Back to Blog Read Part 1: Private Messaging Apps

Choosing a Messaging App: Threat Models and Practical Tips

Other Privacy-Focused Options

Beyond the mainstream apps, several alternatives offer unique privacy features worth considering:

Element (Matrix)

Element is built on the Matrix protocol, an open, decentralized communication standard. Key features include:

  • Decentralized architecture - No single company controls the network; anyone can run a Matrix server
  • End-to-end encryption via the Olm/Megolm protocol
  • Bridges to other platforms - Can connect with Slack, Discord, IRC, and other networks
  • Self-hosting option - Run your own server for full control over your data

Session

Session takes a unique approach to privacy by removing the need for phone numbers or email addresses to sign up:

  • No phone number required - Sign up with just a Session ID
  • Onion routing - Messages are routed through a decentralized network similar to Tor
  • No central servers - Uses a decentralized network of community-run nodes
  • Open source and independently audited

Threema

Threema is a paid messaging app from Switzerland with a strong focus on privacy:

  • No phone number or email required - Can be used completely anonymously
  • Swiss-based - Subject to strong Swiss privacy laws
  • End-to-end encryption for all communication by default
  • Fully open source and regularly audited

Understanding Your Threat Model

The "best" messaging app depends on your specific threat model—who or what you're trying to protect against:

Choose Based on Your Threat Model

  • Casual privacy (protecting from advertisers and data brokers) - WhatsApp or iMessage may be sufficient
  • Moderate privacy (protecting from corporations and general surveillance) - Signal is the recommended choice
  • High privacy (protecting from targeted surveillance) - Session or Element with self-hosted server
  • Maximum anonymity (protecting identity completely) - Session, as it requires no identifying information

Practical Tips for Messaging Privacy

Regardless of which app you choose, these practices will improve your messaging security:

  1. Enable disappearing messages where available to reduce your digital footprint
  2. Verify contacts using safety numbers or QR codes when your app supports it
  3. Keep your app updated to get the latest security patches
  4. Lock your app with a PIN, password, or biometric if the option is available
  5. Be cautious with cloud backups - Chat backups can undermine end-to-end encryption if not encrypted themselves
  6. Review app permissions - Limit access to contacts, location, and other sensitive data
  7. Use a strong device lock - The best encryption in the world is useless if someone can unlock your phone

The Takeaway

No messaging app is perfect, but some are significantly better than others when it comes to privacy. Signal remains the top recommendation for most users who want strong privacy without sacrificing usability. For those with higher security needs, Element and Session offer additional protections.

Remember that privacy is not just about the app you choose—it's also about how you use it. Even the most secure messaging app can't protect you if you share sensitive information carelessly or don't secure your device properly.

The most important step is simply to start being more intentional about your messaging privacy. Choose an app that matches your threat model, configure it properly, and encourage your contacts to do the same.

Share this article

Related Articles

Which Messaging App Should You Use If You Actually Want Privacy?

Not all messaging apps are created equal when it comes to privacy. While many advertise encryption, the way they implement it varies widely...

Read More →

What's the Difference Between All These 'Encryptions'?

Encryption is everywhere—from secure websites to encrypted email—but not all encryption is the same...

Read More →

Two-Factor Authentication: What It Is and Why You Should Turn It On Today

Two-Factor Authentication (2FA) is one of the most effective defenses against unauthorized account access...

Read More →