If Signal isn't private, then why it is recommended over WhatsApp, Matrix and over SimpleX?
this post was submitted on 08 Oct 2025
83 points (75.5% liked)
Privacy
42484 readers
1508 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
No one should be recommending signal over matrix and simplex. It's probably more secure than whatsapp, but both have social network graphs of everyone you talked to, and when.
Matrix's encryption algorithm was broken for a while and when it was fixed it it took app devs years to migrate to the new requirements. It still might even be the case for a lot of them, I haven't looked in a while.
SimpleX should be secure AFAIK though, but I've heard that it may not be able to scale well to larger user bases. It seems everything has pros and cons.
Because most people don't consider the very basic concept made by op.
load more comments
(5 replies)
Started to write a long paragraph to explain the difference between privacy and anonymity but I now believe this new user is (no idea why) collecting engagement via rage bait. I won't participate in their posts anymore.
It might even come from a good place, namely trying to always do "better" and be "more private" but in practice it's just lead to confusion.
I am a huge fan of SimpleX and their removal of user IDs. I think it's a brilliant solution, and wish that SimpleX was recommended more than Signal.
load more comments
(1 replies)
Been saying this for many many years and always get blank stares in response. All the more annoying when its for use in groups that are all about privacy and they only want to use telegram.
However, it does make me happy to finally see someone else say it. So, thanks for that.
We are the rarity. Lol people in the comments are glitching over this statement
I'm ready to be called milquetoast, and while I see where this comes from, it comes off idealistic if we are to communicate with people in the present day in any practical way. Do not forget how much of an improvement it already is over the likes of proprietary messaging apps and how much effort it already is to move people to Signal. It is surprisingly difficult for common folk to grasp the concept of anything but a phone number when it comes to messaging apps.
Which definitely begs the question of why people put any effort into trying to move any of their contacts to signal in the first place. I believe the answer is that they didn't value privacy either. Just the idea of it.
load more comments
(1 replies)
2FA is an important security layer, if the service, after sending you the activating SMS with the code, delete your number (normal in serious services), it's also not an privacy problem. In big us corporations on the other hand, it is, eg.Google store tour number and also probably share it, there 2FA is not an option. Instead a number, some services also admit alternatively a second e-mail account to receive the activation code, there, if you have doubt, you can use an disposable mail, so there isn't any privacy problem.
2FA is important, but if you use your phone number for anything, you have no idea how long they retain it, how they directly use it, if they sell it, etc. A real phone number can be mapped back to you trivially.
It should be standard to offer TOTP codes that can be used via an authenticator app, hardware key, etc. Aome places do, many do not.
But at the end of the day, they typically don't ask for your phone number because they want to give you security, but rather as a proxy to ensure you have a unique identity. Most people will have only one phone number, and it will be more difficult / costly to get additional ones than burner emails, etc.
Yes, iy's always to use with a grain of salt. As said, it ads a security layer, but can be an privacy hole, despte that mail directions are easier to track as phone numbers, at least in the EU, you can't be mapped back to an user, this is only possible in crime investigations by the police with an court order. Mail adresses on the other hand are unique identifiers which are way easier th track, except you use an disposable mail or alias. Anyway, eg.in Vivaldi 2FA is safe and apart optional, as also the account itself, only needed when you want to use sync or the use of Vivaldimail, blog and other services it offers. In much other services it's also only an option.
load more comments
(1 replies)
Thank you! Finally someone that also sees Signal as privacy invasing!
load more comments
(1 replies)
People dont realize that you may as well hand over your social security number when you pass out your phone number.