| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| e2ee [2026/06/19 12:12] – [What common tools are end to end encrypted] usera | e2ee [2026/06/19 12:28] (current) – usera |
|---|
| ===== What common tools are end to end encrypted ===== | ===== What common tools are end to end encrypted ===== |
| |
| Messaging apps such as Signal, WhatsApp and Facebook Messenger are end to end encrypted. However, Signal is widely considered the safest tool for messaging, as it makes a lot of effort to reduce the metadata it collects compared to the other two. | Messaging apps such as [[https://signal.org/download/|Signal]], WhatsApp and Facebook Messenger are end to end encrypted. However, Signal is widely considered the safest tool for messaging, as it makes a lot of effort to reduce the metadata it collects compared to the other two. If you do not have a smartphone, or if you wish to use a burner for your signal account, please follow [[signal_install_burner|those instructions]] to install signal without a smartphone. [[https://web.telegram.org/|Telegram]] is NOT end to end encrypted |
| |
| [[http://cryptpad.fr/|Cryptpad]] is an end to end encrypted, open source and possible to self host service for doing collaborative work on Office documents, or collaborative cloud. | [[http://cryptpad.fr/|Cryptpad]] is an end to end encrypted, open source and possible to self host service for doing collaborative work on Office documents, or collaborative cloud. |
| [[https://github.com/magic-wormhole/magic-wormhole|Magic wormhole]] is an open source software used for the same purpose than LUFI, but which the built in possibility of using the TOR network for sharing the file, adding anonymity. It requires that the sender and receiver execute a command at the same time though. | [[https://github.com/magic-wormhole/magic-wormhole|Magic wormhole]] is an open source software used for the same purpose than LUFI, but which the built in possibility of using the TOR network for sharing the file, adding anonymity. It requires that the sender and receiver execute a command at the same time though. |
| |
| Mails are NOT end to end encrypted. No, not even if you use [[https://riseup.net/|Riseup]]. You can set up PGP with any standard mail provider to have End to End encryption, but this system is nowadays recognized as very complicated, error prone and not very safe. As an example of big limitations, it does not encrypts the subject line, which is quite an important piece of information. If you are interested, you can read several of the critical [[https://www.latacora.com/blog/2019/07/16/the-pgp-problem/|pieces]] written those past years against PGP by clever people. If you use [[https://mail.proton.me/|ProtonMail]] you have PGP end to End encrypted mails only if you communicate to another Protonmail account. If you use [[https://tuta.com/secure-email|Tuta]] you have end to end encrypted mails (with something more robust than PGP it seems) only if you communicate with another tuta user. This is why it is usually recommended to consider Signal as a safer alternative than mails altogether. This is also because of those problems that modern companies set up a secure messaging tool in their website instead of a plain mail. If you still want to try out PGP (which has other features that are more useful than end to end encrypted mails, such as verifying downloads, and is still interesting for pedagogic reasons) you can check my workshop [[pgp_workshop|here]]. | Mails are NOT end to end encrypted. No, not even if you use [[https://riseup.net/|Riseup]]. You can set up PGP with any standard mail provider to have End to End encryption, but this system is nowadays recognized as very complicated, error prone and not very safe. As an example of big limitations, it does not encrypt the subject line, which is quite an important piece of information. If you are interested, you can read several of the critical [[https://www.latacora.com/blog/2019/07/16/the-pgp-problem/|pieces]] written those past years against PGP by clever people. If you use [[https://mail.proton.me/|ProtonMail]] you have PGP end to End encrypted mails only if you communicate to another Protonmail account. If you use [[https://tuta.com/secure-email|Tuta]] you have end to end encrypted mails (with something more robust than PGP it seems) only if you communicate with another tuta user. This is why it is usually recommended to consider Signal as a safer alternative than mails altogether. This is also because of those problems that modern companies set up a secure messaging tool in their website instead of a plain mail. If you still want to try out PGP (which has other features that are more useful than end to end encrypted mails, such as verifying downloads, and is still interesting for pedagogic reasons) you can check my workshop [[pgp_workshop|here]]. |
| |
| It goes without saying, but SMS and regular phone calls are not only not end to end encrypted, but also not encrypted at all, in any ways. Please avoid them. | It goes without saying, but SMS and regular phone calls are not only not end to end encrypted, but also not encrypted at all, in any ways. Please avoid them. |
| |
| | Regarding chat softwares, [[https://discord.com/|Discord]] is not End to End encrypted either. [[https://mattermost.com/|Mattermost]] is open source, self hosted but also not end to end encrypted. [[https://www.rocket.chat/|RocketChat]] is also open source, self hosted and not end to end encrypted by default, although it is possible for the administrator to configure it to be end to end encrypted. [[https://matrix.org/|Matrix]] is open source, self hosted, federated and end to end encrypted. |
| |
| | |
| | ===== How to "manually" use a unknown cloud service in an end to end encrypted way ===== |
| | |
| | It is still OK to use unsafe and not end to end encrypted clouds like google drive, onecloud or others if you stick to this rule: **always encrypt your files and folders before putting them on those unsafe clouds**. |
| | How to do this ? We are going to introduce two very useful encryption tools, which are open source and cross-platform: |
| | [[https://veracrypt.io/en/Downloads.html|Veracrypt]] and [[https://cryptomator.org/|Cryptomator]] |
| |