home / messaging
Matrix
Matrix has a legacy account-based architecture.
Matrix relies on email addresses and passwords to register an account.
Emails is an outdated tech with no self-custody and no privacy.
Most people don't know how to get an email account over onion without js.
Matrix has no metadata protection, thus, no privacy.
Most people use default matrix.org server.
matrix.org uses Cloudflare and Google captures.
You can be deplatformed from any Matrix server because you don't have self-custody of your identity.
Messages in public groups are unsigned, so they can be tampered with.
You can be impersonated by the admin of a server.
Metadata
Matrix doesn't have any metadata protection.
Centralization
While Matrix can be self-hosted, most people use a default server (matrix.org), which uses Cloudflare, Google captures, and requires an email address to create an account. Since Matrix doesn't have any metadata protection, the server can spy on your conversations.
Self-custody
Matrix doesn't provide self-custody of digital identities, so a server can ban your account.
Multi-account
Historically, major Matrix clients did not support multiple accounts. However, a few apps are now adding multi-account support, such as FluffyChat and Mages, both of which are available on Flathub (Linux) and F-droid.
Mutable events
Matrix is based on a legacy account-based architecture with unsigned mutable events, so server admins can impersonate you in public rooms. Make sure to enable e2e encryption and back up your keys to prevent impersonation in private conversations.
Forum:
XMPP vs Matrix: Why Matrix sucks
Privacy Ranked (10+ comments)
Get started:
matrix.org/ecosystem/clients - choose an app to install
servers.joinmatrix.org - find a server to create an account (warning: mostly hostile jurisdictions like US and EU)
matrixrooms.info - join a public room to chat