mirror of
https://github.com/privacyguides/i18n.git
synced 2025-08-30 01:49:15 +00:00
289 lines
21 KiB
Markdown
289 lines
21 KiB
Markdown
---
|
||
meta_title: "The Best Private Instant Messengers - Privacy Guides"
|
||
title: "תקשורת בזמן אמת"
|
||
icon: material/chat-processing
|
||
description: Encrypted messengers like Signal and SimpleX keep your sensitive communications secure from prying eyes.
|
||
cover: real-time-communication.webp
|
||
---
|
||
|
||
<small>Protects against the following threat(s):</small>
|
||
|
||
- [:material-bug-outline: התקפות פסיביות](basics/common-threats.md#security-and-privacy ""){.pg-orange}
|
||
- [:material-server-network: ספקי שירות](basics/common-threats.md#privacy-from-service-providers ""){.pg-teal}
|
||
- [:material-eye-outline: מעקב המוני](basics/common-threats.md#mass-surveillance-programs ""){.pg-blue}
|
||
- [:material-account-cash: קפיטליזם מעקב](basics/common-threats.md#surveillance-as-a-business-model ""){.pg-brown}
|
||
|
||
These are our recommendations for encrypted **real-time communication**. These come in the form of many [types of communication networks](./advanced/communication-network-types.md).
|
||
|
||
[:material-movie-open-play-outline: Video: It's time to stop using SMS](https://www.privacyguides.org/videos/2025/01/24/its-time-to-stop-using-sms-heres-why/ ""){.md-button}
|
||
|
||
## מסנג'רים מוצפנים
|
||
|
||
מסנג'רים אלה נהדרים לאבטחת התקשורת הרגישה שלך.
|
||
|
||
### Signal
|
||
|
||
<div class="admonition recommendation" markdown>
|
||
|
||
{ align=right }
|
||
|
||
**Signal** היא אפליקציה לנייד שפותחה על ידי סיגנל מסנג'ר LLC. The app provides instant messaging and calls secured with the Signal Protocol, an extremely secure encryption protocol which supports forward secrecy[^1] and post-compromise security.[^2]
|
||
|
||
[:octicons-home-16: Homepage](https://signal.org){ .md-button .md-button--primary }
|
||
[:octicons-eye-16:](https://signal.org/legal/#privacy-policy){ .card-link title="Privacy Policy" }
|
||
[:octicons-info-16:](https://support.signal.org){ .card-link title="Documentation" }
|
||
[:octicons-code-16:](https://github.com/signalapp){ .card-link title="Source Code" }
|
||
[:octicons-heart-16:](https://signal.org/donate){ .card-link title="Contribute" }
|
||
|
||
<details class="downloads" markdown>
|
||
<summary>Downloads</summary>
|
||
|
||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms)
|
||
- [:simple-appstore: App Store](https://apps.apple.com/app/id874139669)
|
||
- [:simple-github: GitHub](https://github.com/signalapp/Signal-Android/releases)
|
||
- [:simple-android: Android](https://signal.org/android/apk)
|
||
- [:fontawesome-brands-windows: Windows](https://signal.org/download/windows)
|
||
- [:simple-apple: macOS](https://signal.org/download/macos)
|
||
- [:simple-linux: Linux](https://signal.org/download/linux)
|
||
|
||
</details>
|
||
|
||
</div>
|
||
|
||
Signal requires your phone number for registration, however you should create a username to hide your phone number from your contacts:
|
||
|
||
1. In Signal, open the app's settings and tap your account profile at the top.
|
||
2. Tap **Username** and choose **Continue** on the "Set up your Signal username" screen.
|
||
3. Enter a username. Your username will always be paired with a unique set of digits to keep your username unique and prevent people from guessing it, for example if you enter "John" your username might end up being `@john.35`. By default, only 2 digits are paired with your username when you create it, but you can add more digits until you reach the username length limit (32 characters).
|
||
4. Go back to the main app settings page and select **Privacy**.
|
||
5. Select **Phone Number**
|
||
6. Change the **Who Can See My Number** setting to: **Nobody**
|
||
|
||
You can optionally change the **Who Can Find Me By Number** setting to **Nobody** as well, if you want to prevent people who already have your phone number from discovering your Signal account/username.
