Instant Messaging
Notes

“Off-the-Record Messaging, commonly referred to as OTR, is a cryptographic protocol that provides strong encryption for instant messaging conversations. OTR uses a combination of the AES symmetric-key algorithm, the Diffie–Hellman key exchange, and the SHA-1 hash function. In addition to authentication and encryption, OTR provides perfect forward secrecy and malleable encryption.

The primary motivation behind the protocol was providing deniability for the conversation participants while keeping conversations confidential, like a private conversation in real life, or off the record in journalism sourcing.”

Note that Pidgin stores your IM account passwords in plain text. You can avoid this by (1) not saving your password in Pidgin, (2) encrypting your file system, or (3) storing your Pidgin password securely with the Debian package pidgin-gnome-keyring.

Pidgin with OTR and dbus enabled has a local security bug. See the upstream bug report for more information and possible workarounds.

The Guardian Project hosts a fantastic how-to guide to chatting securely on Android with ChatSecure.

Threema is not recommend by PRISM Break as it is closed source software. Freely available source code is a necessary condition for privacy and security.

Proprietary
AOL Instant Messenger
Apple Messages
Discord
Facebook Messenger
Google Allo
Google Hangouts
ICQ
LINE
Skype
Tencent QQ
Trillian
Viber Messenger
WeChat
WhatsApp