Hello,
Right now I'm looking at Molly, Signal, and Session for secure messaging. The problem is, I'm looking to avoid any type of SIM card, phone numbers, emails, etc.
I'm open to paid options given they are encrypted and independently-audited, but prefer FOSS obviously.
Is the default grapheneOS SMS messenger recommended?
Are their alternatives that work primarily threw WiFi-only, with no email or phone number sign-up?
Any resources would be greatly appreciated
SimpleX
Maybe you'll find this link helpful, it handles a lot of criteria and you can filter by messengers too:
Atox
SimpleX, Threema libre
SimpleX chat.
InkyThrill Is the default grapheneOS SMS messenger recommended?
As stated in its description, the default Messaging app is an "SMS/MMS app providing compatibility with non-private carrier-based messaging. Use a secure messaging app such as Molly/Signal or SimpleX for privacy instead. This is a GrapheneOS fork of the Android Open Source Project Messaging app and still uses the AOSP package name for backwards compatibility."
Threema needs no telefon nummer to register. I use it for years, sind it works fine.
For those suggesting Threema, I believe its security and encryption protocols have been repeatedly found lacking.
So, while it is an alternative that doesn't require a phone number it doesn't seem to meet the OP's requirement for (secure) encryption.
Edit:
Some references. The first is from 2021 and the other 2023. So, while not exactly current they don't inspire confidence to see problems in the underlying design span multiple years.
guser39 It is not true that Threema is lacking security. Those "issues" you mention like lack of PFS and open sources are solved years ago. If you compare it on the Kukez blog you see several unique advantages over Signal and SimpleX.
Personally I use Signal and Threema and I prefer Threema mostly because of its transparent and honest business model. It's the only messenger where I am the client.
SimpleX has very good encryption and does not require any identifiers. I have not seen any credible critique of their white paper.
Session does not require any identifiers and some have debated if the encryption technology is good enough to thwart advanced attacks, with the developers responding that it is. I am not sure whether the criticism is valid.
Briar is the only messaging App that allows Bluetooth mesh network communication which could be useful in a scenario in which society unexpectedly breaks down or normal networks can't be used.
(Threema is considered excellent and is also an App that requires payment, with any concerns about that could bring up. Threema may be a good option for corporations or groups requiring encryption, especially since there may be more support if there are issues since it's a paid service. If there are protocol concerns, I don't know about them and it may be worth looking into.)
I think Simplex is overhyped in this discussion. It is among the newest and has a very small community. The best messenger is only as good as your contacts use is too. That clearly speaks for Threema with 50x as many users than SimpleX.
It is easy to say SimpleX is goood but I see only three developers contributing, presumably part time over three years. The number of eyes checking their code will be much smaller than other open source messengers. Making the chance that bugs are not discovered much more likely.
So in my opinion size of the project is an argument when deciding for or against an app. This may as well include sacrifying the requirement for registration and using Signal instead.
schweizer That clearly speaks for Threema with 50x as many users than SimpleX.
Source?
ErnestThornhill Play store downloads I guess, 5M vs 100k. That doesn't of course include other app stores, so I think the ratio is not as steep.
