Messaging Apps Overview
If you want to create a group chat for your XR group, there are loads of different options and making the right choice can be difficult. In this document, we will compare the four apps most commonly used by XR groups:
- WhatsApp,
- Telegram,
-
Mattermost
and -
Signal
- this should help you to decide which is best for your group and your purpose.So how to make the right choice? This could make the difference between success or failure of whatever you are planning. e.g.Are you a local group trying to encourage sociability and support?Are you arranging a surprise action?Are you supporting a rebel with a legal defense.Are you letting people know about a nationwide action and asking people to sign up to channels they can help in?
Have you thought about your purpose and communication needs? For example who needs to know, will you invite them and manage the membership, is it a long or short term chat? You may well choose more than one app, or more than one chat within that, and manage them differently for different reasons.
Whatever you do - make sure you don't just default to the same channel for all your conversations!
Telegram is used by XR UK for broadcasts.It’s an encrypted messaging service similar to WhatsApp but with greater flexibility and features. You can edit and pin messages, see the chat history, locate media and each chat can hold a large number of people. It’s also accessible on nearly any device. A limit on message word count can impact broadcast posts.Mattermost is XR’s main messaging app for working groups.It functions on its own server making it particularly secure. It is accessible on any device and has tons of flexible features and ways of storing and searching for information. The drawback is that it can be overwhelming in layout and content and requires time to master. It’s more similar to Slack or Discord.Signal is used by action planning groups.It’s the most secure encrypted chat, with a disappearing message function. It’s also visually clean and crisp. However, it’s not possible to pin or thread messages or edit your messages after 15 minutes, making it less useful for mass communications.Whatsapp is widely used by people outside of XR, but it is not secure and is limited in its functionalities so M&M does not advise using it for organising. It also doesn’t sync up with Mattermost or other XR broadcasts.We have broken down the comparison into four categories:Security- How easy is it for the authorities to access your personal information and read your messages? (see theAppendixfor more information). Can your messages disappear after a short time?Accessibility- How easy it is for rebels to use the app?Features- What features does the app have that allow you to organise effectively?Discoverability- How easy is it for rebels to find and join the group? (see theAppendixfor more information)
Using air-gapping to separate "need to know" informationThe best thing to do to protect ourselves and XR is to use a process called'Air-gapping'and is broadly used in government agencies, military and corporate sectors. It's a trick they don't want us activists to know and use!Air-gapping simply means we communicate any action planning and organising using aprivatechannel or direct message and then send specific details such as car registrations, credit card numbers and addresses using an app that is end-to-end encrypted and self-deleting messages (Signal is best). This creates a gap between the planning and those specific details and ensures that if an adversary manages to get their hands on one account, they don't have all the pieces of the puzzle to sabotage an action, nor pair up individuals with a particular action plan, nor put faces to words with intent to commit crime (etc).SummaryIf you don't want to read the
comparisondetailedpage in full,pages, here is a quick breakdown of the different scores for each messaging app:WhatsApp Telegram Mattermost Signal Security Accessibility Features Discoverability Ultimately which tool you decide to go with comes down to what you and the other people in your group are comfortable with. However, our recommendations can be summarised as:
If your group...
-
...organises lots of different things at once,
Useuse Mattermost. The extra features and discoverability should really help to make your group more productive. -
...organises a lot of actions,
Useuse Mattermost combined with Signal for the added security. Also don't forget to enable disappearing messages.
WhatsAppWhatsAppWhatsapp is widely used by people outside of XRBut it is not secure and is limited in its functionalities so M&M does not advise using it for organising. It also doesn’t sync up with Mattermost or other XR broadcasts.