|
||
|
||
Contact lists on Signal are encrypted using your Signal PIN and the server does not have access to them. גם פרופילים אישיים מוצפנים ומשותפים רק עם אנשי קשר שאיתם אתה משוחח בצ'אט. Signal supports [private groups](https://signal.org/blog/signal-private-group-system), where the server has no record of your group memberships, group titles, group avatars, or group attributes. Signal has minimal metadata when [Sealed Sender](https://signal.org/blog/sealed-sender) is enabled. כתובת השולח מוצפנת יחד עם גוף ההודעה, ורק כתובת הנמען גלויה לשרת. 'שולח אטום' זמין רק עבור אנשים ברשימת אנשי הקשר שלך, אך ניתן להפוך אותו לזמין עבור כל הנמענים עם סיכון מוגבר לקבלת דואר זבל.
|
||
|
||
הפרוטוקול היה מבוקר [באופן עצמאי](https://eprint.iacr.org/2016/1013.pdf) בשנת 2016. The specification for the Signal protocol can be found in their [documentation](https://signal.org/docs).
|
||
|
||
יש לנו כמה טיפים נוספים להגדרה והקשחה של התקנת הSignal שלך:
|
||
|
||
[תצורת סיגנל והקשחה :material-arrow-right-drop-circle:](https://blog.privacyguides.org/2022/07/07/signal-configuration-and-hardening)
|
||
|
||
#### Molly (Android)
|
||
|
||
If you use Android and your threat model requires protecting against [:material-target-account: Targeted Attacks](basics/common-threats.md#attacks-against-specific-individuals ""){.pg-red} you may consider using this alternative app, which features a number of security and usability improvements, to access the Signal network.
|
||
|
||
<div class="admonition recommendation" markdown>
|
||
|
||
{ align=right }
|
||
|
||
**Molly** is an alternative Signal client for Android which allows you to encrypt the local database with a passphrase at rest, to have unused RAM data securely shredded, to route your connection via Tor, and [more](https://blog.privacyguides.org/2022/07/07/signal-configuration-and-hardening#privacy-and-security-features). It also has usability improvements including scheduled backups, automatic locking, [UnifiedPush](https://unifiedpush.org) support, and the ability to use your Android phone as a linked device instead of the primary device for a Signal account.
|
||
|
||
[:octicons-home-16: Homepage](https://molly.im){ .md-button .md-button--primary }
|
||
[:octicons-eye-16:](https://signal.org/legal/#privacy-policy){ .card-link title="Privacy Policy" }
|
||
[:octicons-info-16:](https://github.com/mollyim/mollyim-android/wiki){ .card-link title="Documentation" }
|
||
[:octicons-code-16:](https://github.com/mollyim/mollyim-android){ .card-link title="Source Code" }
|
||
[:octicons-heart-16:](https://opencollective.com/mollyim){ .card-link title="Contribute" }
|
||
|
||
<details class="downloads" markdown>
|
||
<summary>Downloads</summary>
|
||
|
||
- [:simple-fdroid: F-Droid](https://molly.im/fdroid)
|
||
- [:octicons-moon-16: Accrescent](https://accrescent.app/app/im.molly.app)
|
||
- [:simple-github: GitHub](https://github.com/mollyim/mollyim-android/releases)
|
||
|
||
</details>
|
||
|
||
</div>
|
||
|
||
Molly is updated every two weeks to include the latest features and bug fixes from Signal. The exception is security issues, which are patched as soon as possible. That said, you should be aware that there might be a slight delay compared to upstream, which may affect actions such as [migrating from Signal to Molly](https://github.com/mollyim/mollyim-android/wiki/Migrating-From-Signal#migrating-from-signal).
|
||
|
||
Note that you are trusting multiple parties by using Molly, as you now need to trust the Signal team *and* the Molly team to deliver safe and timely updates.
|
||
|
||
There is a version of Molly called **Molly-FOSS** which removes proprietary code like the Google services used by both Signal and Molly, at the expense of some features like battery-saving push notifications via Google Play Services. You can regain push notifications without Google Play Services in either version of Molly with [UnifiedPush](https://unifiedpush.org), but it requires running a separate program called [Mollysocket](https://github.com/mollyim/mollysocket) on another device to function. Mollysocket can either be self-hosted on a separate computer or server (VPS), or alternatively a public Mollysocket instance can be used ([step-by-step tutorial, in German](https://kuketz-blog.de/messenger-wechsel-von-signal-zu-molly-unifiedpush-mollysocket-ntfy)).
|
||
|
||
All versions of Molly provide the same security improvements.
|
||
|
||
Molly and Molly-FOSS support [reproducible builds](https://github.com/mollyim/mollyim-android/tree/main/reproducible-builds), meaning it's possible to confirm that the compiled APKs match the source code.
