analytics, MixPanel | VoIP calling plans | |
VIPole (Free version) | Centralized | closed | Android, iOS, MacOS, Windows, Linux | ? | RSA 3072 PKI | AES-256 | UK | Phone or Email | No | No | Yes | No | Yes | No | Android | Google CrashLytics, Google Firebase Analytics | Subscription plans for premium features | |
VIPole (Pro version) | Centralized | closed | Android, iOS, MacOS, Windows, Linux | ? | RSA 3072 PKI | AES-256 | UK | Phone or Email | No | Yes | Yes | Yes | Yes | No | Android | Google CrashLytics, Google Firebase Analytics | Enterprise version of the platform | |
WickrMe | Centralized | partialopen | Android, iOS, MacOS, Windows, Linux (Snap) | Wickr Messaging Protocol | ECDH P521 | AES-256 | USA | No | No | Yes | Yes | Yes | Yes | Yes | No | Bugsnag, Countly, Google Firebase Analytics | Enterprise version of the platform | |
Wire | Centralized | open | Android (Direct APK), iOS, MacOS, Windows, Linux (Ubuntu, Debian, AppImage), Web | NaCl | ECDH25519 | ChaCha20 | Switzerland | Phone or Email | No | Yes | Yes | Yes | Yes | Yes | No | Countly | Enterprise version of the platform | |
Zangi | P2P | closed | Android, iOS (MacOS, Windows and web coming soon) | ? | RSA 2048 PKI | RC4+ | USA | Phone | Phone | No | Yes | No | Yes | No | Android | Google Analytics, Google CrashLytics, Google Firebase Analytics | Enterprise messenger solutions | |
Zom (Matrix) | Decentralized | open | Android, iOS | Matrix Olm | X3DH Curve25519 | AES-256 | USA | No | No | Yes | Yes | No | Yes | Yes | No | None | ? |