All three encrypt messages end to end on the Double Ratchet principle. Signal remains the
reference for confidentiality, metadata frugality, openness and independent review.
WhatsApp uses the same messaging protocol but is closed as an app and collects extensive
metadata. TalX stands out through serverlessness in three stages, through doing without a
phone number and an account, and through a hybrid post-quantum share right in the ratchet
root key.
About these figures
Statements about WhatsApp and Signal reflect the publicly known state according to protocol
documentation, whitepapers and audit reports, and may have changed since. Statements about
TalX refer to the current development state. This is not legal or security advice.
Criterion
TalX
WhatsApp
Signal
Operating model
serverless / P2P; internet delivery through project-run brokering, self-hostable at any time
centralised at Meta
centralised at a non-profit foundation
Account / registration
no account, no phone number ; a self-generated key pair
phone number and corporate ecosystem mandatory
phone number mandatory
Platforms
Android only (8 and newer)
Android, iOS, desktop, web
Android, iOS, desktop
Openness
source-available, no reproducible builds
app closed
fully open source, reproducible builds
Independent external audit
no – internal reviews only
protocol audited, app not inspectable
yes, several times
Criterion
TalX
WhatsApp
Signal
End-to-end encryption
Double Ratchet
Signal protocol
Signal protocol
Handshake
X3DH-lite with rotating prekeys, serverless
X3DH with a prekey server
X3DH, now PQXDH, with a prekey server
Post-quantum protection
hybrid ML-KEM-1024 in the ratchet root key
no PQ publicly known
PQXDH in the handshake, PQ ratchet rolling out
Forward secrecy from the 1st message
yes , without a prekey server
yes
yes
Groups
sender keys with rotation, distributed serverlessly
sender keys, distributed server-side
sender keys plus anonymous group credentials
Data on the device
SQLCipher, attachments AES-GCM, master secret hardware-wrapped
in-app, backup optionally end-to-end
encrypted in-app
Backup protection
Argon2id (64 MB / 4 passes) + AES-GCM + mandatory second factor
password or a 64-character key, optional
local; secure cloud backups rolling out
Pairing and verification
QR, NFC, J-PAKE code; safety number, warning on key change
QR safety number
QR safety number, key transparency
Criterion
TalX
WhatsApp
Signal
Offline over Bluetooth, no internet
yes
no
no
Direct connection on a local network
yes – delivery in seconds with no server at all
no
no
Calls without a server on the same Wi-Fi
yes – voice and video
no
no
Delivery while the app is closed
yes – brokering plus a push wake-up
yes, worldwide
yes
Transport path visible per message
yes
no
no
Metadata at the operator
offline and on a LAN: none . Over the internet: who, with whom, when
extensive, linked across the group
minimal (sealed sender, private contact discovery)
Criterion
TalX
WhatsApp
Signal
Interface languages
91, fully translated
very many
very many
Transcription of voice messages
yes – on the device , 6 languages, configurable per chat
yes – processed server-side
no
Translation of messages
yes – on the device , 20 languages
yes – via cloud services
no
Delete for everyone / edit
yes / yes (text, up to 5 minutes)
yes / yes
yes / no
Block contacts
yes – survives a re-pairing
yes
yes
“View once” media
yes – disappears on the sender’s side too
yes
yes
Disappearing messages with a timer
no
yes
yes
Attachments
up to 100 MB (groups 50 MB)
up to 2 GB
up to 100 MB
Very large groups
no
yes
yes
Group calls
no
yes
yes
Three stages of serverlessness: Bluetooth radio, a direct connection on the local network,
internet P2P – including voice and video calls with no server at all on the same Wi-Fi.
No phone number, no account. Brokering and push out of the box, both self-hostable.
A post-quantum share right in the ratchet root key.
Transcription and translation on the device – features that elsewhere hand content to the
cloud.
Forward secrecy from the first message without a prekey server; a self-healing session.
Pairing via J-PAKE, remotely too with a short code.
Backup with Argon2id and a mandatory second factor.
The transport path actually used is shown on every single message.
Independently audited, fully open source, reproducible builds.
Exemplary metadata frugality: sealed sender, private contact discovery, private groups.
A mature handshake, PQ ratchet rolling out, a codebase proven over years.
All platforms; a non-profit operator with no advertising incentive.
Ubiquitous – almost every contact is reachable.
Very robust, low-latency delivery and calls worldwide, on all platforms.
A solid encryption basis despite the closed app; very large groups and very large
attachments.
Use
Recommendation
Highest confidentiality, highly sensitive
Signal – independently audited, mature, metadata-frugal
Communication without internet or without a phone number
TalX – works offline over Bluetooth, no account
Home or office on the same Wi-Fi, calls included
TalX – no server at all, in seconds
Transcribing voice messages without giving content away
TalX – runs on the device
Maximum everyday reachability
WhatsApp – network effect, metadata accepted deliberately
Data sovereignty, self-hosting, tinkering
TalX – full control, but still without an external audit
A mixed device world with iOS or desktop
Signal or WhatsApp – TalX is Android-only
Very large groups, very large files
WhatsApp – TalX is deliberately limited here
A comparison that lists only your own strengths is advertising. The full list of the points
where TalX falls behind therefore has a page of its own: limits, stated
openly .