--- id: 'messagerie' part: 1 order: 3 title: 'Encrypted messaging' ---

PART 02 路 FOUNDATIONS 路 馃煝

## Encrypted messaging The first move, the one that protects you fastest: leave WhatsApp, Messenger and Telegram for a genuinely encrypted (ideally open-source) messenger.
You leave You adopt Why
WhatsApp Signal Same simplicity, without Meta or metadata harvesting
Messenger Signal / SimpleX Messenger isn't E2EE by default and was scanned under Chat Control 1.0
Telegram Signal / SimpleX Telegram isn't end-to-end encrypted by default
馃煝 Beginner Replaces WhatsApp 馃嚭馃嚫 路 open-source An encrypted messenger for your texts, calls, video and groups. The direct replacement for WhatsApp, just as simple. End-to-end encryption by default, non-profit, an audited protocol that is the world standard. Almost no metadata kept, and the team has pledged to leave the EU rather than install scanning. Everyone, starting today. It's the first and most useful step. One catch: a phone number, which you can hide behind a username.
  1. Install from signal.org (App Store, Google Play, or the direct APK on Android).
  2. Confirm your number by SMS, then set a PIN.
  3. Settings > Privacy: create a username to hide your number, and turn on{' '} registration lock.
  4. Invite your contacts. On desktop, link the desktop app to your phone.
馃煛 Intermediate No identifier 馃實 路 open-source An encrypted messenger with no account, no number and no identifier. You connect by sharing a link or QR code. By design, even the servers can't know who talks to whom. It's currently the strongest option against metadata correlation. Pseudonymous accounts, sensitive contacts, high-risk. A bit younger than Signal, with a few rough edges.
  1. Install from simplex.chat (F-Droid, Google Play, App Store or APK).
  2. Pick a local display name (never your real name: it stays on your device).
  3. To add a contact, share a one-time invitation link or a QR code.
  4. Turn on the passcode lock, and (advanced) configure your own SMP servers.
馃煛 Intermediate No phone 馃實 路 open-source Signal-grade encryption, but with no phone number and onion routing. Your identity is a random "Session ID." Traffic goes through a decentralised network (Lokinet) that sharply reduces metadata. When a phone number is a liability. Smaller ecosystem, best kept for conversations that matter.
  1. Install from getsession.org (all platforms).
  2. "Create account" generates your Session ID and a recovery phrase.
  3. Write the recovery phrase on paper: it's the only key to your account.
  4. Share your Session ID (or QR) with your contacts.
馃敶 Advanced Offline / P2P Android 路 open-source A peer-to-peer messenger that works with no internet: over Bluetooth, Wi-Fi Direct or Tor. No server, so nothing to shut down or seize. Survives internet shutdowns and network censorship. Protests, disasters, remote areas, blackouts. Android only, and both people need the app.
  1. Install from briarproject.org or F-Droid (no iOS).
  2. Create a local account (nickname + password), stored only on the phone.
  3. Add a nearby contact by scanning their QR code, or remotely via a link.
  4. When the network is down, turn on Bluetooth: messages hop device to device.
馃敶 Advanced Bluetooth mesh 馃實 路 open-source Jack Dorsey's mesh messenger: nearby phones relay messages hop by hop, with no internet, server or account. End-to-end encryption (AES-256-GCM) and a "panic mode" that wipes everything with three taps on the logo. Protests and blackouts, alongside Briar. Use with caution.
Caution: unaudited

Its own repo warns it "has not received external security review." Great for resilience, but don't stake lives on it yet.

  1. Install from the App Store (iOS) or the APK/GitHub (Android).
  2. Open the app and pick a nickname. No account to create.
  3. Nearby devices auto-discover over Bluetooth.
  4. In danger, triple-tap the logo to wipe everything (panic mode).
馃敶 Advanced Hardened Signal Android 路 open-source A hardened build of Signal for Android, compatible with the same network. Database encrypted at rest, automatic locking, and a "FOSS" variant fully free of Google services. Advanced users, especially on GrapheneOS, with a high threat model. Android only.
  1. Add the Molly repo in F-Droid, or grab the APK from molly.im.
  2. Choose Molly-FOSS if you want zero Google dependencies.
  3. Register with your number (same network as Signal).
  4. Set a database password and automatic locking.
Against Chat Control

Prefer open-source apps outside the big US platforms, whose teams have publicly pledged to leave the EU rather than install client-side scanning (Signal has). Reminder: if the OS itself enforces scanning, the app can't help, hence section 12.