Best European Alternatives to iMessage
Looking for a European alternative to iMessage? Apple's iMessage is a powerful messaging platform, but it's limited to Apple devices and processes your data through US servers. For users who value privacy, cross-platform compatibility, and data sovereignty, European messaging alternatives offer compelling options.
We've curated the best privacy-focused messaging apps built in Europe and Switzerland. These alternatives provide secure end-to-end encryption while keeping your data protected under European law.
How we rank these tools — 4-step process
-
1
European ownership, verified
The company is headquartered and incorporated in the EU, EEA or Switzerland, and processes customer data in Europe. A US parent company disqualifies a tool from this page regardless of where its servers are.
-
2
Category fit and hands-on review
What the tool actually does, who it suits, and where it falls short — checked against the vendor’s own documentation, changelog and pricing page rather than its marketing copy.
-
3
Compliance and pricing check
GDPR posture, hosting location and the prices quoted on this page are verified against the vendor’s public pricing before publication, and re-checked when we revisit the category.
-
4
Position on this page
Placement on this page can be paid, and that can affect which tools appear here and the order they appear in. It never buys a good review: a tool that fails the checks above is not here at any price, and payment does not change the shortcomings we write about. A vendor can ask us to correct a factual error — not to remove a criticism.
Vendors can pay for visibility on this page. It never changes what an entry says about a product, including the criticism, and we earn nothing when you click through to a vendor. Paid placement can affect which tools appear here and the order they appear in. Editorial policy
Why Choose a European Alternative to iMessage?
True Privacy
End-to-end encryption with no metadata collection or message scanning.
Cross-Platform
Works on iOS, Android, Windows, Mac, Linux, and web browsers.
No Lock-in
Not tied to any device ecosystem. Message anyone, anywhere.
Open Source
Many European messengers are fully open source and auditable.
Best European Alternatives to iMessage
We've curated the best privacy-focused messaging apps from European companies. Each alternative has been evaluated for security, privacy, and usability.
Key takeaways
- iMessage is genuinely end-to-end encrypted and has run on the post-quantum PQ3 protocol since iOS 17.4, announced on 21 February 2024.
- Apple documents that an enabled iCloud Backup contains a copy of the Messages in iCloud encryption key, and iCloud Backup is only end-to-end encrypted with Advanced Data Protection turned on.
- Advanced Data Protection is a per-account setting, so a conversation is only as protected as the backup habits of the person at the other end.
- Apple can no longer offer Advanced Data Protection to new users in the United Kingdom, which shows the protection is contingent on a regulator rather than on the mathematics.
- Contacts, Calendars and iCloud Mail are never end-to-end encrypted, so the record of who you talk to is readable even when the conversations are not.
Why people leave iMessage
Say the good part first, because the case falls apart without it. iMessage is end-to-end encrypted and Apple cannot read your conversations. Since iOS 17.4 it runs on PQ3, the post-quantum protocol Apple announced on 21 February 2024 and described as having the strongest security properties of any at-scale messaging protocol in the world. On the narrow question of whether the message is protected in transit, iMessage is not a weak product and nobody should pretend it is.
The weakness is the recovery path. Apple's own documentation states that when iCloud Backup is enabled, the backup includes a copy of the Messages in iCloud encryption key, so that you can get your data back. iCloud Backup is one of the ten categories that only become end-to-end encrypted once you turn on Advanced Data Protection, and that setting is off unless you went looking for it.
In the default configuration the conversation is sealed and a copy of the key sits with a company in Cupertino.
Then there is the part you cannot fix from your own device. The other person in the conversation has their own backup and their own settings, and their copy of your messages is covered by their choices rather than yours. Advanced Data Protection is a per-account switch, so a conversation is only as protected as its least careful participant — and in one country it has stopped being a switch at all.
- The backup holds the key Messages in iCloud is end-to-end encrypted by default, and Apple documents that an enabled iCloud Backup includes a copy of that encryption key so your data can be recovered. Under Advanced Data Protection the key inside the backup is itself end-to-end encrypted; without it, the key is in a backup Apple can access. This is not a flaw somebody found. It is written down, it is there for a good reason, and it means the sentence "Apple cannot read my iMessages" is true of the messages and not of the whole system that stores them.
- A government removed the strongest setting in one country Apple states that it can no longer offer Advanced Data Protection in the United Kingdom to new users, and that people in the UK who had not already enabled it no longer have the option. The same page, dated 23 September 2025, confirms that the feature remains available everywhere else in the world. Whatever you think of the merits, the operational lesson is durable: the protection that closes the backup hole is a feature a company offers, in the jurisdictions where it is allowed to, and it was withdrawn from an entire country without the users being consulted.
- Contacts and calendars were never covered Apple's published breakdown lists fifteen categories that are end-to-end encrypted by default and twenty-five with Advanced Data Protection enabled. Contacts, Calendars and iCloud Mail are outside both, for interoperability and industry-standard reasons Apple explains openly. That means the address book identifying everyone you message, and the diary showing who you met and when, sit on Apple servers in a form the company can read, no matter how carefully you configured everything else.
- It only exists where Apple sells hardware iMessage runs on Apple devices and nowhere else, which turns a messaging protocol into a property of a purchase. Anyone in your life using an Android phone is outside the protected system entirely, and the conversation with them falls back to something Apple does not control. That is not a bug from Apple's point of view; it is the point. But if the reason you want encryption is that certain conversations should be private, a system that covers only the participants who bought the same brand of telephone is an odd foundation to build that on.