|
||
|
||
### SimpleX Chat
|
||
|
||
<div class="admonition recommendation" markdown>
|
||
|
||
{ align=right }
|
||
|
||
**SimpleX Chat** is an instant messenger that doesn't depend on any unique identifiers such as phone numbers or usernames. Its decentralized network makes SimpleX Chat an effective tool against [:material-close-outline: Censorship](basics/common-threats.md#avoiding-censorship){ .pg-blue-gray }.
|
||
|
||
[:octicons-home-16: Homepage](https://simplex.chat){ .md-button .md-button--primary }
|
||
[:octicons-eye-16:](https://simplex.chat/privacy){ .card-link title="Privacy Policy" }
|
||
[:octicons-info-16:](https://simplex.chat/docs/simplex.html){ .card-link title="Documentation" }
|
||
[:octicons-code-16:](https://github.com/simplex-chat){ .card-link title="Source Code" }
|
||
|
||
<details class="downloads" markdown>
|
||
<summary>Downloads</summary>
|
||
|
||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=chat.simplex.app)
|
||
- [:simple-appstore: App Store](https://apps.apple.com/app/id1605771084)
|
||
- [:simple-github: GitHub](https://github.com/simplex-chat/simplex-chat/releases)
|
||
- [:fontawesome-brands-windows: Windows](https://simplex.chat/downloads/#desktop-app)
|
||
- [:simple-apple: macOS](https://simplex.chat/downloads/#desktop-app)
|
||
- [:simple-linux: Linux](https://simplex.chat/downloads/#desktop-app)
|
||
|
||
</details>
|
||
|
||
</div>
|
||
|
||
SimpleX provides direct messaging, group chats, and E2EE calls secured with the [SimpleX Messaging Protocol](https://github.com/simplex-chat/simplexmq/blob/stable/protocol/simplex-messaging.md), which uses double ratchet encryption with quantum resistance. Additionally, SimpleX Chat provides metadata protection by using unidirectional ["simplex queues"](https://github.com/simplex-chat/simplexmq/blob/stable/protocol/simplex-messaging.md#simplex-queue) to deliver messages.
|
||
|
||
To participate in conversations on SimpleX Chat, you must scan a QR code or click an invite link. This allows you to verify a contact out-of-band, which protects against man-in-the-middle attacks by network providers. Your data can be exported and imported onto another device, as there are no central servers where this is backed up.
|
||
|
||
You can find a full list of the privacy and security [features](https://github.com/simplex-chat/simplex-chat#privacy-and-security-technical-details-and-limitations) implemented in SimpleX Chat on the app's repository.
|
||
|
||
SimpleX Chat was independently audited in [July 2024](https://simplex.chat/blog/20241014-simplex-network-v6-1-security-review-better-calls-user-experience.html#simplex-cryptographic-design-review-by-trail-of-bits) and in [October 2022](https://simplex.chat/blog/20221108-simplex-chat-v4.2-security-audit-new-website).
|
||
|
||
### Briar
|
||
|
||
<div class="admonition recommendation" markdown>
|
||
|
||
{ align=right }
|
||
|
||
**Briar** is an encrypted instant messenger that [connects](https://briarproject.org/how-it-works) to other clients using the Tor Network, making it an effective tool at circumventing [:material-close-outline: Censorship](basics/common-threats.md#avoiding-censorship){ .pg-blue-gray }. Briar יכול גם להתחבר באמצעות Wi-Fi או Bluetooth כאשר הוא נמצא בקרבה מקומית. מצב הרשת המקומי של Briar יכול להיות שימושי כאשר זמינות האינטרנט היא בעיה.
|
||
|
||
[:octicons-home-16: Homepage](https://briarproject.org){ .md-button .md-button--primary }
|
||
[:octicons-eye-16:](https://briarproject.org/privacy-policy){ .card-link title="Privacy Policy" }
|
||
[:octicons-info-16:](https://code.briarproject.org/briar/briar/-/wikis/home){ .card-link title="Documentation" }
|
||
[:octicons-code-16:](https://code.briarproject.org/briar/briar){ .card-link title="Source Code" }
|
||
[:octicons-heart-16:](https://briarproject.org){ .card-link title="Donation options are listed on the bottom of the homepage" }
|
||
|
||
<details class="downloads" markdown>
|
||
<summary>Downloads</summary>
|
||
|
||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=org.briarproject.briar.android)
|
||
- [:fontawesome-brands-windows: Windows](https://briarproject.org/download-briar-desktop)
|
||
- [:simple-linux: Linux](https://briarproject.org/download-briar-desktop)
|
||
- [:simple-flathub: Flathub](https://flathub.org/apps/details/org.briarproject.Briar)
|
||
|
||
</details>
|
||
|
||
</div>
|
||
|
||
To add a contact on Briar, you must both add each other first. You can either exchange `briar://` links or scan a contact’s QR code if they are nearby.
