Messenger Security Matrix

Compare recovery methods, 2FA types, and backup options across your messengers β€” with dated official sources.

Select your messengers below

Recovery & Security Comparison

MessengerAccount Recovery Method2FA Types AvailableBackup OptionsSource (Date)
WhatsApp
SMS verification + backup codes (optional)
  • 6-digit PIN
  • Passkey (iOS/Android)
  • Biometric unlock
  • Google Drive (Android)
  • iCloud (iOS)
  • Local encrypted export
Two-step verification
Telegram
Cloud password (2FA) + recovery email; no SMS fallback for cloud chats
  • Cloud password
  • Passkey (iOS/Android)
  • Biometric unlock
  • Login codes via Telegram app
  • Cloud sync (encrypted server-side)
  • Local export (JSON/HTML)
  • No Google Drive/iCloud backup
Secure Remote Password (SRP) & 2FA
Signal
Signal PIN (required) + registration lock; no SMS/email recovery
  • Signal PIN (alphanumeric)
  • Registration lock
  • Biometric unlock
  • Passkey (iOS/Android)
  • Encrypted local backup (Android)
  • iOS device-to-device transfer
  • No cloud backup (Google Drive/iCloud)
Signal PIN & Registration Lock
Viber
SMS verification + optional 4-digit PIN; backup codes via email
  • 4-digit PIN
  • Biometric unlock
  • Backup codes (email)
  • Google Drive (Android)
  • iCloud (iOS)
  • Local encrypted backup
Two-step verification
Threema
Threema ID + passphrase (no phone number); QR code device transfer
  • Passphrase
  • Biometric unlock
  • Passkey (iOS/Android)
  • Encrypted local backup (Threema Safe)
  • QR code device-to-device
  • No cloud backup (Google Drive/iCloud)
Threema Safe & Backup

Your Enablement Checklist

Track what you've enabled on each app. Changes save locally β€” no accounts, no sync.

0 of 0 messengers fully protected
0 have 2FA enabled
0 have backup configured
WhatsApp
Telegram
Signal
Viber
Threema

Sources & Retrieval Dates

Every claim in the matrix links to an official document with retrieval date. Expand to verify.

WhatsApp
Verify yourself
Two-step verification
URL
https://faq.whatsapp.com/1197844978457246
Retrieved
Excerpt
"Two-step verification adds a 6-digit PIN to your account. You can also add an email address to reset your PIN. Passkeys provide passwordless sign-in using Face ID, Touch ID, or device PIN."
Verify yourself β†’
Telegram
Verify yourself
Secure Remote Password (SRP) & 2FA
URL
https://core.telegram.org/api/sr-api
Retrieved
Excerpt
"Telegram uses SRP for 2FA. A cloud password protects cloud chats. Recovery email allows password reset. No SMS-based recovery for cloud chats. Local backups only via export."
Verify yourself β†’
Signal
Verify yourself
Signal PIN & Registration Lock
URL
https://support.signal.org/hc/en-us/articles/360007059792-Signal-PIN
Retrieved
Excerpt
"Signal PIN protects your profile, settings, and contacts. Registration lock prevents re-registration without PIN. No SMS or email recovery. Backups are local encrypted only."
Verify yourself β†’
Viber
Verify yourself
Two-step verification
URL
https://support.viber.com/hc/en-us/articles/360003694519-Two-step-verification
Retrieved
Excerpt
"Viber offers a 4-digit PIN for two-step verification. Backup codes can be sent to email. SMS is primary recovery. Google Drive and iCloud backups available for chat history."
Verify yourself β†’
Threema
Verify yourself
Threema Safe & Backup
URL
https://threema.ch/en/faq/backup
Retrieved
Excerpt
"Threema uses Threema ID (no phone number). Passphrase protects account. Threema Safe provides encrypted local backup. Device transfer via QR code. No cloud backups."
Verify yourself β†’

Save & Share Your Setup

Your configured matrix β€” selections + enablement state β€” lives in the URL. Bookmark it for new-device setup or send it to family.

Messengers compared
5
Embedded data: WhatsApp, Telegram, Signal, Viber, Threema
Data retrieval date
2026-08-15
Official platform security FAQs accessed 2026-08-15
Comparison attributes per messenger
3
Embedded schema: recovery, 2FA, backup