Skip to main content

How secure are your favorite messaging apps? Check this scorecard to find out

phone encryption messaging
Image used with permission by copyright holder
Chances are your favorite messaging apps are vulnerable to surveillance, eavesdropping and worse. Chances also are that most users don’t care enough to switch to a more secure solution, mostly because better security typically comes at the cost of usability. That’s why the Electronic Frontier Foundation (EFF) is partnering with ProPublica and the Princeton Center for Information Technology Policy to make a push for secure and user-friendly cryptography to protect communications.

As part of this endeavor, the EFF recently unveiled its Secure Messaging Scorecard, which rates 39 messaging apps and utilities based on seven metrics:

  1. Is your communication encrypted in transit?
  2. Is your communication encrypted with a key the provider doesn’t have access to?
  3. Can you independently verify your correspondent’s identity?
  4. Are past communications secure if your keys are stolen?
  5. Is the code open to independent review?
  6. Is the crypto design well-documented?
  7. Has there been an independent security audit?

EFF secure messaging appsThe scorecard gives each messaging tool a green or red mark in each of the seven criteria. ChatSecure + Orbot, Cryptocat, Signal/RedPhone, Silent Phone, Silent Text and TextSecure are the only apps that have perfect scores. On the other side of things, Mxit and QQ fail to get green checkmarks in any column. Recognizable messaging tools such as AIM, BlackBerry Messenger, Kik Messenger, Secret, Snapchat, Viber and Yahoo Messenger each have only one green checkmark.

“Most of the tools that are easy for the general public to use don’t rely on security best practices – including end-to-end encryption and open source code,” according to the EFF’s page dedicated to the scorecard. “Messaging tools that are really secure often aren’t easy to use; everyday users may have trouble installing the technology, verifying its authenticity, setting up an account, or may accidentally use it in ways that expose their communications.”

Check the Secure Messaging Scorecard to see how secure your favorite messaging apps are.

Editors' Recommendations

Jason Hahn
Jason Hahn is a part-time freelance writer based in New Jersey. He earned his master's degree in journalism at Northwestern…
How to check your IMEI number on iPhone, Android, or PC
iPhone 14 Pro Max and Galaxy S23 Ultra camera modules.

Every cell phone — whether iPhone, Android, or plain and simple dumb phone — has a unique International Mobile Equipment Identity (IMEI) number that can be used to identify it. This number is exceptionally important, as it can be used for a number of different purposes, from verifying whether a device has been reported as stolen, to confirming your phone for trade-in purposes. There are different reasons you might need to know your IMEI, and there are a few ways you can get your hands on it when needed.

Read more
How to use Google’s Gemini AI app on your Android phone
How to use Gemini on your Android.based device.

Google's collaboration AI tool, Bard, has changed its name and is now known as Gemini. The tool is also now available as an app on the Google Play Store, meaning it's easier than ever to chat with Google's AI assistant on your Android phone.

Read more
What iPhone do I have? How to find out your iPhone model number
Close-up of the iPhone SE 2022 and iPhone 14 Plus camera modules.

Since its landmark introduction in 2007, Apple has released 42 iPhone models, and with at least four new ones introduced every fall, the company is showing no signs of slowing down.

In all that time, Apple has made relatively few significant design changes. The company tends to stick with established designs for three or four years before changing things up, which can sometimes make it difficult to tell which iPhone model you have —  especially if you're getting a secondhand iPhone (with no box to offer a hint) rather than a new one.

Read more