|
||
|
||
The client software was independently [audited](https://briarproject.org/news/2017-beta-released-security-audit), and the anonymous routing protocol uses the Tor network which has also been audited.
|
||
|
||
Briar has a fully [published specification](https://code.briarproject.org/briar/briar-spec).
|
||
|
||
Briar supports forward secrecy[^1] by using the Bramble [Handshake](https://code.briarproject.org/briar/briar-spec/blob/master/protocols/BHP.md) and [Transport](https://code.briarproject.org/briar/briar-spec/blob/master/protocols/BTP.md) protocol.
|
||
|
||
## אפשרויות נוספות
|
||
|
||
<div class="admonition warning" markdown>
|
||
<p class="admonition-title">Warning</p>
|
||
|
||
These messengers do not have forward secrecy[^1], and while they fulfill certain needs that our previous recommendations may not, we do not recommend them for long-term or sensitive communications. כל פשרה מרכזית בין מקבלי ההודעות תשפיע על הסודיות של **כל** התקשורת העבר.
|
||
|
||
</div>
|
||
|
||
### Element
|
||
|
||
<div class="admonition recommendation" markdown>
|
||
|
||
{ align=right }
|
||
|
||
**Element** is the flagship client for the [Matrix](https://matrix.org/docs/chat_basics/matrix-for-im) protocol, an [open standard](https://spec.matrix.org/latest) for secure decentralized real-time communication.
|
||
|
||
Messages and files shared in private rooms (those which require an invite) are by default E2EE, as are one-to-one voice and video calls.
|
||
|
||
[:octicons-home-16: Homepage](https://element.io){ .md-button .md-button--primary }
|
||
[:octicons-eye-16:](https://element.io/privacy){ .card-link title="Privacy Policy" }
|
||
[:octicons-info-16:](https://element.io/help){ .card-link title="Documentation" }
|
||
[:octicons-code-16:](https://github.com/element-hq){ .card-link title="Source Code" }
|
||
|
||
<details class="downloads" markdown>
|
||
<summary>Downloads</summary>
|
||
|
||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=im.vector.app)
|
||
- [:simple-appstore: App Store](https://apps.apple.com/app/id1083446067)
|
||
- [:simple-github: GitHub](https://github.com/element-hq/element-android/releases)
|
||
- [:fontawesome-brands-windows: Windows](https://element.io/download)
|
||
- [:simple-apple: macOS](https://element.io/download)
|
||
- [:simple-linux: Linux](https://element.io/download)
|
||
- [:octicons-globe-16: Web](https://app.element.io)
|
||
|
||
</details>
|
||
|
||
</div>
|
||
|
||
Profile pictures, reactions, and nicknames are not encrypted.
|
||
|
||
With the integration of [Element Call](https://element.io/blog/we-have-lift-off-element-x-call-and-server-suite-are-ready) into Element's web app, desktop apps, and its [rewritten mobile apps](https://element.io/blog/element-x-experience-the-future-of-element), group VoIP and video calls are E2EE by default.
|
||
|
||
The Matrix protocol itself [theoretically supports forward secrecy](https://gitlab.matrix.org/matrix-org/olm/blob/master/docs/megolm.md#partial-forward-secrecy)[^1], however this is [not currently supported in Element](https://github.com/vector-im/element-web/issues/7101) due to it breaking some aspects of the user experience such as key backups and shared message history.
|
||
|
||
The protocol was independently [audited](https://matrix.org/blog/2016/11/21/matrixs-olm-end-to-end-encryption-security-assessment-released-and-implemented-cross-platform-on-riot-at-last) in 2016. The specification for the Matrix protocol can be found in their [documentation](https://spec.matrix.org/latest). The [Olm cryptographic ratchet](https://matrix.org/docs/matrix-concepts/end-to-end-encryption) used by Matrix is an implementation of Signal’s [Double Ratchet algorithm](https://signal.org/docs/specifications/doubleratchet).
|
||
|
||
### Session
|
||
|
||
<div class="admonition recommendation" markdown>
|
||
|
||
{ align=right }
|
||
|
||
**Session** הוא מסנג'ר מבוזר עם התמקדות בתקשורת פרטית, מאובטחת ואנונימית. Session מציע תמיכה בהודעות ישירות, צ'אטים קבוצתיים ושיחות קוליות.
