Skip to content

Cwtch vs Briar

Choose two to four messengers. Every property comes from the same traceable catalogue; unknowns remain explicit.

PropertyCwtchBriar
Account identifierLocal / onion profile; no phone or email required. [1] [2]Local identity; contacts in person or through invitation. [1] [2]
Phone required by serviceNot required. [1] [2]Not required by this local-identity model. [1] [2]
E2EEE2EE through onion services according to published design. [1] [2]E2EE; Tor and local Android transports. [1] [2]
Metadata exposureReduced central concentration; presence and traffic correlation remain possible. [1] [2]Less centralisation; local / Tor network and endpoints remain observable. [1] [2]
IP exposure to peerMessages through onion; no established calls; Tor does not defeat a global observer. [1] [2]Tor or local transports; no calls; global correlation remains unresolved. [1] [2]
Multi-deviceUnknown: not established for the version and configuration in question.Separate Android and beta desktop clients; desktop does not provide an iPhone client. [1] [2]
Main strengthOnion architecture without a single central account server. [1] [2]Android resilience without Internet, Tor and proximity exchange. [1] [2]
Main weaknessNo iOS; niche ecosystem and more limited assurance. [1] [2]No iOS or calls; essential maintenance since July 2026. [1] [2]
Best suited forUsers on supported platforms who accept Tor and a specialised tool. [1] [2] [3] [4]Two Android contacts when offline resilience matters. [1] [2] [3] [4]
Confidence and scopeMore limited current assurance and audits; Tor does not establish global resistance. [1] [2]Scope-limited audits; essential maintenance only since July 2026 and a separate beta desktop client. [1] [2]
Technical details: identity, keys, push, devices, audits and evidence
PropertyCwtchBriar
Email requirementNot required. [1] [2]Unknown: not established for the version and configuration in question.
Username / discoveryUnknown: not established for the version and configuration in question.Unknown: not established for the version and configuration in question.
Number visible to contactNo required number. [1] [2]No required number to share. [1] [2]
Global user IDPersistent onion identity; no single central account. [1] [2]No single central account; local identity. [1] [2]
Forward secrecyUnknown: not established for the version and configuration in question.Unknown: not established for the version and configuration in question.
Post-compromise securityUnknown: not established for the version and configuration in question.Unknown: not established for the version and configuration in question.
Key verificationUnknown: not established for the version and configuration in question.Unknown: not established for the version and configuration in question.
Relay / TURNOnion / Tor services with distributed visibility. [1] [2]Tor / bridges or local Bluetooth / Wi-Fi depending on Android scenario. [1] [2]
What the provider learnsNo single central provider; relays and peers have local visibility. [1] [2]No single central service; peers and transports remain in the model. [1] [2]
What the contact learnsThe contact receives messages and the profile you share, and can keep a copy. [1] [2]The contact receives messages and the profile you share, and can keep a copy. [1] [2]
What the network / ISP learnsThe network sees destinations, timing and volume; Tor or a relay changes the observer. [1] [2]The network sees destinations, timing and volume; Tor or a relay changes the observer. [1] [2]
Push notificationsUnknown: not established for the version and configuration in question.Unknown: not established for the version and configuration in question.
Apple / Google exposureStore, installation and push can create metadata; exact profile linkage depends on the OS and was not tested here. [1] [2]Store, installation and push can create metadata; exact profile linkage depends on the OS and was not tested here. [1] [2]
GroupsUnknown: not established for the version and configuration in question.Unknown: not established for the version and configuration in question.
CallsNo current calls established in the study. [1] [2]No established voice calls. [1] [2]
BackupsUnknown: not established for the version and configuration in question.Unknown: not established for the version and configuration in question.
Source code and binariesRepositories and component-specific scopes recorded in Phase 2; no current binary rebuilt bit-for-bit here. [1] [2]Repositories and component-specific scopes recorded in Phase 2; no current binary rebuilt bit-for-bit here. [1] [2]
AuditsUnknown: not established for the version and configuration in question.Cure53 and ROS/OTF: bounded dates, versions and retests in the register. [1] [2] [3]
Public law-enforcement evidenceNo individual disclosure case established here; this does not prove an absence of requests or data. [1] [2]No individual disclosure case established here; this does not prove an absence of requests or data. [1] [2]
iOSNo official client established in the study. [1] [2]No official client established in the study. [1] [2]
AndroidYes, client listed in the study. [1]Yes, client listed in the study. [1]
WindowsYes, client listed in the study. [1] [2]Beta; desktop-specific limits. [1] [2]
macOSYes, client listed in the study. [1] [2]Beta; desktop-specific limits. [1] [2]
LinuxYes, client listed in the study. [1] [2]Beta; desktop-specific limits. [1] [2]
Avoid if…You use iPhone or need calls. [1] [2] [3] [4]You use iPhone, need calls or seamless multi-device. [1] [2] [3] [4]
Recommended configurationControl devices, identities, notifications and files; verify client, version and calling path. [1] [2]Control devices, identities, notifications and files; verify client, version and calling path. [1] [2]
Remaining unknownsCurrent network behaviour, distributed binaries and forensic evidence remain incomplete; check version, OS and configuration. [1] [2]Current network behaviour, distributed binaries and forensic evidence remain incomplete; check version, OS and configuration. [1] [2]
Ease of useSpecialised tool; setup and adoption are less straightforward. [1] [2] [3] [4]Specialised use; usability, power and feature limits. [1] [2] [3] [4]
Network anonymityTor reduces some local visibility; no general resistance to global correlation. [1] [2]Tor / local: useful against some observers; no global guarantee. [1] [2]

Customise this comparison

  • Compromised / unlocked device and spyware.
  • Copying, screenshots or disclosure by the contact.
  • Initial Discord traces, reused alias, avatar, voice or files.
  • Global correlation; relay, ISP, telecom, store and backup data depending on the path.