home / messaging
Matrix
Metadata
Matrix doesn't have any metadata protection.
Centralization
While Matrix can be self-hosted, most people use a default server (matrix.org), which uses Cloudflare, Google captures, and requires an email address to create an account. Since Matrix doesn't have any metadata protection, the server can spy on your conversations.
Self-custody
Matrix doesn't provide self-custody of digital identities, so a server can ban your account.
Multi-account
Historically, major Matrix clients did not support multiple accounts. However, a few apps are now adding multi-account support, such as FluffyChat and Mages, both of which are available on Flathub (Linux) and F-droid.
Mutable events
Matrix is based on a legacy account-based architecture with unsigned mutable events, so server admins can impersonate you in public rooms. Make sure to enable e2e encryption and back up your keys to prevent impersonation in private conversations.
Forum:
XMPP vs Matrix: Why Matrix sucks
Privacy Ranked (10+ comments)
Get started:
matrix.org/ecosystem/clients - choose an app to install
servers.joinmatrix.org - find a server to create an account (warning: mostly hostile jurisdictions like US and EU)
matrixrooms.info - join a public room to chat