The Most Secure Messaging Apps that you Probably Never Heard of

mage courtesy of Perri Scope at Flickr.com

A secure messaging system gathers a few characteristics that allow users to safely communicate without fear of having their conversations, images and data intercepted. Now, we are all aware of WhatsApp and different alternatives, but how many of them are completely safe. Even though WhatsApp can now make the cut, due to its latest upgrade, there are still other options out there that you may have never heard about. The Electronic Frontier Foundation (EFF) designed a Secure Messaging Scoreboard, which allows to compare specific data to analyze just how secure the messaging app is. It examines dozens of technologies and rates them to get a range of security best practices among the top messaging software out there, including chat clients, test messaging apps, email applications and video calling. We all use these apps on a daily basis, be it for work or to stay in touch with friends and family, but how sure are we that our information, conversations and data is safe while we communicate with others. This scorecard measures seven dimensions to evaluate if the communication app is secure. 

-Are they encrypted at all stages of the communication?

-Is the encryption end-to-end so the messaging companies can’t access your communications?

-Is there a way to verify who you are messaging?

-If for some reason, the encryption keys are stolen, is all of your previous information safe?

-Can the app code be independently reviewed?

-Is the design of the cryptography, along with the implementation, available for review?

-Finally, has the code and implementation been audited independently in the last year?

Now, it is important to clarify that these individual traits don’t guarantee a secure network, but instead the combination of all of them. Especially considering when an app fails, the first four should be present to ensure your security.

Which ones aren’t safe?

mage courtesy of Cyril Vallée at Flickr.com

If they are popular, they are probably not that safe. The most popular apps are usually the ones that don’t pass the test. In fact, from the most popular apps that were tested all failed, with the exception of iMessage. The other ones tested from the popular apps were: BlackBerry Messenger, Facebook Chat, Skype, Snapchat, Viber and WhatsApp. Although WhatsApp, didn’t pass the test at the time, it may be quite different with the end-to-end upgrade it made recently. BlackBerry Messenger, only passed the first criteria of being encrypted in transit, the same as Skype and Viber. Whereas Facebook Chat, Snapchat, and WhatsApp (again when the study was made) only passed in the previously mentioned criteria and the fact that they have had recent audits of their code. iMessage, as mentioned before, is one of the safest from this group of popular apps which passes on five of the seven criteria. It has the previously two that were mentioned, as well as having an encryptor so the provider can’t read your messaged, previous comments are secure even if your keys are stolen and the design is properly documented.

Which ones are safe, but you don’t know about?

In this category we’ll have some apps that I’m almost sure you’ve never heard of, but do fill all seven criteria; ChatSecure, Silent Phone and Silent Text from Silent Circle, and Signal, RedPhone and TextSecure from WhisperSystems.

ChatSecure is a free app you can download from iOS and Android, and uses a few cryptographic libraries that are very well-known such as XMPP, OTR and Tor. You can communicate with other users who are using the same app or other apps that use the same protocols.

Silent Circle has a subscription plan and it covers two of the apps that were evaluated with all seven criteria: Silent Phone and Silent Text. Both apps are available in iOS and Android. It is a sort of secure Skype. The different thing about these apps is that they can also call non-users and the call will continue to be encrypted.

WhisperSystems is actually the same company that designed the new encrypted system for WhatsApp. They initially started off with their RedPhone and TextSecure apps that are used on Android, and Signal for iOS. These apps integrate with the phone’s dialer on the android version, so you’ll always get the option of making an encrypted call of sending a secure message. On the iOS version, it’s not quite as integrated.

All of the apps mentioned could be used to ensure that your communication is secure and not in danger of being tapped by anyone, including the phone manufacturer or the apps designer. Online there are tons of ways of being hacked or tricked into handing over their personal information, by anyone from a hacker to the government. So, if you’re interested in keeping your communications private, feel free to use any of these because they comply with all 7 seven criteria and will for sure keep your conversation between you and the end user.

Encrypted Communication Popular in our Day

Image courtesy of brewbooks at Flickr.com

After the major cases of data leakage and hacking of information, more and more individuals, companies, and government entities are looking for solutions to protect their privacy and their deepest secrets. 

The truth is that encrypted communication has always been present. The romans, for example, used encrypted messages to protect information that dealt with military content and to communicate during battles. Caesar was the one to be acknowledged as the first user of this system. That encrypted method was called “Caesar cipher” and it consisted of a strategy where each letter in a message was replaced by another letter, which was changed some places forward in the alphabet. However, it is believed that before him encrypted communication by substitution had already been used.

Before, encryption was mainly exclusive for departments and people in charge of the defense of a nation. Nowadays, companies and individuals want to know more about this technology and start implementing it in their daily communicative exchanges.

Why is it important?

Any communication that takes place in the internet is unencrypted. This means that if there is a malicious user that wants to “spy” the communication between the sender of a message and its recipient, this user is able to access information from this communication, and know exactly what is being transmitted. This fact can have more relevance according to the level of exclusiveness or secrecy of the information. If we were checking out web pages about the latest hairstyles, that would be irrelevant to security. But if we were accessing or providing our bank account information, that is a different story. 

Image courtesy of EFF Photos at Flickr.com

To avoid these sorts of situations, there is a technical solution that protects communication through encryption. Any kind of information can be encrypted. From web pages access information, to e-mails, etc. Encrypting information nowadays is an area of expertise that protects information using mathematics, computer science and engineering approaches.