Telegram is used by XR UK for broadcasts
It’s an encrypted messaging service similar to WhatsApp but with greater flexibility and features. You can edit and pin messages, see the chat history, locate media and each chat can hold a
hugelylargepopularnumber of people. It’s also accessible on nearly any device. A limit on message word count can impact broadcast posts.Mattermost is XR’s main messaging app
withforoverworking2groupsbillionIt
users.functionsIt'soneasyitstoownuseserver making it particularly secure. It is accessible on any device andthehasvast majoritytons ofrebelsflexiblewillfeaturesalreadyandhavewaysitofinstalledstoringonandtheir phones. Does this make it a good fitsearching foryour XR group?SecurityDespite being end-to-end encrypted, WhatsApp has a number of serious security issues that make it a poor choice for serious organisation in XR. To start with, it is owned by Facebook, a company whose income depends on collecting people's personalinformation.YouThecan read WhatsApp'sprivacy policyto get an idea of the sorts of information that they are collecting.Another serious and often overlooked security issue with WhatsAppdrawback is thatits end-to-end encryption often does not work. Most WhatsApp users enable an option called 'Chat Backup' so they can recover their messages in case they lose their phone. If this option is enabled, for even a single person in a WhatsApp group, then that means that all of the group's messages will be stored, unencrypted, on either a Google or Apple-owned server, freely accessible to the authorities.Can be compromised if malware is installed on the phone or computer, or other people have access to that device if they use your login. Or if you have infiltrators - no app protects against those.AccessibilityWhatsApp has a lot in common with other messaging apps so it is usually quite straightforward for rebels to learn how to use it. However, in order to sign up to WhatsApp you need a smartphone, which not all rebels will have access to. In order to use WhatsApp on a computer, the smartphone that it's linked to must be connected to the internet continuously, which is a hindrance.FeaturesYou can't save messages for later or mark them as unread so you constantly lose key info and can't find it again. The message box is small and you can't thread effectively so it is difficult to keep track of a conversation.DiscoverabilityWithin WhatsApp, group admins can create and share links that rebels can follow to sign up to the group. This provides a quick and easy way to invite new people. However, unless this link is published somewhere for rebels to find, it is impossible to find the group to join in the conversation.Other informationAnother issue with WhatsApp is that many people use it to speak to friends and family. Having XR-related chats on the same platform can put unnecessary stress on rebels who might want to temporarily 'switch off' XR communications in order to avoid burnout.TelegramTelegram is a great messaging app filled with features. In particular it has broadcast channels which can be fantastic for sharing information widely. But is it suitable for group chats?SecurityAlthough Telegram'swebsitewould have you believe otherwise, Telegram actually provides the worst security out of all the apps being compared here (source,source).One of the reasons why this is the case is becauseTelegram group chats are not end-to-end encrypted. Telegram does allow users to havesecretchats withself-destructing messages. However, this is not available for group chats so all of the messages that you send to a group chat will be stored on a server somewhere accessible to the authorities.Another serious problem with Telegram's security is thatmessages are sent using Telegram's ownprivate encryption protocol, as opposed to something used more widely. This means that it has not been as thoroughly tested and manysecurity vulnerabilitieshave been exposed in the past.Can be compromised if malware is installed on the phone or computer, or other people have access to that device if they use your login. Or if you have infiltrators - no app protects against those.AccessibilityTelegram is one of the most accessible apps available. You don't need a smartphone to sign up, just a phone number, andit can beusedoverwhelmingonpractically any device.Features
moreTelegram is very useful for broadcast channels (inwhichlayoutonlyandadminscontentcanandpost).requiresLinks for these can then be shared on wider channels (eg. Rebellion Broadcast). However, widely shared links attract spammers so they needtime tobemaster.carefullyIt’smoderated.DiscoverabilityTelegram has some excellent features that make group chats easysimilar tofindSlackandorjoin. Like Signal and WhatsApp, users can share a link to the chat that people can use to join it. However, you can also search for public Telegram channels from inside Telegram. This makes it easy to find and contact broadcast groups but can also lead to spam since anyone can join these channels - even if they are not a member of XR.Discord.Use this information to help youhide your details from spammers.And this information aboutremoving spamers.DrawbacksTelegramSignal isreally a social media platform and has a very ‘relaxed’ content moderation strategy- this means it is targeted by spammers if you have open channels. You have to be on top of moderating it!Some people find it difficult as you can't save messages for later or mark them as unread so you constantly lose key info and