Telegram drops out of top 5 safest messengers in 2025

19:41 6 May, 2025

The popular messaging app Telegram has lost its place among the top five safest messaging applications, according to the annual study by Artezio (part of the LANIT Group). In 2025, the ranking is led by Signal, Olvid, Threema, Element (Matrix), and Session, with Telegram failing to make even the top ten. Here’s why this happened, who the new leader is, and what trends are shaping messenger security in 2025.

New Top 5: Signal, Olvid, and Other Leaders

Artezio evaluated messengers based on 60 parameters, including encryption quality, metadata protection, resistance to social engineering, and transparency of privacy policies. The top 5 safest messengers for 2025 are:

Signal: The leader due to its open-source code, minimal metadata collection, and a new “delayed encryption” system that protects data even if keys are compromised.
Olvid: A French messenger with a zero-trust architecture, requiring no phone number or email for registration.
Threema: A Swiss platform with full end-to-end encryption and anonymous registration.
Element (Matrix): A decentralized, open-source platform popular among those valuing independence from large corporations.
Session: An Australian messenger using Tor-like routing for maximum anonymity.

These platforms stand out for their strict privacy focus and minimal data collection, a key trend in 2025.

Why Did Telegram Lose Its Position?

Telegram, which held fifth place in 2024, fell out of the top 5 due to changes in its security policies and technical shortcomings. Sergey Matusevich, Artezio’s Director of AI and Web Technology Development, highlighted the main reasons:

Lack of Default End-to-End Encryption: Unlike Signal or Threema, Telegram uses end-to-end encryption only in “secret chats.” Regular and group chats rely on server-side cryptography (MTProto), which doesn’t meet modern standards.
Cooperation with Authorities: Following the arrest of Pavel Durov in August 2024, Telegram increased cooperation with law enforcement, disclosing IP addresses and phone numbers upon request. For instance, in 2024, the U.S. received data on 2,253 users, and India on 23,535. This raised concerns among users valuing anonymity.
Rising Cyber Threats: Telegram has become a hub for phishing, fraud, and malicious content, damaging its reputation. Cybercriminal activity on the platform surged by 53% in 2024.

Users on X express frustration: “Telegram has lost its edge, Durov lies about privacy, and it feels like the FSB is already there,” writes @sasha_sotnik. Others note: “Signal is now a must-have; Telegram is for memes, not serious chats.”

Ranking Leaders: What Makes Them Secure?

Signal maintains its top spot due to:

Full end-to-end encryption by default for all chats and calls.
Open-source code, verified by experts.
“Delayed encryption” (introduced in 2024), protecting data even if a device is compromised.
Minimal data collection: only a phone number, with no geolocation or metadata.

Olvid stands out for its lack of a central server and registration without personal data, eliminating leak risks. Threema offers anonymous IDs instead of phone numbers and stores minimal metadata. Element appeals with its decentralization, allowing users to run their own servers. Session uses Tor-like routing to hide IP addresses and message paths.

2025 Trends: Deanonymization and Migration

Artezio notes that major platforms like Telegram and WhatsApp are increasingly cooperating with authorities, reducing their appeal for privacy-focused users. For example, Telegram was fined $957,780 in Australia in 2024 for delays in providing data on terrorism and child exploitation. This is pushing users toward niche messengers prioritizing anonymity and decentralization.

Telegram has introduced features like ultra-secure group calls for 200 people using blockchain-like technology, but critics argue these are more marketing than genuine security enhancements.

Recommendations for Users

To minimize risks on Telegram, experts suggest:

Use “secret chats” for sensitive conversations.
Enable two-factor authentication and a local passcode.
Hide your phone number in privacy settings.
Use a VPN to mask your IP address, such as ExpressVPN with independent audits.
Regularly check and terminate suspicious active sessions.