The benefits of encrypted communication should be used specially in those interactions that transmit sensitive data. These might include passwords, personal information, financial records, etc. Security in this context means to perform communication in ways that does not allow a third party to access, read or listen to the communication session. The ways to protect internet communication can take the following forms:

• Protecting the content: hiding information or digital data.
• Protecting individuals performing communication: anonymity
• Protecting the communication environment: approaches to hide communication environment. 

The Case of WhatsApp

Recently, Whatsapp proved people its concern about protecting its users’ privacy. Its latest update informed the community about the implementation of a new technology where users can talk to friends, family and acquaintances and their communication will be encrypted. This unprecedented action stirred a desire in people to understand more about encryption and to be concerned more about their online privacy.

This newfound concern about online privacy on the web is valid for companies as well. There are many tools and encrypted technology systems for companies that allow organizations to take control over sensitive data, information access and communications policies.

Whatsapp case poses a question, if encryption should be applied to all communications. The truth of the matter is that it entirely depends on the nature of the information that is handled. Companies should identify their key issues and sensitive data that need to be protected and differentiated from trivial, harmless communication. Identification is key to developing policies and strategies for managing data. After the implementation of a communication action plan, raising awareness is crucial for educating personnel about the importance of handling information in a safe way, following the company policies.

Final Considerations

Encryption mechanisms have always existed and will continue existing, whether it is for companies, government agencies or individuals that want to protect valuable information. Recent cases of information leakage have raised awareness of the need for information privacy and protection both in public and private communications. Security in this sense means protecting information or digital data from any sort of attacking techniques, technologies or methods controlled by malicious users.

To sum up, advances in cryptography are offering strong enough protection for most of our e-mail communications, online transactions and valuable information, but the future is still uncertain in the changing face of technology because, when stronger cryptographic systems appear, new means to break them appear as well. The hope is that with the ongoing developments in this area, attacks and security breaking will be exponentially reduced if not eradicated. That is why more research and work needs to take place to take security measures one step further from malicious users and technologies against online privacy. The human factor is still critical in the effectiveness of all security applications and systems. The constant reinvention of online communications privacy still continues.

Where can you get more privacy when messaging?

Image courtesy of 3RI at Flickr.com

Are you wondering whether you should be using BlackBerry or WhatsApp Messenger? If you care about your privacy, you should seriously consider using BlackBerry. Right now it is a much safer and reliable alternative to keep your conversations private than WhatsApp. In 2013, new versions of instant messaging system for iOS and Android mobile devices were launched, and a week after that, BlackBerry Messenger had added 20 million people more, making the platform reach 80 million monthly visits. There is clearly evidence of a great interest.

BlackBerry Messenger was one of the first differential services of the company and security and privacy are two of the key features they focus on. It operates on the private network owned by the company. A large number of government security agencies have tested and approved this platform. They actually use it as well as banks and other multinational companies given that all messages sent by BlackBerry Messenger are encrypted. They are exchanged crossing the infrastructure of the company which has interconnection with a high number of carriers worldwide. This is important because it means that your message has to travel through less points to reach its recipient. So, you will see that the risk of third parties intercepting your message is highly reduced. The relationship BlackBerry has had with many telecommunications companies for so many years has led to the creation of this strategic advantage.

However, many users identify “BlackBerry” with the past; they tend to imagine plastic phones with keyboards that would allow you to check emails and send messages. Evidently, it is true. This company is one of the pioneers in the “revolution” of smartphones. In spite of the big effort in recent months to meet competition standards, this brand does not seem to achieve breaking off completely from the image they have of last century technology. However, it does not mean that their products and services are also out of date.

So, if BlackBerry Messenger offers the security and reliability that you should demand from any communication platform and WhatsApp has been proved to have so many security problems such as anyone can read your conversations, why is it more popular and has more users?

Image courtesy of Johannes Marliem at Flickr.com

WhatsApp is a simple communication cross-platform that works at a very low cost; one dollar per year. It came along at the perfect time with versions for all popular operating systems at the moment which were iOS, BlackBerry, Symbian –believe it or not- and Nokia S40. It became popular quite soon given that these type of applications were basically new and there were no many competitors which favored its position as leader. Shortly afterwards, versions for Android and Windows Phone were finally launched. Nowadays, it has millions of users and everyday it attracts more and more people around the world.

The model of this app is brilliant but the implementation is not, especially when it comes to privacy issues. There are still many questions regarding security, such as:

• Does WhatsApp save conversations? If it does, for how long?
• What happens to the messages from the moment they are sent until the recipient gets it?
• Why has WhatsApp taken so long to implement encryption in the chats?
• Why does it allow to access the system without a safer process that require a password to login? It is understandable that it makes things easier, but that is not a real justification to risk privacy.
• What does WhatsApp do with phone numbers besides using it as a user in the system?
• Why are WhatsApp efforts minimal for general security?

It is difficult to find answers to the questions and doubts about the company behind the service. What it is known for sure is that WhatsApp is not observed, in any way, by any government around the world which is curious because they are in charge of regulating telecommunications companies. Doesn’t it make it more dangerous?

In conclusion, it seems to be a good idea to replace WhatsApp by BlackBerry Messenger. It does not require annual subscriptions that appear by surprise because it is free. It has a multi platform -except for Windows Phone- and the most important aspect is that it is really safe. You might think that you do not need a safe platform because you don’t think you exchange interesting information.

However, you never know when you will end up talking about someone with your friends, or discussing sensitive work matters and even sharing documents, pictures or videos that can be used to harm you. The security system of BlackBerry Messenger is not perfect but you can trust in it. Some people keep saying that BlackBerry is so last century… Well, you might find interesting that Apple was founded 18 years earlier and it is still a company leader in the field of telecommunications. It is just a matter of perceptions.