can't find it again.It's limited in terms of formatting messages and if you want to broadcast and add an image there's a character limit so you have to be able to either fit your message into that limit or miss out key info.MattermostMattermost is the messaging app that has been specially set up by XR for rebels to collaborate with each other. It is quite different to the other apps being discussed because it is designed to beused byteamsactioninplanninga workplace as well as for personal communications. Unlike the other tools, it also exclusively runs off ofrenewable energy.SecurityMattermost takes quite a different approach to security than the other apps. Instead of employing tactics such as end-to-end encryption and self-deleting messages, Mattermost prevents the authorities from accessing your group's messages by storing them on our own secure server.groupsIts great to use Mattermost as one of your channels if you are'Air-gappingto separate out information on a need to know basis.Another great advantage to using Mattermost is that if rebels ever get arrested, they can have theiraccounts temporarily suspendedso the police would not be able to read any messages even if they took a rebel'It’sphone. Once the rebel gets out of custody they can then have their account reactivated.Can be compromised if malware is installed on the phone or computer, or other people have access to that device if they use your login. Or if you have infiltrators - no app protects against those.PLEASE NOTE:If you are discussing anything 'spicy' / illegal, ensure all members of your private Mattermost channel or group Direct Message, have their email notifications set toNever. This adds a level of security as emails potentially can be compromised or 'hacked'. To check your notifications, select the Settings icon - Notifications - Email Notifications - Edit - Never - Save.AccessibilityYou do not need a smartphone to sign up - only an email address - and you can easily use it on any device unlike some other apps (e.g. WhatsApp) that only work if linked to your phone.If you have a computer it is very easy to use since you don't have to install anything - just use your browser. This also means that the messages can be easily read on a larger screen.FeaturesMattermost has by farthe mostfeaturessecureoutencryptedofchat,thewithappsabeingdisappearingcompared.messageItfunction.isIt’sspecificallyalsodesignedvisuallyforcleanuseandbycrisp.teams,However,asit’sopposednot possible topersonalpinmessaging,orand so has a number of advantages over the other messaging apps.For example, in Mattermostchats are organisedinto teams, public channels, private channels, and direct messages. This makes it easy to navigate between different chats. Also, Mattermost has a much better way to handle multiple conversations happening in the same channel at once. Whilst the other apps allow you to quote reply to individual messages, Mattermost has threaded conversations so you can see the full history.You are also able tosave messagesfor yourself which makes finding links and key info much easier,markthread messagesas unreadto revisit later,pinimportant messages so other people in the chat can find them easily andstore regularly used links such as minutes and eeting links in the Channel Headerfor everyone to use removing the need to bookmark/store those links on personal devices.Writing messages in Mattermost is also more powerful. Not only are you able toor edit your messages afteryou've15sentminutes,them,makingbutityoulesscanuseful for mass communications.
Where possible please use
Markdownexisting chats, rather than creating more new ones. Let’s work together toformatpreventyourinformationmessagesoverwhelm.inConsider
fancyoneways.closedGreatgroup chat formakingorganisingeye-catchingactionsannouncements!There is(usually asmall learning curve when you use Mattermost for the first time because, being designed for teams, it is laid out differently to the other apps. The design is practically identical to other popular messaging apps likeSlackandDiscordso if you are familiar with those you will have no issues.DiscoverabilityOne of the main reasons why XR uses Mattermost is to make groups discoverable.Every group that signs up to theXR UK Hubwill have public and private group chats created on Mattermost for them as the Hub does the 'heavy-lifting' for you. Having yourtemporary group onthesignalHubormeans the Hub does the work of creating yourprivate Mattermostchannels (as well as Cloud folderchannel) andForumonespaces) and the group's members will be joined automatically to the group's chats and at the same time, given access to the Cloud folder and Forums.Every group that signs up to the Hub gets a public groupopen chatcalled aRECEPTIONchannel so, if you're not a member of the group, contacting the group is as simple as searchingforandparticipationjoining the group's Reception. Having public discoverable Receptions is a major advantage over other apps as you can quickly see if a channel already exists for a specific group or topic. After joining a Reception you can then chat to the group and if you want to get more involved, you can be sent a Hub invite to the group which automatically adds you to the group's private channel. You can't search for chats(usually onWhatsApp and Signal and can only find bigTelegram/publicchannels on Telegram which leads to similar channels being regularly created for the same purposes on these other apps. This can lead to burn-out for chat Admins