|
||
|
||
Session uses the decentralized [Oxen Service Node Network](https://oxen.io) to store and route messages. כל הודעה מוצפנת מנותבת דרך שלושה צמתים ברשת Oxen Service Node Network, מה שהופך את זה למעשה לבלתי אפשרי עבור הצמתים לאסוף מידע משמעותי על המשתמשים ברשת.
|
||
|
||
[:octicons-home-16: Homepage](https://getsession.org){ .md-button .md-button--primary }
|
||
[:octicons-eye-16:](https://getsession.org/privacy-policy){ .card-link title="Privacy Policy" }
|
||
[:octicons-info-16:](https://getsession.org/faq){ .card-link title="Documentation" }
|
||
[:octicons-code-16:](https://github.com/oxen-io){ .card-link title="Source Code" }
|
||
|
||
<details class="downloads" markdown>
|
||
<summary>Downloads</summary>
|
||
|
||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=network.loki.messenger)
|
||
- [:simple-appstore: App Store](https://apps.apple.com/app/id1470168868)
|
||
- [:simple-github: GitHub](https://github.com/oxen-io/session-android/releases)
|
||
- [:fontawesome-brands-windows: Windows](https://getsession.org/download)
|
||
- [:simple-apple: macOS](https://getsession.org/download)
|
||
- [:simple-linux: Linux](https://getsession.org/download)
|
||
|
||
</details>
|
||
|
||
</div>
|
||
|
||
Session allows for E2EE in one-on-one chats or closed groups which allow for up to 100 members. It is also possible to [set up](https://docs.oxen.io/oxen-docs/products-built-on-oxen/session/guides/open-group-setup) or join open groups which can host thousands of members, but messages in these open groups are **not** end-to-end encrypted between participants.
|
||
|
||
Session was previously based on Signal Protocol before replacing it with their own in December 2020. Session Protocol does [not](https://getsession.org/blog/session-protocol-technical-information) support forward secrecy.[^1]
|
||
|
||
Oxen requested an independent audit for Session in March 2020. The audit [concluded](https://getsession.org/session-code-audit) in April 2021:
|
||
|
||
> The overall security level of this application is good and makes it usable for privacy-concerned people.
|
||
|
||
Session has a [white paper](https://arxiv.org/pdf/2002.04609.pdf) describing the technical details of the app and protocol.
|
||
|
||
## קריטריונים
|
||
|
||
**שים לב שאיננו קשורים לאף אחד מהפרויקטים שאנו ממליצים עליהם.** בנוסף ל [הקריטריונים הסטנדרטיים שלנו](about/criteria.md), פיתחנו סט ברור של דרישות כדי לאפשר לנו לספק המלצות אובייקטיביות. אנו מציעים לך להכיר את הרשימה הזו לפני שתבחר להשתמש בפרויקט, ולערוך מחקר משלך כדי להבטיח שזו הבחירה הנכונה עבורך.
|
||
|
||
### דרישות מינימליות
|
||
|
||
- Has open-source clients.
|
||
- Does not require sharing personal identifiers (phone numbers or emails in particular) with contacts.
|
||
- Uses E2EE for private messages by default.
|
||
- Supports E2EE for all messages.
|
||
- Has been independently audited.
|
||
|
||
### המקרה הטוב ביותר
|
||
|
||
הקריטריונים הטובים ביותר שלנו מייצגים את מה שהיינו רוצים לראות מהפרויקט המושלם בקטגוריה זו. ייתכן שההמלצות שלנו לא יכללו חלק מהפונקציונליות הזו או את כולה, אך אלו שכן כן עשויות לדרג גבוה יותר מאחרות בדף זה.
|
||
|
||
- Supports forward secrecy[^1]
|
||
- Supports Future Secrecy (Post-Compromise Security)[^2]
|
||
- Has open-source servers.
|
||
- Decentralized, i.e. [federated or P2P](advanced/communication-network-types.md).
|
||
- Uses E2EE for all messages by default.
|
||
- Supports Linux, macOS, Windows, Android, and iOS.
|
||
|
||
[^1]: [Forward secrecy](https://en.wikipedia.org/wiki/Forward_secrecy) is where keys are rotated very frequently, so that if the current encryption key is compromised, it does not expose **past** messages as well.
|
||
[^2]: Future Secrecy (or Post-Compromise Security) is a feature where an attacker is prevented from decrypting **future** messages after compromising a private key, unless they compromise more session keys in the future as well. This effectively forces the attacker to intercept all communication between parties, since they lose access as soon as a key exchange occurs that is not intercepted.
|