this post was submitted on 24 Dec 2025
70 points (97.3% liked)

Ask Lemmy

36328 readers
1615 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 2 years ago
MODERATORS
 

I'd like to be able to chat from an Android phone without a SIM card.

Edit: Since several people have mentioned it, I'm including this note at the top. There are security issues with using a temporary number to register even if it is not needed to maintain the account. Anyone can gain access to the number and use it for account recovery, etc. I'm not an infosec person at all, but this seems pretty obviously bad. Some services will work fine with a landline or other permanent phone number, as long as you retain private access to the number.

Edit 2: SimpleX turned out to be a good fit for me. It was fast and easy to set up, and simple for my family to use. I also like that it is self hostable if I need to set that up in the future. There are some excellent suggestions and useful discussions below, and I appreciate the help. I'll come back to this thread in the future if I need to switch

top 50 comments
sorted by: hot top controversial new old
[–] frisbird@lemmy.ml 24 points 1 week ago (7 children)
[–] spaghetti_carbanana@krabb.org 9 points 1 week ago

With Jitsi you can also self-host the server-side components if that's your thing: https://jitsi.github.io/handbook/docs/devops-guide

load more comments (6 replies)
[–] nymnympseudonym@piefed.social 15 points 1 week ago

From all of us who donate to FSF.org To the world

A Free-as-in-speech-and-beer solution

Happy Newton's birthday

https://jitsi.org/

[–] Toes@ani.social 15 points 1 week ago (1 children)

You can use element for that, just don't use a matrix.org account.

[–] 01189998819991197253@infosec.pub 5 points 1 week ago (2 children)
[–] northernlights@lemmy.today 5 points 1 week ago (2 children)

matrix.org is one instance, the biggest one. Guessing they require a phone number.

[–] Zak@lemmy.world 7 points 1 week ago

It does not appear to require a phone number. It even looks like an email address is optional.

Ah ok. I haven't used matrix in a while, but it didn't require a phone then (several years ago), so I thought they were saying not to use matrix in general.

[–] ArcaneSlime@lemmy.dbzer0.com 3 points 1 week ago* (last edited 1 week ago) (1 children)

I can't speak for them, but personally I've been moving away from matrix entirely for a few reasons.

Element was always a buggy mess on my phone, and a shitty electron app on my laptop.

It was too difficult for normals and while I disagree, they wouldn't use it. What's a chat app without contacts after all?

While element was bugging and I was awaiting an update, I found out that the Matrix [.] org foundation was started as a project at Amdocs, then when it was defunded the lead of the project created the foundation. Amdocs is fucking sketchy, they're associated with mossad and have infiltrated the US telcom networks. Now look, I'm not saying they backdoored matrix, but they did do the other thing and backdooring a chat app would be right in line with their entire schtick, and I'm just too fucking paranoid for that, straight up. It also leaks metadata like piss to any server that federates with yours so if mossad is working with the matrix org, they get all of it just by your server federating with the largest, "official" server. To some degree, metadata seems inescapable, but almost anyone is better than mossad.

They also have a bit of a CP problem in their public rooms so stay out of those, but don't worry due to that problem they removed searching for public rooms so you have to know the addr to join, so they make it hard to stumble into them, but also now you can't search for public rooms which is a hinderance if you did want to join, say, the rasberry pi room, despite the risk of cp being posted.

BUT they don't require phone numbers!

So for now I'm trying out Delta Chat, seems alright so far. No video calling though.

But yeah maybe that whole Amdocs connection to the "official server" is what they were referencing, but if not I'd like to know their reason!

[–] 01189998819991197253@infosec.pub 2 points 1 week ago (1 children)

Interesting information. I didn't know about the potential tie. Honestly, any "intelligence" agency is as bad a tie for a chat app, especially one that claims privacy. I have no one on Delta, but I've had it installed for a while : / maybe one day...

[–] ArcaneSlime@lemmy.dbzer0.com 2 points 1 week ago (1 children)

I was able to get two people on Delta so far, it seems easy enough for normal people to use, so there may be hope yet!

[–] 01189998819991197253@infosec.pub 2 points 1 week ago (1 children)

I hope so. It took me almost 7 years to go from Hangouts to Signal, and it took Google claiming they'll kill Hangouts for the last 3-5 to make the jump.