as there often isn't the capacity to administer these additional chats and in addition, rebels get added to multiple chats for the same group increasing the number of chats they need to monitor which quickly leads to individual burn-out.Mattermost)You can also use theHub Groups Listto find other groups and get information such as their email address, website and social media account.This is whywe strongly recommend that your group at least signs up to Mattermost and the Hubas it provides an easy way for other groups to get in touch with you.SignalSecuritySignal has the best security out of all of the apps compared here. Chats are alwaysend-to-end encryptedand you can enabledisappearing messages. Furthermore, Signal is actuallyopen-source. This means that anybody can look atSignal's source codeand verify that it is secure.Signal has been designed with security in mind, not bolted on afterwards, so the defaults are more likely to be goodSignal PIN is a useful application lock - though that isn't set up on the computer version.Signal encrypts local information on your computer or phone - so its only visible through the app or computer programme.Can be compromised if malware is installed on the phone or computer, or other people have access to that device if they use your login. Or if you have infiltrators - no app protects against those.AccessibilityPeople aren’t normally familiar with Signal before joining XR so may be a barrier to newcomers or less technical users.Has complicated features likeSignal PINwhich can be a barrier to use.It is available on computer - though its still tied to your phone number.FeaturesSignal has many of the same features as WhatsApp and Telegram. Whilst this makes it easy to learn how to use, it also means that:It is hard to write longer messages in the small message boxIt is difficult to keep track of multiple conversations happening at onceOnce you have sent a message it can't be editedCan be used on smartphone and computer versions.
DiscoverabilityJust like WhatsApp, you can share links to Signal group chats allowing people to quickly join the group. This is great for signing people up but it is hard for rebels to find this link and join the group.DrawbacksIt can be hard to know who is on a Signal chat - as names can be changed, and phone numbers hidden. Like all chat apps - be careful who you are talking to if that's important.Signal can also be problematic for rebels who have limited storage on their phones because the messages are stored locally instead of in the cloud, and this can take up a lot of space.The "metadata" about who's using the app and where they appear to be may be available to the authorities if they can track the connections to the central computer server, or get access to that server.AppendixWhy does security matter?Given the types of actions XR does,it is essential that the authorities do not get accessto rebels' personal information and private messages. This is for a number of reasons including:It could compromise the legal defences of arresteesIt could affect the right of rebels to stay in the UK
When discussing security in the context of messaging apps, there are two main things to think about:Can my messages get intercepted?Where are the messages getting stored?
The first of these is straightforward - to make sure messages cannot be intercepted we need to make sure that the app uses secure encryption when sending messages. The second, however, is a little more complicated as it depends on terms like "end-to-end encryption".End-to-end encryption is used by a number of messaging apps. What it means is that the messages are stored on the phones sending and receiving the messages, rather than on some server. This is generally good from a security standpoint because the authorities would need to access one of the phones in order to see the messages; something much harder for them to do than approach the owners of the server with a warrant.Another important things to consider when choosing a messaging app is whether or not you want to havedisappearing messages. These are messages that are automatically deleted after a certain time period, usually around a week or so. This can provide an additional layer of security on top of end-to-end encryption.Lastly, one extremely important thing to bear in mind when discussing security is thatby far the biggest weakness in XR's security is the people. It is very easy for an undercover police officer to pose as a protester and get themselves added to a 'secure' group chat. Once that happens, any security features of the messaging app become irrelevant since the authorities can see everything that is getting discussed.Why does discoverability matter?Discoverability - making your group easy to find and get in touch with - is a huge issue for XR. We are a decentralised organisation so each group has the freedom to decide how they want to organise and communicate. This is fantastic from the point of view ofmitigating for power, but it makes it difficult to share knowledge and skills across groups. To try and reduce this problem, it is important when choosing a messaging app to think about how other rebels and groups can find the group and get in touch with you.Alternative messaging appsThere are many other messaging apps used by rebels in XR. We have just chosen to focus on the most commonly used ones here. Some other popular choices include:Discord: An app with some great features butextremely poor security and privacy.
Useful links