Is your instant messaging app private enough?

Instant messaging apps bring our communication to another dimension, and the fearful bubble with three dots might as well become a symbol of anxiety.

Back in prehistoric times, when dinosaurs roamed the realm, SMS messaging ruled the nations. It relied on 2G cellular data, and, imagine: people had a limited number of messages they could send. Obviously, they were more cautious about getting the best of those pre-purchased numbers. Now, 4G, 5G, and Wi-Fi connections dominate the conversation arena, and we can send 100 messages containing nothing but emojis.

Sometimes, I hastily type “K” to my friends as if I’m playing an opposite version of Scrabble. The fewer letters, the more chance of winning.

But can anyone, besides my slightly neglected friend, read that short “K” I just send? Can, perhaps, someone intercept my connection, or can the ISP be the third party joining my not-that-exciting conversation? What about the government: could it gain access to transcripts and cringe at my occasionally tasteless communication style? Let’s find out, shall we?

Are privacy and messaging comparable partners?

Innately, SMS messages are messy. The technology has persisted for decades, alongside its antique and susceptible nature. Yes, mobile service providers and authorities have the right to read your messages to some extent. Even if their interception is limited, metadata is still typically viewable.

Needless to say, users rushed to explore opportunities for more independent communication. End-to-end encryption was soon deemed the safest fit. But not all instant messaging apps offer the same shelter-like conditions. Some are equally susceptible to third-party interception when used without proper customization.

For instance, Facebook Messenger, Skype, or Snapchat impose less than favorable privacy conditions. So, choosing a medium to traverse all your messages is not at all trivial. Furthermore, the selection process exposes conflicting opinions and the mere fact that complete anonymity does not exist. That would require abandoning the digital space altogether. Since we are unwilling to do so, we settle for the next best thing: end-to-end encryption with just a touch of intrusion.

What to look for in a messaging app?

When navigating through the endless sea of apps, we need some criteria for cross-checking their relation to privacy. These seem to do the trick:

• End-to-end encryption. With little negotiation necessary, this feature should be a priority. The conditions in which this key feature exist are also critical. Is it opt-in, or does it activate by default? It could seem insignificant, but the actual implementation of E2EE is relevant. So, don’t be easily lured by promises of this attribute.
• All in one: video, text, voice. You might care about privacy on your messaging app, but you still want all standard advantages.
• Open-source code for all to see. Having the source code available online allows independent programmers or white hat hackers to poke around. As a result, more vulnerabilities might be resolved due to external contributions.
• Self-destructing messages. Does the app offer the option to send temporary messages that will automatically disappear from the chat? It is not exactly a must-have, but it could jazz up your communication.
• Reliance on tech goliaths. Some messaging apps belong to the inner circle, the crème de la crème of the tech industry. Striving for more independence could encourage you to opt for an app that strays away from such relationships.
• Reviews and general opinions. When choosing an app, you should visit its review section. It can reveal a lot, especially if repetitive issues haunt the majority of users.

The best players in the field

All aboard the private messaging express! Which of them pleasantly surprise, disappoint, or thrive?

Signal

Signal checks most of the boxes. It encrypts communications with E2EE by default, and all keys are stored locally (on your device). When it comes to general use features, it pleases the majority of communication needs. It supports text messages, file-sharing, GIFs, voice notes, and one-to-one voice and video calls.

As a cherry on top, you can set timers to send temporary messages. One of the newest additions to Signal is the face-blurring feature. It allows you to pixelate your face, concealing identities in the process. The co-founder Moxie Marlinspike described this feature as a valuable tool in the light of protests and police brutality. However, experts emphasize that reversing blurred images does not require highly technical skills. Hence, be wary of the fact that someone could de-anonymize your picture.

Last remarks about Signal include its open-source code and an ad-free experience. It sounds like smooth sailing to me!

WhatsApp

WhatsApp plays one of the leading roles in the instant messaging spectacle. It offers end-to-end encryption by default and a range of useful features. As reflected by its stable position in the market, the app is here to stay.

However, privacy advocates began doubting its integrity after Facebook acquired WhatsApp in 2014. After Jan Koum, the co-founder of WhatsApp, left the project due to conflicts with Facebook, the internet soon turned to conspiracies. Allegedly, the disagreements emerged due to privacy concerns and the vision for WhatsApp. One of the questionable features in the books are ads via the app.

The initial plan was to incorporate ads into users’ conversations. When that idea got the boot, Facebook returned to the drawing board. The rumors around the web indicate that WhatsApp could add a new feature: WhatsApp Status. Basically, it is the same thing as stories on Facebook or Instagram. By reviewing multiple stories, you are bound to see several brief ads. The same fate could befall on WhatsApp, and Facebook seems to be keen on the idea of incorporating personalized ads.

Wire

Next comes Wire. The app follows the same default E2EE routine for all communications, including messages, voice/video calls, and file-sharing. Wire also supports group collaboration, allowing group calling up to ten members (four for video calls).

Now, for the downsides. Wire does store users’ metadata in plaintext, meaning it knows who you communicate with. While this was a relatively minor setback, users noticed a shift when the US company became Wire’s owner. The delayed transparency and overall change questioned Wire’s integrity. Wire retaliated with strong claims to be just as secure and private, but even long-term users doubt these statements. Additionally, Wire encouraged people to examine their source-code for clarity.

Wickr Me

Wickr is yet another addition to the E2EE party. It builds quite a strong case: default encryption, self-destructing messages, and open-source code. Recently, Wickr (together with Signal) was labeled as a top-notch private collaboration service by the NSA. So, it is more than suitable to deal with your day-to-day communications. In general, Wickr Me relies solely on consumers, while other versions embark on the journey to serve corporate settings. Surprisingly, the responses and overall opinions on Wickr services seem anything but controversial. With no dramatic clashes, it is one of the least scandalous apps available.