Best private messengers with end-to-end encryption. Top apps in 2026

The best private messengers 2026 protect conversations with end-to-end encryption, but not every popular app is genuinely private. Many services store messages on a server in plaintext: the company that owns the service can read them, hand them over under a warrant, or lose them in a data breach. Private messengers do not.

There is a large grey area between these two categories, where the marketing says “encrypted” but the reality depends on the details. Below, we look at which apps are actually private in 2026, which only pretend to be, and which one to choose for a specific task.

What a “private messenger” really means

When marketing materials say “encrypted”, they usually mean one of two things. The first is transport encryption (TLS): the data is protected between your device and the server, but the server itself can read it in plaintext. The second is end-to-end encryption (E2EE): only you and the person you are talking to hold the keys, while the server sees an encrypted message that it cannot decrypt.

The difference is significant. In the first case, the company can see your entire conversation: it can hand it over in response to a court request, read it itself, or lose it in a breach. In the second case, even the developer cannot access it. Standard Telegram chats use the first model. Signal, WhatsApp, and iMessage use the second, but with major caveats that we discuss below. There have been cases where conversations from these “protected” apps became evidence in court.

E2EE alone does not solve every problem. Even when the content cannot be read, metadata remains: who contacted whom, at what time, how often, from which IP addresses, which phone numbers are involved, who is in the contact list, how long a call lasted, and when a device was online. For many investigations, that is enough.

The clearest example is the case of Natalie Edwards, a former US Treasury employee. In 2018, she used WhatsApp to communicate with a BuzzFeed journalist, assuming that E2EE would protect her. She was prosecuted not on the basis of message content — the FBI did not obtain it — but on metadata. WhatsApp provided a list showing who communicated with whom, when, and how often. That was enough for a conviction. An internal FBI document published later showed that after a pen register is installed, WhatsApp can provide metadata in near real time, every 15 minutes.

Push notifications are a separate issue. When a message arrives on a phone, iOS and Android receive the push through Apple or Google servers. The content is encrypted, but the fact of delivery, the time, and the app name pass through infrastructure that Apple and Google can log and disclose under a warrant. Senator Ron Wyden publicly confirmed in 2023 that governments had already made such requests. Signal works around this by not putting message content in the push: Apple or Google servers only see a wake-up signal, while the app downloads and decrypts the message locally. WhatsApp and Telegram do not work this way.

Identification is another issue. When registration requires a phone number, anonymity disappears. SIM swaps, telecom database leaks, and social engineering through a phone number can make an account vulnerable regardless of its encryption.

There is also a historical point. In 2013, Edward Snowden leaked documents about PRISM, a program under which the NSA obtained data from major technology companies through requests. The official partners named in the documents included Google, Apple, Facebook, Microsoft, and Yahoo. This means that Apple (iMessage), Google, and Facebook (Messenger) were part of a mass-surveillance program as companies. WhatsApp was not part of PRISM because Facebook only bought it in 2014. Whether that cooperation continues today is an open question, but the historical fact remains. Most of the private messengers in our list did not yet exist at the time — Signal, SimpleX, Session, and Wire — while Threema had only just launched. None of them appear in the PRISM documents.

What to look for when choosing an app

We evaluated each app using seven criteria:

1. Advertising, trackers, and monetization. Whether the service profits from your data or uses it for advertising.
2. Company jurisdiction. Five Eyes countries — the United States, the United Kingdom, Canada, Australia, and New Zealand — are significantly worse for privacy than Switzerland or a decentralized network with no specific home country.
3. Developer and company history. Funding sources, public incidents, co-founders with a record of working with governments, and references in the Snowden documents.
4. Open-source code and independent audits. Without public source code, it is impossible to verify what an app really does. Reproducible builds also matter: they make it possible to confirm that the binary in the App Store matches the published code.
5. Metadata. What the app collects and whether that data is encrypted. Who contacted whom and when is a separate category of information that standard E2EE does not protect. Some apps — Signal, Threema, and SimpleX — encrypt metadata as well. Most do not.
6. Registration. Whether creating an account requires a phone number or email address.
7. E2EE by default. Whether end-to-end encryption is enabled automatically rather than being an option users must activate manually.

The last point is the most important. Almost nobody will use a feature that has to be enabled manually for every contact.

