Choosing a Messenger, and the Metadata Catch
End-to-end encryption is table stakes. The real differences are what the app knows about you around the messages — and one property that limits the damage when something eventually leaks.
Okay, I want end-to-end encryption. Several apps have it. How do I pick between them?
Now the interesting part. Once messages are unreadable to the company, the differences move to two places: what the app still knows around the messages, and how well it protects the past when a key leaks.
The metadata catch, again
Even with perfect end-to-end encryptionEnd-to-end encryptionEncryption where only the sender and the recipient can read a message — not the app's company, not the network, not anyone in between., an app can still know metadataMetadataData about your data — not what you said, but who you said it to, when, from where, and how often.: who you message, when, how often, your contact list, your phone number. Two apps can both hide message contents perfectly and differ enormously in how much of this they collect and keep.
Both apps: message contents unreadable to the company (good)
App A keeps: your phone number, full contact graph, who you talk to and when
App B keeps: almost nothing — no contact graph, minimal account, less to hand over
- Line 3Contents are safe in both. But App A still holds the shape of your social life — the metadataMetadataData about your data — not what you said, but who you said it to, when, from where, and how often. lesson's warning, now a product choice.
- Line 4App B is designed so there is little to collect and little to seize. When "we have nothing to hand over" is technically true, it is the strongest answer there is.
Two messengers both have solid end-to-end encryption. What separates a good choice from a weak one?
Protecting the past
The second property is forward secrecyForward secrecyA property where stealing today's keys does not unlock yesterday's messages — each conversation is protected even if a key later leaks.: the keys change constantly and old ones are thrown away, so a key stolen tomorrow cannot decrypt the messages you sent today. It turns a future compromise from "they read everything you ever said" into "they read the little around the moment of the breach".
Why does forward secrecy matter even for an app you already trust?
Picking by popularity
- "Everyone I know uses it, so it must be fine"
- Judging on the word "encrypted" alone
- Ignoring what the app knows about who you talk toPicking by properties
- End-to-end encryption on by default, not an optional mode you forget to enable
- As little metadata collected as the app can manage
- Forward secrecy, so a future leak cannot unwind the past
- Open, audited code, so the promises are checkable rather than trustedThe right messenger for you still depends on your threat model and who you need to reach — but judge the candidates on these properties, not on the marketing or the crowd.
So it is content encryption first, then metadata, then protecting the past.
A clean summary. And notice it is the whole course in miniature: threat model, then the leak most people forget — metadata — then limiting the damage when something eventually fails.
A person on a minimal-metadata, forward-secret messenger is genuinely hard for me. No social graph to seize, no history to recover, nothing to read even if I reach the company. That is what good looks like.
Legal
Evaluate and use private messengers for your own communication freely. The same privacy that protects an ordinary person also protects wrongdoing — which is a social debate, not a licence to attempt to break others' communications, which remains illegal.
So beyond end-to-end encryption, choose for minimal metadata, forward secrecy, and code you can verify — and match the final choice to your threat modelThreat modelFour honest answers: what you are protecting, from whom, what happens if it fails, and how much trouble you will go to. and who you need to reach. That completes Private Messaging, and rounds out the free Anonymity course: you can reason about adversaries, tools, the browser, your accounts, and now the conversations you have every day. The paid courses take this footing into hands-on ground — networks, forensics, and breaking things ethically.