By Ndifreke Ating, Suraj Aderoju, and Dag-Emmanuel Ankrah
Message-based applications have become a crucial element of our everyday communication in the digital era. With billions of users each, WhatsApp and Telegram are two of the most widely used messaging services worldwide for both personal and business communication. Examining how these applications do in terms of safeguarding user information is vital given the growing worries around data privacy and security. We will examine the security features and procedures of WhatsApp and Telegram in this comparison.
Encryption from End to End
WhatsApp: By using end-to-end encryption, WhatsApp assures that no third party, not even the service itself, can read or listen to the messages you send. Messages are locked up in this system, and only you and the recipient have the unique key needed to unlock and read them. WhatsApp employs end-to-end encryption (E2EE) to make certain that only the sender and recipient may read messages [1].
Telegram: End-to-end encryption is also a feature of the Telegram messaging app, but it is not enabled by default and must be enabled by users. Users must initiate a “Secret Chat” in order to activate E2EE [2].
Cryptography Protocols
WhatsApp: WhatsApp’s Signal Protocol employs a number of cryptographic approaches, beginning with public-key encryption. Each user is given a pair of randomly generated keys. The concept at work here is that the sender encrypts messages using the recipient’s public key. On the other end, the recipient decrypts it using their private key. WhatsApp never has access to the private key because it is generated by your device. WhatsApp signal encryption is considered the single point of failure present in typical public encryption keys. To address this, signal encryption employs a technique known as ratchet encryption. Instead of assigning a unique static key to each user, the protocol uses a combination of permanent and temporary keys [3].
On the other hand, Telegram created its own encryption technique known as MTProto which is used in the encryption of “Secret chats”. MTProto works by creating shared keys between two clients for end-to-end encryption secret chats. Although it is hailed for its speed, some security experts have criticized it since they feel that the Signal Protocol has had more thorough testing [4].
Privacy and Metadata
WhatsApp: Concerns about user metadata have arisen in the privacy sector. It is critical to remember that metadata information is just as vital in safeguarding user privacy. The legal rules of WhatsApp allow them to preserve information related to successfully sent messages, such as the time of delivery and the mobile phone numbers involved in the messaging. This metadata is adequate to build a profile and generate some strong conclusions about communicating users [5].
Telegram: Telegram collects some information despite having robust encryption. For example, it stores information such as your IP address about user contacts, the groups they are a part of, and the most recent time they signed in. This metadata can be stored for up to 12 months. Additionally, Telegram moderators have access to flagged messages. This is crucial for spotting spam and abusive behavior. But it also demonstrates that the discussions are less private than you might anticipate [6].
Auditing and Open Source
WhatsApp: The encryption system used by WhatsApp, called Signal, is open source, and the program has passed independent security reviews. Its reputation in the security field is enhanced by this transparency [7].
Telegram: Telegram has drawn flak for being less open than WhatsApp. Since MTProto, its encryption technology, isn’t entirely open source, it’s challenging for unbiased specialists to completely assess its security [4].
The comparison between security in WhatsApp and Telegram can be seen below:
Conclusion
For the majority of users, WhatsApp and Telegram both offer a respectable degree of protection, while the depth of that security varies. WhatsApp is a top option for people who value privacy because of its strong dedication to end-to-end encryption and open-source principles. In terms of security, WhatsApp employs end-to-end encryption on all communications and employs the most advanced security mechanisms available. However, there is still concern about what data WhatsApp shares with Meta and Facebook. While your data is secure, privacy-conscious consumers may be concerned about how it is being utilized. While Telegram gathers some user metadata, it does not collect as much as WhatsApp. Telegram collects your IP address, and your contact list in order to match you with contacts who also use the service and a history of username changes. It keeps this information for a maximum of twelve months. The decision between WhatsApp and Telegram should ultimately be based on your own security requirements and preferences. Whatever app you use, it’s critical to be aware of its security features and to apply additional security measures, like two-factor authentication, to secure your data and improve your online privacy [9].
Thank you for reading!
References
[1] Meta, “About end-to-end encryption,” Meta, 2023. [Online]. Available: https://faq.whatsapp.com/820124435853543. [Accessed 21 September 2023].
[2] HT TECH, “How to create a secret chat on Telegram and turn on end-to-end encryption,” HT TECH, 21 August 2022. [Online]. Available: https://tech.hindustantimes.com/how-to/how-to-create-a-secret-chat-on-telegram-and-turn-on-end-to-end-encryption-71611315657826.html#:~:text=-%20Click%20on%20the%20icon%20with,Select%20%E2%80%9CStart%20Secret%20Chat%E2%80%9D.&text=This%20opens%20a%20chat%. [Accessed 21 September 2023].
[3] C. Wankhede, “Is WhatsApp safe to use? How does its end-to-end encryption work?,” ANDROID AUTHORITY , 27 August 2023. [Online]. Available: https://www.androidauthority.com/whatsapp-encryption-safe-3087607/. [Accessed 25 September 2023].
[4] N. V. Marino Miculan, “Automated Verification of Telegram’s MTProto 2.0 in the symbolic model,” Computers & Security , vol. 126, p. 5, 2023.
[5] J. H. Ndihi Rastogi, “Whatsapp security and role of metadata in preserving privacy,” Rensselaer Polytecnique Institue , New York.
[6] I. Hinga, “Is Telegram Safe? A Full Guide to User Privacy and Security,” vpnoverview, 2 September 2023. [Online]. Available: https://vpnoverview.com/privacy/apps/is-telegram-safe/. [Accessed 21 September 2023].
[7] H. L. g, “Signal Review 2023: Secure Messenger (Pros and Cons),” RESTORE PRIVACY, 2 January 2023. [Online]. Available: https://restoreprivacy.com/secure-encrypted-messaging-apps/signal/. [Accessed 26 September 2023].
[8] Esearchlogix, “Whatsapp, Signal, telegram: What makes messaging apps safe,” eSearch Logix, 9 February 2023 [Online]. Available: https://www.esearchlogix.com/tech/whatsapp-vs-signal-vs-telegram-what-features-make-messaging-apps-more-secure/. [Accessed Sep. 22, 2023].
[9] I. Hinga, “Telegram vs. WhatsApp: Which One is More Private,?” vpnoverview, 11 March 2022. [Online]. Available: https://vpnoverview.com/privacy/apps/telegram-vs-whatsapp/. [Accessed 22 September 2023].