For a deeper comparison across all these parameters, we recommend the public table on securemessagingapps.com, where each app is assessed against more than 40 criteria. Below, we use its data alongside our own observations.

Why Telegram, WhatsApp, iMessage, and other mainstream apps fall short

We will start with the apps most people already use. The problem is that privacy is either absent or comes with so many caveats that very little remains.

Telegram

Developer: Telegram FZ LLC (BVI, UAE).
Infrastructure: United States (Miami), Netherlands (Amsterdam), Singapore.
Platforms: iOS, Android, Windows, macOS, Linux, Web.
Website: telegram.org

A common misconception is that Telegram is private by default. It is not. Standard chats do not use E2EE at all. They are cloud chats, encrypted only in transit between the client and the server, while the server can read them.

Telegram offers E2EE only through Secret Chats. This is a separate mode that must be enabled manually for every contact. It works only one-to-one, does not sync between devices, and does not work in groups. Even in Secret Chats, Perfect Forward Secrecy is implemented weakly: session keys are refreshed after 100 messages or one week, rather than for every message as in Signal. In our view, few Telegram users even know that Secret Chats exist.

Voice and video calls in Telegram are end-to-end encrypted. This is probably the only clearly private part of the platform. Group calls with three or more participants, however, do not use E2EE.

In August 2024, Pavel Durov was arrested in France on allegations related to criminal activity and insufficient platform moderation. In September 2024, Telegram changed its privacy policy: it now hands IP addresses and phone numbers to law enforcement in response to valid legal requests. Before that, the company had spent years claiming that it did not disclose anything. France lifted Durov’s travel restrictions on 13 November 2025 after a year of judicial supervision, but the criminal case continues.

Telegram is a convenient tool for reading channels, using bots, and joining large public groups. That convenience is exactly what creates confusion: the app is so pleasant to use that people automatically transfer trust in the interface to trust in the service itself. Private matters should not be entrusted to Telegram, regardless of how comfortable it feels.

Audits: MTProto is public, but the academic community has reviewed it far less extensively than other protocols. In 2022, Albrecht and co-authors published “Four Attacks and a Proof for Telegram”, raising concerns. Controversies: the CEO’s arrest, an ongoing criminal investigation, and a change in the data-disclosure policy.

WhatsApp

Developer: WhatsApp LLC (Meta), United States.
Platforms: iOS, Android, Windows, macOS, Web.
Website: whatsapp.com

Meta uses Signal Protocol for E2EE. That is a fact, and the cryptography is sound. Voice and video calls also use E2EE. But there are three major caveats.

First: metadata. Meta collects and analyzes who you communicate with, when, how often, from which location, and from which device. It cannot read the content, but it can see your full contact graph. This is a key data source for advertising across Meta products. Unlike Signal, WhatsApp does not encrypt metadata.

Second: backups. By default, WhatsApp stores chat backups in Google Drive or iCloud without end-to-end encryption. Content protected by E2EE during delivery can later sit in the cloud in plaintext. Google, Apple, Meta itself, and anyone who gains control of the cloud account may be able to access it. Password-protected E2EE backups exist, but they are disabled by default.

Third: history. In 2013, WhatsApp was still independent and did not appear in the PRISM documents. But Meta — Facebook at the time — bought it in 2014 and was named as an official NSA partner in the Snowden documents. Today, WhatsApp data lives within the Meta ecosystem.

There are real cases involving arrests. The Edwards case mentioned above is a classic example of WhatsApp metadata becoming evidence in court. In 2019, NSO Group hackers targeted 1,400 accounts through a zero-click Pegasus vulnerability. In 2025, Meta won a court case and received $167 million in damages. The existence of exploits still shows that E2EE is not a complete solution.

Audits: Signal Protocol has been academically verified. The WhatsApp client is closed-source, as is the backend. There are no reproducible builds.

iMessage

Developer: Apple Inc., United States.
Platforms: iOS, macOS, iPadOS, watchOS.
Website: apple.com/ios/messages

Between two iPhones — or an iPhone and a Mac — E2EE works well. Apple cannot read the content. FaceTime calls are also end-to-end encrypted. In 2024, Apple added post-quantum encryption through the PQ3 protocol, making it one of the first major companies to take this step. But several problems remain.

The first problem is cross-platform communication. As soon as the other person uses Android, iMessage falls back to regular SMS or RCS, and there is no end-to-end encryption between iPhone and Android.

