SEC101/Social Media
ENUA

Social Media

Secure your communications and protect your data on public networks.

Encrypted Messaging

What is End-to-End Encryption (E2EE)?

Imagine sending a letter in a locked steel box. You have the key, and only the recipient has the key. The mailman (the app server) delivers the box but cannot open it. That is E2EE. Standard messaging is like a sealed bag: nobody can read it on the way, but the post office (the app server) can open it.

End-to-End Encryption

End-to-End Encryption visualization. Review the labels and use the controls, when present, to step through the diagram.

You
Hello!
Friend
Server can't read messages
Step 1 / 5
You write a message

“Hello!” is about to leave your phone.

Signal and WhatsApp encrypt message content end-to-end by default. Telegram only does this in Secret Chats; regular SMS, email, and many chat apps do not.

WhatsApp

Messages are end-to-end encrypted by default, but WhatsApp is owned by Meta and collects more metadata than Signal.

Get WhatsApp →

Telegram and Viber: know the mode you are using

Popular does not always mean private by default. Teach the difference before people send sensitive messages.

Telegram

Default cloud chats are not end-to-end encrypted. Use Secret Chats for one-to-one sensitive messages; groups and channels are not Secret Chats.

Viber

Viber uses end-to-end encryption for chats, but account safety still depends on your phone number, device lock, backups, and scam resistance. Communities and public accounts are not end-to-end encrypted.

Metadata that apps keep

  • Signal: minimal metadata stored (message content and contacts protected; only registration date and last connection may be disclosed if legally compelled).
  • WhatsApp/iMessage: metadata like who/when can be collected.
  • Telegram: default cloud chats are stored in Telegram Cloud; Secret Chats are the privacy mode.
  • SMS: not end-to-end encrypted; assume your carrier can read it.

Verify safety numbers/keys (Signal)

  1. Open chat -> tap name -> "View safety number".
  2. Scan or compare digits with the person in real time.
  3. Tap "Verified" so you get alerts if it changes (possible hijack).

VPN Services

How does a VPN work?

A VPN creates a secure tunnel between your device and a VPN server. It masks your IP from sites you visit and makes local-network snooping much harder, but it does not make you anonymous from sites you log into.

How a VPN Protects You

How a VPN Protects You visualization. Review the labels and use the controls, when present, to step through the diagram.

Without VPN
You
bank.com
email.com
social.com
Your ISP
sees:
bank.comemail.comsocial.com
Internet
website sees:
your IP
With VPN
You
Your ISP
sees:
Encrypted
VPN Server
Internet
website sees:
VPN's IP
Step 1 / 4
Without a VPN

Your internet provider carries your traffic first. It may see DNS lookups, destination IPs, timing, and unencrypted traffic, while HTTPS hides page contents.

On public Wi‑Fi (cafés, airports) HTTPS already protects what you send; a VPN adds cover for which sites you visit and for apps that don’t use HTTPS.

A VPN encrypts traffic between your device and the VPN server, which is especially helpful on public WiFi. It hides your home IP from websites, while your ISP can still see that you're using a VPN. A VPN moves trust to the VPN provider, so choose carefully.

Mullvad

Strong privacy-focused choice. No email needed; the account is a number. Flat €5/month as of June 2026.

Get Mullvad →

IVPN

Privacy-focused alternative. No email required. Transparent company.

Get IVPN →

Do this on public Wi‑Fi

  • Use a VPN to reduce what the network operator can see and mask your IP address from sites.
  • Turn on HTTPS-Only in your browser.
  • Forget the network when done; turn off auto-join.

Avoid doing this on public Wi‑Fi

  • Don't assume public Wi-Fi is private. HTTPS helps, and a VPN reduces what the network operator can see.
  • Avoid logging into sensitive accounts without HTTPS. A VPN helps on public Wi-Fi, but it does not replace HTTPS.
  • Don't share files over AirDrop/Bluetooth unless needed.

Private Email

Keeping Gmail is fine for most people if you add strong 2FA. Proton Mail is useful when stored-mail privacy and Proton-to-Proton E2EE matter.

Gmail

Gmail is convenient and secure. Add 2FA on the Accounts page; use a privacy-focused account when message content privacy matters.

Social & Messaging Quiz

Question 1 / 5

Which Telegram chats are end-to-end encrypted?

Complete the Quiz

Pass the quiz above (70%+) to unlock topic completion.