Security Applications

General information

https://heimdalsecurity.com/blog/end-to-end-encryption-e2ee/

Applications

“After analyzing and comparing these ten secure messaging apps, we believe that Signal is the best one to choose. It is 100% open source, and they are funded by donations and grants instead of corporate money that is dependent on user- data. Since it was created by a group called Open Whisper Systems, is was written by and has the support of some of the world’s top experts on privacy and security. Their implementation has been reviewed by the most well-known security experts and cryptographers. The messaging protocol integrated into Signal is considered to be the most secure one out of anything on the market today, proven by the fact that other services use the app’s messaging protocol for their most secure modes, including Wire, Skype’s Private Conversations and Facebook Messenger’s Secret Conversations.”
– https://getstream.io/blog/most-secure-messaging-apps/

https://websetnet.net/speek-chat-privacy-focused-messenger-built-on-tor-network/ looks interesting

https://heimdalsecurity.com/blog/the-best-encrypted-messaging-apps/ many evaluations

https://www.expressvpn.com/blog/best-messaging-apps/

https://www.softpedia.com/get/Internet/Chat/Instant-Messaging/Ricochet.shtml

List of found messaging software that is intended to keep messages more secure (private).

CoverMe
Dust
Jabber/OTR (If you need a protocol that can be trusted to keep out even the most powerful of adversaries, [this] is the best choice.– https://www.expressvpn.com/blog/best-messaging-apps/)
KakaoTalk
LINE
Messages, AKA iMessage (Limited to iOS
Private Now
Private
Ricochet “If you need true anonymity on the internet, then Tor, as always, is your best bet. Ricochet is a cross-platform (desktop only) messenger which allows anonymous communication with contacts via a Tor Hidden service.”– https://proprivacy.com/privacy-service/comparison/5-secure-private-messengers
This software has been superseded by “Ricochet Refresh,” which is actively maintained. Signal Private Messenger)
Signal
Silence
SureSpot
Telegram (“We can’t recommend Telegram for secure messaging. Consider deleting Telegram if you’re using it for secure messaging.”–https://www.expressvpn.com/blog/best-messaging-apps/)
Threema (“ If you do use Threema, bear in mind that the app collects significant amounts of metadata that it will provide to government authorities if a request is made.” – https://www.expressvpn.com/blog/best-messaging-apps/ )
Viber “Group chats will not be encrypted, so if you want an app that encrypts both, don’t use Viber.”
WhatsApp (“if you want secure messaging, consider deleting WhatsApp.” – https://www.expressvpn.com/blog/best-messaging-apps/)
Wicker
Wicker Me
Wickr-Secure Messenger
Wire (“Would we recommend this app? Not until it stops collecting personally identifiable metadata.” – https://www.expressvpn.com/blog/best-messaging-apps/ )
https://www.eff.org/deeplinks/2022/03/telegram-harm-reduction-users-russia-and-ukraine Critique of Telegraph.

Some of the above applications appear to go by more than one name.

One piece of software seems extremely secure, Ricochet Refresh.

How to chat using Ricochet

It's not completely clear because it gets sketchy toward the end, but you can get some help on using Ricochet Refresh here:

https://www.downloadsource.net/how-to-chat-anonymously-over-the-tor-network/n/11884/

You should be able to download Ricochet Refresh by going to this URL:
https://www.ricochetrefresh.net

Ricochet Update and Other Information

'https://www.wired.com/2014/09/new-encrypted-chat-program-thwarts-nsa-eliminating-metadata/
“Ricochet doesn't communicate with central servers like Wickr and doesn't allow direct connections like Tox. Instead, each desktop client operates as a Tor hidden service and uses the Tor network to transmit encrypted and anonymous communication. The client generates a random 16-character public key or ID to authenticate the user and establish the channel for secure communication in a simple way that doesn't require users to install Tor separately. Generating the public key occurs with a single click, and the key is stored on the user's machine, or on a USB drive so a user can communicate with Ricochet from different machines.”

“When someone wants to communicate with another Ricochet user, their client reaches out through the Tor network to arrange a rendezvous point. The client first connects anonymously via three hops to a Tor relay, which doesn't know where the connection originated. That relay looks up the other person's Ricochet client ID—published by the person in their Twitter profile or email signature—and obtains a list of other Tor relays that can be used to reach out to the other party's Ricochet client—a list that changes every 24 hours. When the message reaches the other Ricochet client indicating a neutral relay for the rendezvous, the two clients meet there to exchange communication. But at any time, there are at least six relays between the two users, three on each side.”

“So, to start chatting with someone over Ricochet, you should first know his/her unique Ricochet ID that is being auto-generated at the time of the Ricochet Installation.

“Moreover, once the connection is terminated by either the sender or the receiver, the remaining one would not be able to communicate or send messages to the other.” – https://thehackernews.com/2016/02/ricochet-secure-messenger.html

You should be able to download Ricochet Refresh by going to this URL:
https://www.ricochetrefresh.net