TOP ANDROID & IOS APP TO SEND & RECEIVE ENCRYPTED TEXT MESSAGES
SECURE MESSAGING APP
Some of the options to increase security include scanning encryption keys in-person with contacts to prevent man-in-the-middle attacks, and disabled screenshots by default. Also set by default is sending messages via data rather than SMS to avoid storing metadata with your cellphone provider.
In the future, Open Whisper Systems plans to release its text messaging service for desktop systems and Signal, its secure phone call app for iOS. You also have access to the same text encryption if you use CyanogenMod on your Android phone.
Available for free on Android (and announced for desktop and the Signal app on iOS).
Users can also send audio, video, and PDF messages from their devices and Dropbox or Google Drive storage. Customize your experience by setting how you want people to be able to find you (if at all), shredding remains of deleted local files, and creating group chats of up to 10 people.
Available for free on iOS and Android.
Available for free on iOS and Android, and unofficially available on desktop and Windows Phone.
As with some other apps, EXIF data is stripped from photos, and you can remove a photo from everywhere (the server and both your side and your recipient’s) all at once.
Available for iOS, Android and desktop. Free for the main client, with cloaked email addresses available through in-app purchases.
Available for free on iOS and Android, with US$1.99 to add voice integration.
Available for free on iOS and Android, with premium features costing US$4.99 and additional fees for CoverMe VoIP phone number plans.
RedPhone (Android) compatible with Signal (iOS), and announced development on desktop. Free download.
Available on Android, iOS, desktop, and more – see full list. Pricing depends on platform, with some free.
SECURE MESSAGING APP
1. TextSecure and Signal
- Unique feature: Message everyone in your phone list, even if they don’t use TextSecure.
- Security: Uses independently developed algorithms, including those implementing forward secrecy in which a new key is generated for each message.
- Open Source.
Some of the options to increase security include scanning encryption keys in-person with contacts to prevent man-in-the-middle attacks, and disabled screenshots by default. Also set by default is sending messages via data rather than SMS to avoid storing metadata with your cellphone provider.
In the future, Open Whisper Systems plans to release its text messaging service for desktop systems and Signal, its secure phone call app for iOS. You also have access to the same text encryption if you use CyanogenMod on your Android phone.
Available for free on Android (and announced for desktop and the Signal app on iOS).
2. Wickr
- Unique feature: Ephemeral chats and photos which can be made to disappear in anywhere from 3 seconds to up to 6 days.
- Security: Wickr has staked its claim with public independent assessments, as well as placing a large bug bounty on its “military-grade security,” and champions its warrant canary, or a secret indicator to its user base when the company has received a secret government subpoena to release information.
Users can also send audio, video, and PDF messages from their devices and Dropbox or Google Drive storage. Customize your experience by setting how you want people to be able to find you (if at all), shredding remains of deleted local files, and creating group chats of up to 10 people.
Available for free on iOS and Android.
3. Telegram
- Unique feature: Choose between either ephemeral chats that are never saved anywhere or cloud-accessible messages for when you do want to return to the conversation.
- Security: Telegram also had its own hacking bounty, which is sometimes controversial, but drives home the point that as a company, Telegram is not only interested in knowing about flaws in its application, but is willing to stake its reputation (and money) on it.
Available for free on iOS and Android, and unofficially available on desktop and Windows Phone.
4. Gliph
- Unique feature:Communicate with non-Gliph users via a unique group chat interface, and access BitCoin transfers, email cloaking services, and a user "name" that doesn’t rely on real information.
- Security: Gliph has an honest description of what its security entails, and when you might choose something else (i.e., if your life is in danger).
As with some other apps, EXIF data is stripped from photos, and you can remove a photo from everywhere (the server and both your side and your recipient’s) all at once.
Available for iOS, Android and desktop. Free for the main client, with cloaked email addresses available through in-app purchases.
4. surespot
- Unique feature: Allows multiple identities that don’t share keys, preferences, or contacts.
- Security: As with some other apps, requires setting a password that cannot be reset or recovered, and allows users to view each other’s public keys offline to verify that there’s no man-in-the-middle attack occurring.
- Open Source.
Available for free on iOS and Android, with US$1.99 to add voice integration.
5. CoverMe
- Unique feature: The CoverMe Vault securely stores all sorts of media, and the app adds many features to hide your identity and number.
- Security: CoverMe allows you to call and text CoverMe nonusers by purchasing a phone plan with them; however, only phone calls and messages with other users will be encrypted end-to-end.
Available for free on iOS and Android, with premium features costing US$4.99 and additional fees for CoverMe VoIP phone number plans.
SECURE CALLING APP
1. RedPhone and Signal
- Unique Highlight: Use of the default dialer in Android makes secure calls without requiring forethought.
- Security: RedPhone and Signal encrypt PUSH data from even Google’s and Apple’s eyes and only the most necessary metadata is used to route calls.
- Open Source.
RedPhone (Android) compatible with Signal (iOS), and announced development on desktop. Free download.
2. OStel
- Unique Highlight: Open standard for secure phone calls means lots of different ways to use it.
- Security: Each OStel client has novice or advanced settings, with advanced settings allowing for ZRTP, a protocol created by the PGP inventor and also used in RedPhone and Signal.
- Open Source.
Available on Android, iOS, desktop, and more – see full list. Pricing depends on platform, with some free.
What should you use?
- Given that the highest level of security exists when both ends of a connection are using the same app, one could argue that you should use the app where you already have the largest existing contact list. But as I was installing new apps, though I occasionally was informed that an existing friend of mine already used the app, I generally had no contacts already using the service. In order to enjoy the level of security the app was meant to provide, I would have to recruit my friends and colleagues, and accordingly, most of the apps had fairly visible methods to do so.
- Compounding the lack of user base in some of these apps is the large number of secure phone and text clients available even for free. Arguably the population of interested users is being split among each app and walled off from other users. I didn’t even list secure VoIP calling plans that sell minutes for calling outside the user circle because, again, this seemed counterintuitive to being able to increase rather than decrease the number of one’s contacts in a secure network, instead focusing on apps that are cheap enough to not be considered an additional mobile plan.
- I was forced to accept was that, were I to choose an app for personal needs and not for a business or group setting where I could require all members to use the same app, I would choose the one that natively fit best into how I text and call. That way, I would enjoy the end-to-end security when it was available, but have to resign myself to local encryption otherwise.
- My personal choice to meet this standard is the Open Whisper approach of making encryption seamless and transparent because I didn’t have to change anything about how I communicated, and thus it was more likely that I (and others) would continue to use their apps. Similarly, OStel may also work for this purpose in the future if additional developers integrate the standard into more products.
- However, I also came to the conclusion that there is no downside for choosing to encrypt my communications regardless of which app I chose, until there’s a better default standard for mobile encryption to prevent against man-in-the-middle attacks, surveillance-friendly carriers and leaked phone metadata.
Comments
Post a Comment