This doc explains one of the methods we recommend for sharing secrets safely, with the caveat that the safety is neither absolute nor guaranteed.

Don’t forget that sharing secrets is dangerous even if sometimes necessary.

Insecure Messenger Services #

Most modern messenger apps claim that they’re secure but the reality is that many of those claims are rather dubious or misleading. For example, the wildly popular WhatsApp messenger places this message at the beginning of each chat:

Messages and calls are end-to-end encrypted. No one outside of this chat, not even WhatsApp, can read or listen to them.

WhatsApp

Although (probably) technically true, WhatsApp has come under severe criticism over the years for repeated attacks against the platform, including a number of massive and high-profile hacks.

WhatsApp is by no means the only messenger to have been hacked though it probably is the most well-known. Messengers that haven’t been designed with security first and foremost on their agenda have proven far more fallible than those that deeply care about it.

Secure Messenger Services #

There are a select few messenger apps that have earned the trust of the security community to a far greater extent than the rest.

• Signal is widely considered one of the most secure and private messenger apps. It’s completely free and used by security-minded people all over the world.
• Wickr is another highly-regarded secure messenger that has a greater focus on business needs. We also accept secret messages on Wickr Pro.
• Telegram is not quite as secure as Signal and Wickr Pro but it’s easier to use, has good security and privacy concerns, and has a good track record. We accept secrets sent by Telegram but only when sent as Secret Chats.

If you wish to send us secrets with one of these secure messengers, reach out and we’ll provide the details. If you’re interested in using a different messenger, let us know and we’ll discuss it. We may refuse, in the name of your safety and ours, but we’ll hear you out first.