Web Messenger Security: Comparing 5 Services and Managing Sessions
Browsers, desktop apps and linked devices are not the same. Explore five services’ encryption boundaries and how to check sessions, extensions and downloads.
Field note
A READING COLLECTION / 05
Private messagingChoose with
your eyes open.
Private messenger guides: messaging without a phone number, encrypted chat comparisons, group privacy and practical security checklists.
Choosing a private messenger starts with the questions that matter to you: phone numbers, default encryption, groups, recovery, metadata and the devices you use.
This collection brings those questions together. Read scoped comparisons and practical checklists, then follow claims back to the relevant product documentation and security boundaries.
QUESTIONS TO EXPLORE
Can I message without a phone number?
What should I compare between secure messengers?
Which privacy trade-offs should I ask about?
Explore private messaging
34 STORIES
Does Group Encryption Stop Unwanted Members? Comparing 5 Messengers
Examine content encryption, membership control and identity verification separately: a documented comparison of Livara, Signal, WhatsApp, SimpleX and Element.
Field note
How to Evaluate an Open-Source Messenger: Hashes, Signatures and Audits
Understand the differences between open source, reproducible builds, APK hashes and independent audits: what each piece of evidence does and does not prove.
Field note
Encrypted Voice and Video Calls: Why Call Media Takes a Different Path Than Messages
Encrypted voice calls and encrypted video calls are not sealed by the same machinery that seals a chat message. Messages live in a store-and-forward world, so they are encrypted with a ratcheting protocol before they ever touch a server; live media must survive packet loss and latency budgets measur
Field note
Message Integrity: Can the Server Alter an Encrypted Chat?
Understand tampering, authorized edits and message replay. What does AES-GCM authenticate, and why is encryption neither immutable history nor legal evidence?
Field note
Google sign-in for messengers: privacy, permissions and recovery
What information does federated sign-in transfer? Explore OAuth versus OpenID Connect, account dependency risks and the limits of direct SRP login.
Field note
Passkey or SRP? Comparing login methods and trust boundaries
Passkeys and SRP both go beyond ordinary password transmission, but they are not the same. Compare phishing resistance, credential storage and recovery without exaggeration.
Field note
The Economics of Free Messengers: Assess Metadata and Revenue Separately
Free does not mean selling data. Learn how to assess messenger revenue models, privacy policies and metadata, alongside Livara’s actual limitations.
Field note
Android Overlay and Accessibility Attacks: A Defense Guide
Understand fake windows, tapjacking and accessibility abuse, along with the limits of FLAG_SECURE and how to review sensitive Android permissions.
Field note
File and photo encryption in 10 messengers: coverage and exceptions
Compare photo, file, and voice-message encryption in 10 messengers, including differences between groups, channels, backups, and linked devices.
Field note
What does a messenger server breach expose? Five architectures
A database leak differs from control of a live server. Compare five messaging architectures and the risks involving metadata, credentials, and backups.
Field note
SIM Swap attacks and messenger security: beyond SMS codes
How does unauthorized SIM swapping threaten SMS login? Understand the differences between SRP, message encryption, and account recovery, and ways to reduce risk.
Field note
Enterprise messaging security: trade secrets and post-quantum readiness
Encryption is only one layer of trade-secret protection. Explore an enterprise messaging checklist, long-term risks, and communication continuity testing.
Field note
Contact Privacy: Why Hashing Phone Numbers Is Not Enough
How does contact discovery work, and why does hashing a phone number not provide anonymity on its own? Examine permissions, transmitted data and important questions to ask a messenger.
Field note
Secure Messenger for Families: A 9-Question Checklist Before Installing
Before creating a family group, check chat security, photos, calls, recovery, and unknown messages. These nine questions turn claims into a practical test.
Field note
Messenger safety numbers: verifying keys and investigating change warnings
What does a safety number verify? Learn how to compare it with a contact, respond to key changes and distinguish manual verification from key transparency.
News
Chat Exports: How to Share a Conversation Without Oversharing
A chat export creates a separate copy. Learn how to share a useful excerpt without exposing unrelated messages, attachments or account details.
Field note
Sharing ID Documents in Chats: A Redaction Checklist
Before sending an ID photo or PDF, check the request, recipient, genuine redaction, hidden information and the exact final file.
Field note
Profile Photo and Username Privacy: What Strangers Can See
Check who can see your photo, find your account and send requests. Profile privacy depends on the messenger and its settings, not just encrypted messages.
Field note
Android Messenger Session Theft: Why an App Lock Is Not Enough
An app lock helps with casual access, but malware or remote control may abuse an unlocked messenger. Review Android permissions and respond from a trusted device.
News
What “Military-Grade Encryption” Really Tells You About a Messenger
Look beyond the label: algorithm choice, key custody, identity checks, backups and independent evidence determine what a messenger actually protects.
News
ML-KEM-768 for Messaging: FIPS 203, Hybrid Keys and Limits
What ML-KEM-768 does in a messenger, why a hybrid design also uses P-256, and which security questions FIPS 203 does not answer.
Guide
Searching Encrypted Chats: Local Indexes, Sync and Privacy
How can encrypted chats be searchable? Compare local indexes and encrypted-search designs, troubleshoot missing history and check what a server may learn.
Field note
Crypto Agility in Messaging: Safe Protocol Upgrades
Learn how crypto agility, versioning and downgrade protection help messaging protocols evolve, and what evidence makes an encryption upgrade credible.
Field note
10 Messaging Apps: Encryption Defaults and Exceptions
Check ten messaging apps by chat type, encrypted-room settings, backups and public spaces. A practical comparison of defaults and their exceptions.
Comparison
AES-GCM Nonces, HKDF and Replay Attacks in Messaging
Nonce uniqueness, authentication and replay protection solve different problems. Learn what AES-GCM, HKDF and messaging protocols each provide.
Field note
Encrypted Attachments: How Keys and Cloud Files Stay Separate
Learn how a messenger encrypts files before upload, delivers attachment keys, verifies downloads and handles the copies encryption cannot take back.
Comparison
Harvest Now, Decrypt Later: What It Means for Private Messaging
A practical explanation of stored ciphertext, future quantum risk, hybrid key establishment, and what post-quantum messaging cannot protect.
Field note
Encrypted Group Admin Controls: Membership, History and Removal
Compare group entry, old-message access and removal across six messengers, then use a harmless rehearsal to test the settings your group actually relies on.
Comparison
Which Messaging App Collects Less Data? How to Read Privacy Labels
Compare messaging-app disclosures without confusing privacy labels, contact permissions, encryption claims and independent audits.
Comparison
How to Verify an Encrypted Chat: Safety Numbers and QR Codes
Check contact keys, compare safety numbers safely, understand automatic verification and respond to unexpected encryption-key changes.
Field note
Disappearing Messages: Timer Rules, Remaining Copies and Safer Use
Disappearing messages reduce retained history, not recipient control. Learn what survives, how timers differ and when a durable record is needed.
Field note
Lost or Stolen Phone: How to Protect Private Messages
Lock the missing phone, secure recovery accounts, revoke supported sessions and understand what remote erasure cannot undo.
Field note
How to Back Up Encrypted Chats Without Exposing Their Contents
Compare encrypted backups, local exports and identity recovery, then verify the restore path before deleting your working copy.
Field note