The second is Advanced Data Protection. This option extends E2EE to iCloud backups. Before ADP, backups were encrypted with a key held by Apple, which meant that the company could disclose them under a warrant. In 2025, the UK government used the Investigatory Powers Act to demand that Apple create a backdoor to ADP. In February 2025, Apple chose to withdraw ADP for UK users rather than build a backdoor. This is an important precedent: the company chose to discontinue a service instead of compromising encryption. iMessage and FaceTime remain end-to-end encrypted everywhere, including the UK.

The third problem is metadata. Apple does not encrypt it. The FBI can obtain 25 days of iMessage lookup logs — attempts to establish contact — even when no conversation takes place. If your messages are stored in an iCloud backup without ADP, Apple can disclose them under a warrant together with the key.

The fourth is history. Apple, like Google, Facebook, and Microsoft, appears in the Snowden documents as an NSA partner.

Audits: PQ3 has been formally verified by Linker, Sasse, and Basin at ETH Zürich in 2025 using TAMARIN. The iMessage client is closed-source, and there are no reproducible builds. Controversies: the UK ADP dispute and a series of zero-click Pegasus exploits against iOS.

Viber

Developer: Rakuten, Japan (company in Luxembourg, server infrastructure in the United States).
Platforms: iOS, Android, Windows, macOS, Linux.
Website: viber.com

Viber uses E2EE by default for personal chats, voice calls, and video calls. The problems begin after that. Its protocol is proprietary rather than based on Signal Protocol, its code is closed-source, and its owner is a Japanese conglomerate that has historically collected large volumes of metadata: phone numbers, contact lists — including people who do not use Viber at all — and social-media activity.

Viber logs timestamps and IP addresses and does not encrypt metadata. There are no reproducible builds, the code is closed-source, and there are no widely visible independent audits on the level of Signal or Threema.

Facebook Messenger and Instagram Chats

Developer: Meta Platforms, United States.
Platforms: iOS, Android, Web.
Websites: messenger.com, instagram.com

Meta enabled E2EE by default in Messenger at the end of 2023. Instagram went in the opposite direction: in May 2026, Meta removed the end-to-end encryption option for direct messages, saying that almost nobody used it. Messenger technically has encryption. But it is still the same Meta with the same business model: metadata collection for cross-platform advertising. Facebook, Instagram, and Messenger all connect to the same database, and Meta uses your contact graph for targeting across its products.

There are additional concerns: metadata is not encrypted, Facebook historically appears as an NSA partner in PRISM, and the app monetizes personal data. If a message is reported as “abusive”, Meta can read it through client-side reporting. It is not suitable for private conversations.

Google Messages

Developer: Google, United States.
Platforms: Android.
Website: messages.google.com

E2EE works only for RCS conversations between two Google Messages users on Android. If one participant uses an iPhone, the conversation falls back to SMS/MMS without encryption. RCS groups are encrypted, but not every device supports the feature.

The problem is the same as with iMessage: encryption only works inside one ecosystem. Google is an advertising business under Five Eyes jurisdiction and appears in the PRISM documents. Metadata is not encrypted, and it feeds the company’s advertising systems.

X Chats (Twitter)

Developer: X Corp (a subsidiary of xAI Holdings Corp., owned by Elon Musk), United States.
Platforms: iOS, Android, Web.
Website: chat.x.com

X launched private Chats with an E2EE promise, but there is a major technical issue: encryption keys are stored on X servers. In technical terms, this means that X can read messages. The model described by the company — Juicebox, threshold OPRF with secret-sharing — still leaves the company with access to the keys. There is no Perfect Forward Secrecy: if a key is compromised later, old messages can also be decrypted. The code is closed-source, metadata is not encrypted, and IP addresses and timestamps are logged.

We do not recommend X Chats as a private channel in 2026. The technical implementation is too weak, and the conflicts of interest created by the platform’s advertising model and dependence on a single person are too significant.

Best private messengers 2026

The apps below are ordered from the most mainstream to the most niche. The first five fully support iOS and Android. Element and Briar have specific limitations that we explain in their sections.