[–] ArcaneSlime@lemmy.dbzer0.com 2 points 1 week ago (1 children)

Well that was nice of google to help lol. Good luck, I hope you can get them to switch!

I can never say that google never helped me with anything lol!

[–] CubitOom@infosec.pub 13 points 1 week ago (1 children)
[–] gedaliyah@lemmy.world 5 points 1 week ago (1 children)

Thanks, I'm going to check this out. Seems pretty straightforward which is good for the family to use

[–] Kyrex@lemmy.frozeninferno.xyz 2 points 5 days ago (1 children)

Just for transparency reasons, you might want to see this: https://discuss.privacyguides.net/t/simplex-chat-is-now-a-crypto-project-selling-tokens-and-nfts/32490/9

I prefer Delta Chat, but sadly video calls are experimental :(

And also there is no support for group calls.

[–] gedaliyah@lemmy.world 2 points 4 days ago (1 children)

Thanks for the heads up. This may still be the best option for me, but it is good to stay ahead of these things.

There is something in the quoted Masto thread that suggests realtime video is inherently insecure? I have to be honest that I didn't really follow it.

The info from SimpleX reads as though they are using crypto donations rather than more traceable cash, which mostly makes sense to me. The NFT tech that they describe is not for trading purposes, but to anonymously verify payments. It would be used to connect an account to a payment through zero or minimal knowledge. I don't really understand the tech, so please let me know if I even understand what they are suggesting.

This is just for family chat, so total black box security is not a priority.

[–] Kyrex@lemmy.frozeninferno.xyz 1 points 4 days ago (1 children)

Thanks for the heads up

You're welcome

There is something in the quoted Masto thread that suggests realtime video is inherently insecure?

Well, to keep it simple: Voice/Video Calls on SimpleX are private. The point Sarah (from Cwtch, another private messaging platform) was making in that toot is that it is hard to be truly anonymous on a video call due to network level limitations on how the app route calls. But that is mostly about having privacy from a state-level adversary, I mean don't even worry about this.

The info from SimpleX reads as though they are using crypto donations rather than more traceable cash

The criticism on the Privacy Guides forum is about the SimpleX team implementing a system based on crypto and NFTs to pay server operators, aiming to incentivize people to host more servers. But the catch here is that server operators get a 60% cut and the SimpleX team takes 40%, raising concerns about a possible enshittification, SimpleX will be more inclined to generate revenue instead of improving the app and bla bla bla.

Also on the other thread that the highlighted comment linked, a developer I respect called ignoramous points out that because SimpleX is based in the UK, it could be subject to the IPA law and there are transparency concerns about the SimpleX team not even caring to warn about it (if you care about that stuff).

And also SimpleX advertises as not having user identifiers but that's a lie because by default if you don't do anything about it the servers have your IP address (and your IP is a user identifier).

It's these little things that make me distrust the project. Personally I don't like Web3/crypto stuff, so I tend to avoid services that implement it.

This is just for family chat, so total black box security is not a priority.

Yeah i mean, for your use case, using SimpleX is totally fine. I just wanted to share the criticisms that exist around SimpleX.

[–] gedaliyah@lemmy.world 2 points 4 days ago

Thanks, I appreciate the detailed reply!

[–] ShellMonkey@piefed.socdojo.com 8 points 1 week ago (1 children)

If you feel like setting up a stun/turn server it's possible to set up your own using something like xmpp or next cloud talk. Works for individual accounts with friends if not a plug and go app.

[–] zdanger@lemmy.world 4 points 1 week ago

I have an ejabberd server setup for my family for this reason. Using the Conversations app off F-Droid and Gajim on desktops

[–] stepan@lemmy.cafe 5 points 1 week ago
[–] Zachariah@lemmy.world 4 points 1 week ago (2 children)

Threema

It’s around $5 for the app. No phone number needed. End-to-end encryption for chat and calls (audio/video). Desktop versions are in beta.

iOS and Android

[–] aaravchen@lemmy.zip 3 points 1 week ago (2 children)

Strongly recommend against Threema. Thier initial "custom protocol" had a bunch of basic mistakes in it, and thier mitigation doesnt completely solve the biggest ones. The original details can be seen here: https://breakingthe3ma.app/ I can't find the original blog post that did a more thorough breakdown.

[–] aaravchen@lemmy.zip 2 points 1 week ago
load more comments (1 replies)
[–] gedaliyah@lemmy.world 2 points 1 week ago

This looks promising. I Like that it has group video as well. Thanks.

