How to keep the privacy of your mobile communications

The apps that we use regularly on our mobile devices are not the most suitable channels for sharing sensitive information. If we want to protect the confidentiality of our communications, it is not recommended to use services like WhatsApp or plain old SMS.

Image courtesy of Chris Potter at Flickr.com

Users have recently become sensitized about the importance of the confidentiality of communications, and they have begun to consider the levels of privacy when choosing one service or another.

Google announced end-to-end encryption between Gmail users precisely to ensure the users of its service that their communications are safe. Following this path, browser extensions such as ShadowCrypt have emerged to encrypt messages, or projects like Dark Mail have been developed to implement a secure email system that is "immune" to espionage and unauthorized interferences.

If we consider that through regular phone conversations, or even through messaging services, we can exchange sensitive information, it makes sense that we take into consideration the privacy of our conversations and, therefore, we look for applications and services to ensure end-to-end encryption in the devices that we use daily.

Just because a service offers encryption between your phone and their servers, that does not guarantee the confidentiality of your communications. There must exist an "end to end" (from one terminal to another) encrypted channel, that is, our conversations should not be accessible on the servers of the service.

Another important detail is the possibility of auditing the services we use, if the source code is accessible, at least it can be reviewed by independent third parties to verify that the declared specifications are met and that there are no undeclared "hidden features".

Encrypted calls from your phone: Android and iOS

Fortunately, day by day there are more options available for both iOS and Android.

Signal is one of the products developed by Open Whisper Systems and it is designed to make secure phone calls between iOS devices, based on end-to-end encrypted communications.

Its usage is extremely simple: install the application and indicate your phone number. Then the application exports your address book to check which contacts use the service and, from there, you can call them.

If you have an Android device, the same company offers the RedPhone app, so you can also make voice calls over a secure communications channel, using your data plan or through a Wi-Fi network.

Signal and RedPhone are interoperable; therefore, from Signal you can make calls to RedPhone users and viceversa. In both cases, the app’s source code is available for audit and communications rely on the ZRTP secure protocol, so we can safely say it’s a reliable service.

Encrypted messaging on desktop and mobile devices

There are several options to protect our messages, some are very well known, such as Telegram, which has a secret chat mode and it offers end to end encryption, and with this option the conversations are not accessible from Telegram’s servers.

Another known and widespread option available on the market are Apple’s iMessage and FaceTime; available on OS X and iOS, these messaging and video calling services also provide end to end encryption but the source code is not available to third parties.

If we want to encrypt SMS, another alternative to communicate securely from Android is Text Secure, but it is only available for text messages.

On iOS, Signal includes both calls and text messages; but on Android you have to use two different apps: RedPhone for calls and Text Secure for text messages.

Image courtesy of Yuri Samoilov at Flickr.com

Another interesting service, which is also cross-platform, is CryptoCat. It is available for both iOS and desktop browsers, this text service allows you to encrypt messages that users exchange (they come out encrypted and are not decrypted until the information reaches the recipient) and it also is an open source project, so it can be audited to verify its functionality. In principle, the communication channel is safe, but the service is somewhat conservative and it clearly states that this is not an infallible tool that you should trust your life with.

BitTorrent has been developing a decentralized instant messaging system that does not depend on the cloud, making information flow directly between the users without having to go through intermediate servers. Bleep, which is the name of this service, intends to be a safe and decentralized alternative to WhatsApp or Telegram, offering end to end encryption and it is available on both iOS and Android.

The fact that communication takes place directly between the users and is also encrypted, place Bleep as one of the best options to consider when using an application to establish secure communications, since no intermediate servers are used.

Finally, users of Android devices should consider SureSpot, which is a sort of combination of WhatsApp and Snapchat with encrypted communications. The service allows you to exchange images, text or voice messages through a secure channel and the possibility to erase, at will, messages we have already sent, while maintaining control of the information we have exchanged. The SureSpot service relies on intermediate servers, therefore, that’s a factor to consider when evaluating its use.

4 Free Mobile Apps That Increase Data Security

Mobile phones have revolutionized communication in the past few decades, and smartphones enable people to do handle more of their personal and business tasks without being tied to a landline or personal computer. Estimates show that a growing number of Americans have even completely given up their landline in favor of using their mobile phone as their sole phone.

With so much data stored in devices that are inherently at higher risk of being lost or stolen, security is obviously pretty important. Modern phones are equipped with stock security features out of the box, but depending on your usage this may not be enough. The following free mobile applications can be installed to augment standard security features and give you peace of mind should anything happen to your phone.

1. Red Phone – Security for Phone Calls

If you frequently find yourself making phone calls in which sensitive information is shared back and forth, or you just desire more privacy, call encryption may prove extremely valuable. Developed by Open Whisper Systems, Red Phone works by encrypting calls placed from your regular phone application, but the actual transmission is over Wi-Fi or cellular data and does not affect your carrier-allotted minutes. The main advantage of this is that your cellular provider does not have access to any data associated with the phone calls you make. Calls that you make will not appear on your monthly statement, so prying eyes cannot see who you have been in contact with. The Red Phone app, which is offered as a free download, is currently available only for Android devices.

2. Enlocked – An Added Layer of Privacy for Email

If you fall within the category of smartphone users that need a bit more privacy when using email, Enlocked is an application that makes the experience infinitely more secure. Data breaches occur via email at an alarming rate and unfortunately stock smartphone email applications simply cannot guarantee that this won’t happen to you.

Enlocked works in conjunction with the most popular email applications such as Outlook, Yahoo Mail, and Gmail, as well as Exchange email accounts that are often used for corporate email communications. Rated “excellent” by PC Mag and recipient of their Editor’s Choice award, Enlocked has consistently receives solid reviews from its users. Available for both Apple and Android devices, Enlocked can be downloaded for free for the App Store and Google Play, respectively.

3. Wickr – Secure Text Messaging

Times have changed, and people are using text messaging at astonishing rates. Carriers for the most part have adopted unlimited text messaging as part of their cellular service plans. People not only use texting for their personal use, but also as a way to communicate business and other sensitive information.

The San Francisco-based software company Wickr has created an application that boasts “military grade encryption” for text messaging. Not only are text messages encrypted, all messages routed through the Wickr app have an expiration date ranging from a few hours to several days depending on individual user settings within the app. This is great for people who are sending sensitive data and don’t want to run the risk of data being compromised or referenced at a later time. Wickr’s Shredder feature allows you to remove pictures, texts and videos from your device and destroys any traces that they were ever on your device. Wickr is available for both Apple and Android smartphones and is also available as a desktop application for Windows, Mac and Linux computers.

4. CoverMe – Multipurpose Security

While most smartphones include a feature that allows you to lock your device in order to keep intruders out, there are limited options to secure individual applications. Once your phone is unlocked, photos, videos, contacts and text messages are vulnerable and can be accessed by anyone. CoverMe addresses this problem by providing application-level security in the event that your phone’s standard security features are bypassed somehow.

For phone calls, CoverMe gives users multiple options for masking their information when placing calls. Much like Wickr, CoverMe offers military grade call encryption, and you can also conceal call logs, contact information, and text messages from prying eyes. While CoverMe is a free download for both Apple and Android devices, prices for premium features start at $4.99.

Smartphones are powerful computers and often contain data that could be potentially harmful to our personal or professional lives. As smartphone technology becomes increasingly sophisticated, security is increasingly becoming more of a necessity and less of an afterthought. No matter how you use your phone, if you require a higher level of privacy for personal or business use, try some of these apps to see if they’re right for you.