No marketing — just what each service asks of you, what its servers can see, and what survives after you hit send. Sources: each project’s public documentation.
| xox | Signal | Telegram | Threema | Session | SimpleX | ||
|---|---|---|---|---|---|---|---|
| No account needed | ✓ | ✗ | ✗ | ✗ | ◐ | ◐ | ✓ |
| No phone number / email | ✓ | ✗ | ◐ | ✗ | ✓ | ✓ | ✓ |
| Works in the browser, nothing to install | ✓ | ◐ | ✗ | ◐ | ◐ | ✗ | ✗ |
| End-to-end encrypted by default | ✓ | ✓ | ✓ | ✗ | ✓ | ✓ | ✓ |
| Post-quantum encryption right in the browser | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Server never stores your messages | ✓ | ◐ | ◐ | ✗ | ◐ | ◐ | ◐ |
| Ephemeral by design (nothing left behind) | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ◐ |
| Anonymous by design | ✓ | ✗ | ✗ | ✗ | ◐ | ✓ | ✓ |
| Disappearing messages | ✓ | ✓ | ✓ | ◐ | ◐ | ✓ | ✓ |
| PIN lock & contact verification | ✓ | ◐ | ✓ | ◐ | ✓ | ◐ | ◐ |
| Duress unlock (decoy PIN) | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✓ |
| Disguised app mode (camouflage) | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Voice masking on calls | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Built-in Tor mode (.onion), nothing to set up | ✓ | ✗ | ✗ | ✗ | ✗ | ◐ | ◐ |
| Tor inside the Android app: all traffic through Tor, nothing to install | ✓ | ✗ | ✗ | ✗ | ✗ | ◐ | ◐ |
| Camouflaged Tor bridges inside the app (obfs4, Snowflake) — works where Tor itself is blocked | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ◐ |
| Traffic padding — size reveals nothing | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✓ |
| Encrypted domain name (ECH) — the network can't see you use xox | ✓ | ✗ | ✗ | ✗ | ✗ | ✗ | ✗ |
| Screenshots and screen recording blocked (Android app) | ✓ | ◐ | ◐ | ◐ | ◐ | ◐ | ◐ |
| Several separate identities in one app | ✓ | ✗ | ✗ | ✗ | ✗ | ◐ | ✓ |
| Encrypted local vault with its own PIN | ✓ | ✗ | ✗ | ✗ | ◐ | ✗ | ✗ |
| Pay without giving your name (crypto or shop code) | ✓ | ✗ | ✗ | ✗ | ◐ | ✗ | ✗ |
We would rather say it than have you find it. Our code is not open yet and we have no published external audit. Both are budgeted and planned; until they are done, we don't claim them. Everything else on this page you can verify today by opening the app.
| xox | Signal | Telegram | Threema | Session | SimpleX | ||
|---|---|---|---|---|---|---|---|
| Open source | ✗ | ◐ | ✓ | ◐ | ✓ | ✓ | ✓ |
| Published external audit | ✗ | ◐ | ✓ | ◐ | ✓ | ✓ | ✓ |
Most messengers encrypt in transit, then keep encrypted copies, backups or metadata. xox’s server deletes each encrypted envelope the moment it’s delivered — your history lives only on your devices, and with disappearing messages, not even there.
No identity, no history, no traces. You open a tab and you exist; you close it and you never did. Everything is encrypted on your device with a post-quantum layer, the server forgets every envelope the instant it delivers it, and every conversation can destroy itself. Privacy is not a setting here — it is the architecture.
Comparison based on public documentation of each service (September 2026). Features change; if you spot an error, tell us and we’ll fix it. All trademarks belong to their owners.