Signal

Developer: Signal Foundation, United States (501(c)(3) nonprofit).
Platforms: iOS, Android, Windows, macOS, Linux.
Website: signal.org

Signal has been treated as the benchmark among private messengers for years. It is free, run by a nonprofit foundation, open-source, independently audited, and collects minimal metadata. Signal Protocol is so respected that WhatsApp, Google Messages, and several other major services use the same encryption algorithm.

In 2023, Signal introduced the PQXDH protocol, a post-quantum version of X3DH designed to protect against “harvest now, decrypt later” attacks involving future quantum computers. Cryptographic primitives: Curve25519, Kyber-1024, AES-256, HMAC-SHA256/512. Among mainstream messengers, Signal was the first to take this step. Apple followed one year later with PQ3 in 2024.

Signal voice and video calls use Signal Protocol over WebRTC and are end-to-end encrypted. Group calls with up to 40 participants also use E2EE; Signal developed its own SFU for this purpose. It is one of the strongest call-encryption implementations on the market.

A major advantage is reproducible builds for Android: anyone can build the app from the public source code and verify that the binary in the Play Store matches the published code. Element X, Telegram, and Threema offer the same option, also only for Android. Almost nobody provides reproducible builds for iOS because of limitations imposed by the Apple platform itself.

Signal Foundation was established in 2018 by Moxie Marlinspike, the developer of Signal Protocol, and Brian Acton, a former WhatsApp co-founder who left Meta after a privacy dispute and invested $50 million in Signal. The current president is Meredith Whittaker. Before joining Signal, she worked at Google and left after protests against Project Maven, Google’s military contract with the Pentagon. The biographical detail is telling: she fought for the right not to cooperate with intelligence agencies.

Registration requires a phone number. This is Signal’s only major compromise. Since 2024, the app has supported usernames: you can create a unique handle, such as dmytro.42, and share it with contacts instead of your number. The number remains tied to the account but is not shown to other people. The “Nobody” option in privacy settings fully hides you from searches by phone number.

Audits: Signal Protocol has undergone dozens of independent reviews, including NCC Group in November 2016, Least Authority in May 2022, and BSI/MGM Security Partners in August 2024. There have been no major scandals. Signal publicly opposes legislative initiatives that would break encryption, including EU Chat Control and the UK Investigatory Powers Act. Funding: donations and Acton’s initial grant.

Threema

Developer: Threema GmbH, Switzerland.
Platforms: iOS, Android, HarmonyOS, Windows, macOS, Linux, Web.
Website: threema.com

A paid Swiss app. It costs around €6 as a one-time purchase in the App Store or Play Store, with no further payments required. Teams can use Threema Work, starting at €3 per user per month.

The paid model is a benefit. When a product is paid, you are the customer rather than the product. Threema does not sell advertising, does not collect metadata for monetization, and has no incentive to accumulate data about you. Its servers are in Switzerland, the jurisdiction is outside Five Eyes and Fourteen Eyes, and the service is GDPR-compliant.

Registration is fully anonymous. No phone number or email address is required or even recommended. You receive an eight-character Threema ID, and that is all. You can optionally link a phone number or email address so that contacts can find you more easily.

One-to-one voice and video calls are end-to-end encrypted using NaCl. Group calls are also E2EE. Cryptographic primitives: Curve25519, XSalsa20, Poly1305. In 2023, Threema added the Ibex protocol on top of the standard protocol to provide Perfect Forward Secrecy.

The company was founded in 2012 by Manuel Kasper. In September 2024, all three co-founders — including CEO Martin Blatter — left the company, and Robin Simon became the new CEO. Since 2020, a majority stake in Threema had been held by Afinum Management, a German-Swiss private-equity fund. In January 2026, Afinum sold the company to another PE fund, Comitis Capital GmbH. This is the second consecutive change of investor-owner. For highly cautious users, it is a reason to keep watching the privacy policy.

Audits: Cure53 (2020), ETH Zürich (2022, serious vulnerabilities found in the custom protocol and fixed in 2022–2023), Ibex formal proof (2023), Cure53 Desktop (2024). Reproducible builds are available only for Android.

Wire

Developer: Wire Swiss GmbH (Switzerland), with a separate legal entity in Germany.
Infrastructure: servers in Germany and Ireland (AWS).
Platforms: iOS, Android, Windows, macOS, Linux, Web.
Website: wire.com

Wire is a business-oriented app positioned as a “secure alternative to Slack or Teams”. Securemessagingapps.com places it among five solid options. E2EE is enabled by default. The app uses its own Proteus protocol, a Signal Protocol fork, and Messaging Layer Security (MLS) for group chats. MLS is a new IETF standard, and Wire was one of the first services to implement it.

