I love Signal. But despite my best efforts, I still have friends using WA and iMessage. Managing multiple apps is kinda a pain. Beeper offers a convenient way to combine them into one interface, and it claims to re-encrypt the content. Does anyone know anything about this claim?
From their website:
Messages sent using Beeper to other chat networks are re-encrypted if the other network supports encryption (like Signal, WhatsApp and iMessage).
So…Safe? Or no?
tl:dr If you have a high threat model, definitely do not. If you want a good compromise between privacy and convenience, go for it.
“Safe” is not really a binary concept so it’s a bit more complicated than that.
Beeper is a forked Matrix app. As such, it subjects all of your messages to all of the vulnerabilities of Matrix, mostly being that it collects a ton of metadata on whatever server of your account (in this case Beeper) and also whatever other servers you communicate across. So it’s “safety” is really dependent on whether you trust Beeper not to sell or leak that info. They will definitely cough it up if they get a warrant. Where Signal doesn’t have this data.
So you’re increasing your attack surface by basically creating a metadata archive of your Signal messages.
As for the security of your message content, Beeper will get the decrypted info from the server you connect to your account, and then re-encrypts it as a Matrix message, so theoretically they don’t have any of that. Some people make a big deal out of this, as they will actually have access to your plaintext messages (duh, you signed their server into your account) but I don’t see anything to indicate these messages are stored.
There is a spectrum across convenience and privacy and this leans toward the latter.
By definition if content is re-encrypted then at some point it was unencrypted and available in plain text.
I can’t speak on anything with beeper but a similar service that is self hostable is matrix-synapse. I mention self hosting as an answer to your concerns of safety but the other side of the coin is this isn’t introductory stuff, if you don’t have a background or general enterpris experience with this kind of thing i don’t recommend it. If you do then this seems like a good fit as you can run your own bridges into the matrix service you’re hosting so all your data stays on your own systems.
What is the “pain” you’re experiencing? You having a hard time with clicking the notification every app sends you? Difficulty identifying their unique app icons? Must be tough.