[–] northernlights@lemmy.today 4 points 1 week ago* (last edited 1 week ago)

self hosted matrix instance here

[–] SpacePanda@mander.xyz 3 points 1 week ago (2 children)

Heres a cool new phone company that require no personal info Phreeli

[–] snowdriftissue@lemmy.world 5 points 1 week ago* (last edited 1 week ago) (1 children)

Phreeli is overpriced and doesn't actually grant much privacy despite their claims. Telecom providers can still have a field day with your location and sms/call data even if Phreeli isn't collecting that themselves, which is also really just a pinky promise at this point. There are also competing services already which don't require PII either but have more reasonable prices.

If you want a phone number just to sign up for signal or something just use jmp.chat smspool or mysudo depending on your needs.

load more comments (1 replies)
[–] white_nrdy@programming.dev 3 points 1 week ago (1 children)
[–] snowdriftissue@lemmy.world 2 points 4 days ago (1 children)

FYI cape was founded by a former Palantir exec. Might just mean they know what they're doing but I'd say it's a yellow flag at least. Also the main compelling feature (IMSI rotation) is currently pretty experimental

https://www.cape.co/blog/product-feature-identifier-rotation

[–] white_nrdy@programming.dev 1 points 4 days ago

Good to know. Thanks for the info. I haven't jumped yet, since wanna do research. But I agree that that is a yellow flag.

[–] Zak@lemmy.world 3 points 1 week ago (1 children)

It looks like Session has video calls in beta.

Note that most services requiring a phone number for registration don't actually require that phone number to be connected to a SIM card in the device you're using. That may be helpful depending on your use case.

[–] aaravchen@lemmy.zip 4 points 1 week ago* (last edited 1 week ago)

Do not use Session. It isnt even vaguely secure. Two part blog post from the researcher that single handedly disproved Session was secure or had any interest in being secure:

https://soatok.blog/2025/01/14/dont-use-session-signal-fork/

https://soatok.blog/2025/01/20/session-round-2/

EDIT: Formatting

[–] solrize@lemmy.ml 3 points 1 week ago

GNU Jami though I had trouble getting it to work reliably, and you have to install an app. YMMV.

Jitsi is decent, especially if you don't mind using their server meet.jit.si (may have changed by now). It uses WebRTC (i.e. you can use it with just a browser) which I think is preferable to a mobile app.

I think there will inherently be some lag if you're using a mobile phone at the client side, because of all the codecs, wifi latency etc.

This shouldn't be that hard a technical problem especially if you're ok with audio-only. I don't know why the existing programs all have probs in some areas. Jitsi is nice to use but a pain to self-host from what I can tell.

I have a self-hosted nextcloud that has a video chat feature (Nextcloud Talk) but it's not great.

I have been wanting to spend a chunk of time looking into the situation and finding a good answer, or at least identifying the trade-offs clearly.

[–] speq@lemmy.dbzer0.com 3 points 1 week ago (1 children)
load more comments (1 replies)
[–] Onomatopoeia@lemmy.cafe 2 points 1 week ago* (last edited 1 week ago)

I don't know how private/secure it really is, but Teleguard doesn't require a phone number.

I'd really like to see some research into them, though, to know how good/bad it is.

I don't know where to even start.

Alternative: XMPP has been around for 25+ years, can be self-hosted, there's numerous solutions available.

[–] lennybird@lemmy.world 2 points 1 week ago* (last edited 1 week ago) (1 children)

Side note but I was literally just thinking the other day that the accelerated rise of corruption and right-wing pivot of the globe also coincides with encrypted / anonymous communications. Mobsters and state actors must be having an absolute field day this past decade.

[–] surewhynotlem@lemmy.world 4 points 1 week ago

If the Epstein files have proven anything, it's that these idiots use plain text email.

[–] ragica@lemmy.ml 2 points 1 week ago (1 children)

NextCloud has end-to-end encrypted voice and video chat, and of course a whole bunch else, since people are mentioning self-hosting. The corresponding Android app "nextcloud talk".

[–] ArsonButCute@lemmy.dbzer0.com 3 points 1 week ago

Nextcloud talk does not support E2E on mobile, web client only. I was just setting it up the other day and was very surprised when I saw this.

load more comments
view more: next ›