Voice and video calls use E2EE, including large group calls with up to 100 participants through Wire’s own SFU. For corporate use, this is one of the strongest offerings on the market.

Key advantages: Swiss jurisdiction outside Five Eyes, a self-hosted enterprise option through Wire on-prem, open-source clients and servers, and federation between separate Wire instances.

Trade-offs. Registration requires an email address or phone number. Wire logs some metadata — rated “Some” by securemessagingapps.com — and encrypts metadata only partially. Its AWS infrastructure raises an open question about protection against US intelligence agencies even though the company itself is based in Switzerland.

The company was founded in 2012 by Janus Friis, a Skype co-founder. Investors include Iconical, Zeta Holdings Luxembourg, and Morpheus Ventures. Wire is a commercial company: the basic version is free, while business plans start at €5 per user per month.

Audits: Kudelski Security + X41 D-Sec (February 2017), X41 D-Sec (March 2018). The latest audits are somewhat dated, which is one drawback. There are no reproducible builds.

SimpleX Chat

Developer: SimpleX Chat Ltd, United Kingdom.
Platforms: iOS, Android, Windows, macOS, Linux.
Website: simplex.chat

The most technically interesting candidate on the list. SimpleX uses no user IDs at all: no phone number, no email address, no random number, no UUID. Nothing. A connection with a contact is established through a one-time link or QR code. Each pair of participants then gets its own message queue on a relay server, and the server does not even know that those messages are linked to your account.

Encryption has been post-quantum-resistant since 2024. Cryptographic primitives: Curve25519, sntrup761 (post-quantum), XSalsa20, Poly1305. The foundation is Signal’s double ratchet, with an additional transport-encryption layer between the client and the relay server. The current stable release, version 6.4, arrived in July 2025; the latest point release, 6.4.11, arrived in March 2026. Recent updates improved the connection flow, added group “knocking”, moderation, and mobile-traffic optimizations.

One-to-one voice and video calls are end-to-end encrypted. Group calls are not available yet, although they remain a development direction.

SimpleX was founded by Evgeny Poberezkin in 2021. In July 2022, it raised a $370K pre-seed round, including funding from Village Global. In August 2024, Jack Dorsey and Asymmetric Capital invested $1.3 million in a pre-seed round. In July 2024, Trail of Bits conducted a public cryptography audit and confirmed the design.

Who it is for: users who need maximum privacy and are willing to sacrifice some convenience. This is one of the strongest options on the market for journalists, activists, and people facing elevated risks.

Trade-offs. Push notifications can sometimes arrive a few minutes late. This is the price of avoiding a centralized server. The initial UX can be confusing: adding a contact through a QR code feels unfamiliar to users accustomed to searching by phone number. Groups work, but they can lag when they exceed 500 participants.

Audits: Trail of Bits (October 2022 — implementation, July 2024 — cryptography, design review in October 2024). There have been no scandals. The clients and server are open-source, and reproducible builds are available for Android.

Session

Developer: Session Technology Foundation, Switzerland (formerly Oxen Privacy Tech Foundation, Australia; moved in 2024).
Platforms: iOS, Android, Windows, macOS, Linux.
Website: getsession.org

Session is a Signal Protocol fork running on a decentralized network. There is no phone number; the app uses a random 66-character Account ID. Messages are routed through an onion network of approximately 1,500 nodes worldwide. Cryptographic primitives: X25519, XSalsa20, Poly1305.

There are two important caveats that many reviews overlook.

First: there is no PFS. The current Session Protocol lacks Perfect Forward Secrecy. If someone compromises your long-term key, they can decrypt older messages as well. Signal, Threema, Wire, and SimpleX address this issue. In December 2025, Session announced Protocol V2, which restores PFS and adds post-quantum cryptography using ML-KEM, the same algorithm used by Signal and Apple. As of April 2026, the protocol remains in the design stage, with a detailed specification expected during 2026.

Second: there has been no recent independent audit. The last public audit was conducted by Quarkslab in April 2021. During the following five years, the project migrated to Arbitrum, launched the SESH token, and moved to Switzerland without a repeat audit. For a cryptographic product, that is a significant drawback.

