There are numerous instant messengers around, and at first glance, they hardly differ. However, if you take a closer look, distinctive differences become apparent beneath the surface, especially as far as security and privacy protection are concerned. The following comparison shows how the most popular messengers stack up against one another.
The comparison was compiled to the best of our knowledge based on publicly available information (as of January 2021). Should you discover any errors, please let us know.
The following comparison shows the main differences between the most popular messengers. A detailed list can be found further down this page.
Threema
Signal
Telegram
Both Signal and Threema were designed with security and privacy in mind. Signal enjoys an outstanding reputation among experts, and it’s certainly a solid solution in terms of security. As far as privacy is concerned, however, a striking drawback appears when compared to Threema.
Signal requires users to disclose personally identifiable information. Threema, on the other hand, can be used anonymously: Users don’t have to provide their phone number or email address. The fact that Signal, being a US-based IT service provider, is subject to the CLOUD Act only makes this privacy deficit worse.
With regard to push notifications, Threema for Android also offers its own push service that works without any Google services. Hence, nothing stands in the way of using Threema anonymously.
Because Telegram already offered optional end-to-end encryption when this technology was not yet widespread, it’s sometimes wrongly labeled “secure” to this day. However, Telegram fundamentally differs from secure solutions like Threema since it’s essentially a cloud solution.
By default, Telegram permanently stores messages on its server, where they could, in theory, be read by the service provider at any time. Threema, on the other hand, rules out the possibility that anyone other than the intended recipient can read messages thanks to end-to-end encryption. After messages are delivered, they are immediately and irrevocably deleted from the Threema server.
However, its relaxed approach to security and privacy allows Telegram to offer some features that security-focused solutions like Threema are unable to provide without significant technical effort.
WhatsApp is the most popular instant messenger, and this is its biggest advantage. However, the weak privacy protection, which is a result of the service’s business model, is an even bigger disadvantage.
Meta (previous Facebook), the owner of WhatsApp, is financed by selling targeted advertisements. This business model requires as detailed user information as possible. Therefore, WhatsApp cannot be used without disclosing personally identifiable information, and user data is used by Meta for marketing purposes. Read on our blog why end-to-end encryption alone does not ensure comprehensive privacy protection.
Threema is financed by app sales. The service can be used without providing any personal data whatsoever, and the system is designed from the ground up to generate as little user data as technically possible.
For more details, please refer to our in-depth comparison of Threema and WhatsApp.
Messengers based on the Matrix protocol, like Element, were not taken into account because the federation leads to considerable privacy drawbacks. For example, messages and metadata are permanently stored on all involved servers, which means that every server operator is able to track who communicates with whom at what point in time. In the same vein, it’s evident for all server operators who the members of groups are, and the operator of a user’s home server is, in theory, even able to access their contact list.
Which messenger is the most secure? Which one offers the most comprehensive privacy protection?
Threema
Signal
Telegram
The service can be used anonymously.
Other than the intended recipient, no one (not even the service operator) can read regular chat messages.
It’s not possible to circumvent the end-to-end encryption by means of unencrypted message copies on the device, there is no fingerprinting and no status feature on the server side, and received URLs are not opened automatically.
The service provider operates and runs all servers, and there are no cloud or hosting services (such as Amazon AWS or Google Cloud) involved.
Messages are immediately and irrevocably deleted from the server once they are delivered to the recipient.
It’s not necessary to grant access to the address book in order to use the service (without workaround/limitation).
Contact lists, groups, and user profiles are managed directly on the user devices, not on a central server.
The identity of contacts can be verified out of band, e.g., by scanning a QR code, and the verification is persistent.
The app’s source code is publicly accessible, and reproducible builds can be used to verify that it actually corresponds to the app available for download.
The security of the app code was audited d by external experts within the last five years.
The security of the protocol was audited by external experts within the last five years.
In terms of security and privacy protection, there’s no match for Threema. It’s the only service that can be used anonymously, i.e., without providing personally identifiable information (such as a phone number or email address). Signal is also designed with security and data protection in mind, but since it’s a US service, it is subject to the CLOUD Act, and it requires users to disclose personally identifiable information.
Telegram is a cloud solution and cannot be considered “secure” by any definition of the word: Not only are messages not end-to-end encrypted by default, they are permanently stored on a server, where the service provider (or hackers) could read them at any time. WhatsApp does apply end-to-end encryption; however, user data can be used for marketing purposes according to the privacy policy, the service is not GDPR-compliant, and requires both personal data and address-book access.
Which chat app provides the most useful features?
Threema
Signal
Telegram
Communicate with users without revealing your personal information such as phone number or email address.
Conduct polls in group chats to collect the opinions of the group members.
Mention users in group chats to trigger notifications.
Reference previous messages.
Delete messages that have already been delivered to the recipient.
Send messages that are automatically deleted from the recipient’s device after a specified period of time.
The listed services have a more or less similar range of features. Of course, they all support text and voice messages as well as voice and video calls. However, due to its security sacrifices, Telegram can offer the most features. Telegram, Signal, and Threema all allow users to remain anonymous to their chat partners.
How does the application interact with additional devices?
Threema
Signal
Telegram
Chat from computer using web client or desktop app.
not end-to-end encryptedUse the same identity in parallel on multiple devices.
1 mobile, 5 desktop devicesunlimited number of devicesUse different identities on the same device.
All services can be used on desktop computers. Being a cloud solution, Telegram also benefits form certain advantages in this category. Signal, WhatsApp, and Threema are almost on par in terms of portability, which is about to change with the introduction of Threema’s multi-device solution.
Messengers for private users lack the tools for administration and user management that business solutions provide. Compare with other messengers tailored for professional use.