Voice calls have been available since 2024 through onion routing with E2EE. Video calls are not available in the stable version as of April 2026; development is planned for the Pro tier.

The project was founded in Australia in 2018 by Chris McCabe as the Oxen Privacy Tech Foundation. In 2024, pressure from Australian privacy legislation led to the creation of the Swiss Session Technology Foundation as the project’s new steward. In the same year, Session migrated to Arbitrum, launched the ERC-20 SESH token for node staking, and introduced Session Pro, a paid subscription with larger groups of up to 300 participants. The basic version remains free.

Audits: Quarkslab (April 2021). Controversies: after Durov’s arrest in 2024, many extremist groups moved from Telegram to Session, creating reputational pressure on the network.

Element (Matrix)

Developer: Element (formerly New Vector), United Kingdom.
Platforms: iOS, Android, Windows, macOS, Linux, Web.
Websites: element.io, matrix.org

Element is a client for the Matrix protocol. Its key difference from the other candidates is federation. The logic resembles email: many servers exchange messages, and you can run your own server using Synapse or Dendrite or join someone else’s.

E2EE is implemented through Olm and Megolm, variants of Signal Protocol. Cryptographic primitives: Curve25519, AES-256, HMAC-SHA256. Encryption is enabled by default in private chats. It can be configured for larger rooms and public communities.

One-to-one and group voice and video calls through Element Call also use E2EE via WebRTC with SFrame encryption.

Who it is for: teams, organizations, and IT projects that want federation and full control through self-hosting. With DevOps resources, you can deploy a Synapse server and obtain a corporate platform with logging, backups, and access control. The French government through Tchap, the German Bundeswehr through BwMessenger, and the German healthcare system through Gematik use Matrix because of self-hosting. But if you are an individual user and metadata privacy matters, choose Signal, Threema, or SimpleX.

Trade-offs. Element is a heavy client, and push notifications can sometimes arrive late on iOS. Metadata is not encrypted, and there is no transparency report.

Audits: Trail of Bits (2016, 2020), NCC Group (November 2015), Miculan & Vitacolonna formal analysis (2020), Albrecht et al. (2023). Funding: Element Creations Limited and commercial contracts with governments and large organizations.

Briar

Developer: Briar Project (voluntary board), an international contributor team.
Platforms: Android, Linux (Desktop versions for Windows and macOS are in development). There is no iOS version because of technical restrictions in iOS.
Website: briarproject.org

The most specialized option on the list. Briar works without centralized servers at all: messages travel peer-to-peer directly between devices. It supports several channels: Tor over the regular internet, a local Wi-Fi network, Bluetooth, and even USB storage devices through sneakernet.

Use case: Ukraine, a large-scale attack on infrastructure, mobile networks are down, and half the country has no internet. Signal, Telegram, and WhatsApp do not work because they depend on servers. Briar continues functioning through Bluetooth and a local network across tens or hundreds of meters, and considerably farther through a mesh chain of several devices. This is exactly what it was built for: journalists and activists in repressive regimes and conflict zones.

Briar has no voice or video calls. It supports text, forums, and blogs only. This is a deliberate architectural choice: voice traffic would work poorly in a P2P network running over Bluetooth or degraded connections.

The project was founded in 2011 by Michael Rogers and Eleanor Saitta, both with experience in P2P systems and security. It is a nonprofit project funded by the Open Technology Fund, NLnet, Access Now, Internews, Small Media Foundation, and Prototype Fund.

Audits: Cure53 (2017). A second audit was recommended after development is complete but has not yet been carried out.

Comparison table

A compact comparison across the key criteria, from the most private options to mainstream apps.

A few explanations. “E2EE by default” means that encryption is enabled in every chat without additional setup. “Encrypts metadata” is a separate category, not equivalent to E2EE, and few apps address it fully. PFS, or Perfect Forward Secrecy, indicates whether old messages remain protected if a long-term key is compromised.

Chat Control: what is happening in the EU and why Ukrainians should care

Europe has spent four years debating a legislative initiative commonly known as Chat Control and formally called CSAR, the Child Sexual Abuse Regulation. The idea is to force messengers to scan all user content on the device before encryption through client-side scanning, ostensibly to combat child sexual abuse material.

The problem with this approach is clear. Once scanning infrastructure exists on the device, it can be redirected toward anything. Hash databases can easily expand from CSAM to political opposition, protest photos, or leaked documents. False positives involving medical photos of children, family pictures, and memes are inevitable. Signal president Meredith Whittaker has publicly stated that Signal would leave the EU rather than build a client-side scanner.

Status as of April 2026. Chat Control 1.0 — a temporary directive that allowed Google, Meta, and Microsoft to scan unencrypted messages voluntarily — expired after the European Parliament voted 311 to 228 against extending it at the end of March 2026. The directive ceased to apply on 3 April 2026. Chat Control 2.0, the permanent replacement, is currently in trilogue negotiations between the European Parliament, the Council of the EU, and the Commission. Mandatory scanning of E2EE messengers was removed from the text under pressure in late 2025, but “voluntary” scanning, mandatory age verification, and platform risk mitigation remain. A final agreement is expected by July 2026.

This does not create direct legal consequences for Ukrainians because EU law does not apply to us directly. But if Signal leaves the European market, the global product will suffer: there will be less funding for development, more complicated logistics, and possible App Store and Google Play changes for European IP addresses. It would also set a precedent. When similar proposals appear in another jurisdiction, supporters will point to the EU experience.

How to choose the right app for your use case

One app cannot cover every task. Using several apps is a normal approach.

Scenario 1. Everyday communication with reasonable privacy

You are buying a new car through a private listing. You need to send the seller a screenshot of a deposit transfer, document photos, and a contract. In Telegram, the content sits on a server in plaintext. In WhatsApp, the backup goes to an unencrypted iCloud account, and if someone steals your Apple ID, the screenshot may surface. The solution is Signal. Install it, share your username instead of your phone number, and send everything there. After the transaction, delete the chat using a timer. This covers most everyday tasks.

Scenario 2. Maximum anonymity without linking a phone number

You are a journalist working with a sensitive source. The source should not know your phone number, and you should not know theirs. The solution is SimpleX. Publish a one-time invitation link in your public profile; it works once, so this is safe. The source connects, and the conversation begins. After the first contact, configure short-lived rotating links. Neither the SimpleX server, Apple, nor Google knows that you are connected at all.

Threema is an alternative with a simpler UX and a paid model. The principle is similar — an anonymous ID without a phone number — but the interface is closer to WhatsApp. The trade-off is a centralized company controlled by a PE fund.

Scenario 3. A work team or business

You are the CTO of a startup supporting clients in 15 countries, and you do not want to hand your corporate chat to Meta or Telegram. You need compliance logging, access controls, and a fallback if the provider goes down. There are two options. The first is Wire with a business plan or an on-prem version: a good privacy-convenience balance, Swiss jurisdiction, and MLS for groups. The second is Element with your own Matrix Synapse deployment on a VPS: more DevOps work, but full federation and control. If metadata privacy is critical, Wire is better because Matrix does not encrypt metadata.

Scenario 4. An emergency without internet access

A large-scale attack hits the energy grid, and the internet is unavailable in the region for a day. You need to coordinate with family and neighbors. The solution is Briar. Install it in advance on family members’ Android phones. You exchanged keys through a QR code over dinner one week earlier. Now Bluetooth and Wi-Fi Direct carry messages around the house, while a mesh chain through neighbors who also use Briar extends the range.

Scenario 5. Someone categorically refuses to install another app

A grandmother, a distant client, or a partner refuses to “deal with all these apps”. The minimum compromise is WhatsApp. Not Telegram, because Telegram does not enable E2EE by default. WhatsApp at least has encryption enabled, and its backups can be configured to use E2EE with a password. It is not ideal, but it is far better than a standard Telegram chat.

Conclusion

There is no universal app that works for everyone. The best private messengers 2026 should be chosen for a specific use case. Signal is the default option for mainstream communication. SimpleX or Threema are better for maximum anonymity. Wire is suited to teams and businesses. Element is useful for federated self-hosting, with a caveat about metadata. Briar is designed for emergencies. Telegram, WhatsApp, iMessage, Viber, and Messenger are not private communication tools in the strict sense, although they can be used in some situations when their limits are understood.

One final point: encryption does not solve everything. Metadata, backups, devices, push notifications, and social engineering all exist in parallel. There is no perfect solution, only acceptable compromises for specific tasks. The important thing is to understand the compromise you are making.