What you have to replace, not just match
Work out which iMessage you are leaving, because the word covers three different habits and only one of them has a clean substitute.
The first is the private conversation that genuinely needs protecting: the one with a lawyer, a doctor, a source, a colleague discussing something commercially sensitive. The second is the everyday traffic with family and friends, which is not sensitive and is entirely dependent on those people already having an iPhone. The third is the furniture around it — Messages on the Mac, tapbacks, satellite texting, Check In, the SMS fallback that means you never have to ask what somebody uses.
Element, Wire and Threema all answer the first properly and none of them answers the third at all. The second is not a technology problem: your family will move if you ask them, one conversation at a time, and will not move because you sent them an article. Plan to keep Messages installed for everything ordinary and to move the conversations that have a reason attached.
The alternatives compared
| Position | Tool | Headquarters | Pricing | Jurisdiction |
|---|---|---|---|---|
| #1 | Element | London, United Kingdom | Free self-hosted / from about €5/user/month (managed) | United Kingdom (adequacy decision, outside the EEA) |
| #2 | Wire | Zug, Switzerland | Free (personal) / from €5.83/user/month (business) | Switzerland (adequacy decision, outside the EEA) |
| #3 | Threema | Pfaffikon, Switzerland | CHF 4.99 one-time (mobile) / CHF 2/user/month (Work) | Switzerland (adequacy decision, outside the EEA) |
How each alternative compares to iMessage
- Which law reaches it. United Kingdom (adequacy decision, outside the EEA). iMessage is run from the United States, so the CLOUD Act obliges the provider to hand over data on a valid order regardless of which country the servers are in.
- Where the data sits. Self-hosted, or European managed options.
- Source code. Open source, where iMessage is not: you can read what it does rather than take the description on trust.
Best for: People whose objection is the copy of the key sitting in a cloud backup
The specific hole on this page is a recovery mechanism that runs through somebody else's cloud.
Element, the flagship client for the open Matrix protocol, answers it structurally: encrypted room history is recovered through key backup that a recovery key or passphrase unlocks, and the server holding it can be one your organisation runs. Where Apple built recovery by keeping a copy of the key somewhere it could reach, Matrix built it by handing you a string and letting you decide where it lives.
The second property has no Apple counterpart. A Matrix account is an address on a homeserver, not an entitlement attached to a hardware purchase, and it federates: people on different servers, running different clients, on any operating system, sit in the same encrypted room with the same protection.
There is no tier for participants who bought the wrong telephone, because there is no hardware vendor in the arrangement at all. For a household, a newsroom or a research group that spans both platforms, this is the only option here that is genuinely neutral about what anyone is holding.
It asks the most of you of anything on this page and you should not choose it casually. Running a homeserver means Synapse, a database and backups, and federation can delay delivery.
Verifying devices and storing a recovery key are concepts your relatives will not enjoy meeting, and losing that key loses the encrypted history exactly as losing an Apple recovery method does.
New Vector Ltd, the company behind Element, is registered in London — outside the EEA, under a UK adequacy decision — which, on a page about a protection being withdrawn from the UK, is a reason to run your own server rather than to rely on any publisher's address.
What Element does better than iMessage
- Encrypted history is recovered with a key you hold, not with a copy stored in a cloud backup you do not administer
- The account lives on a server you or your organisation can run, so no company holds the messages at all
- Identical encryption for every participant regardless of their device, where iMessage covers Apple hardware only
- Open source on an open protocol, so nothing depends on one vendor's continued willingness to offer a feature
- Retention is your configuration rather than a platform default you have to look up
Where Element is a step down from iMessage
- No SMS, so Messages stays on the phone for bank codes and everyone who has not moved
- Self-hosting means running Synapse, a database and a backup regime that Apple handled invisibly
- Device verification and recovery keys are a real support burden among non-technical people
- No Mac-and-phone continuity of the kind Messages provides without anyone configuring anything
- Losing your recovery key loses the encrypted history, with nobody to appeal to
Standout against iMessage. It is the only option here where the recovery mechanism — the exact thing that puts a copy of the iMessage key in an iCloud backup — is something you hold rather than something a company keeps for you.
- Which law reaches it. Switzerland (adequacy decision, outside the EEA). iMessage is run from the United States, so the CLOUD Act obliges the provider to hand over data on a valid order regardless of which country the servers are in.
- Where the data sits. EU (Germany, Ireland).
- Source code. Open source, where iMessage is not: you can read what it does rather than take the description on trust.
Best for: Professional threads that ended up in Messages because everyone had an iPhone
A surprising share of what sits in Messages is work. A consultant agreeing terms, a clinician arranging a visit, a lawyer confirming something they would rather not put in email, all of it in a consumer app because both parties happened to own iPhones and it was the path of least resistance. The moment one of those conversations matters, it is being held in a system whose retention, recovery and export are decided by a hardware company.
Wire is the deliberate version. Every plan, free one included, encrypts messages, calls and files end to end, the clients are open source, the messaging runs on Proteus with MLS covering messages, calls and files, Wire Swiss GmbH is registered in Zug, and processing happens in EU data centres in Germany and Ireland.
Encrypted video conferences run to 150 participants on the paid business plan, with encrypted screen sharing, and Guest Rooms let somebody outside the organisation join from a browser without creating an account — the situation that usually pushes people back to a personal phone number in the first place.
Judge it as an organisation's purchase, because that is what it is. Somebody has to administer it, Wire for SMB is listed at €7.45 per person per month billed annually or €8.94 billed monthly, the free tier below it is scoped to teams of up to five, and the integration catalogue is small.
As a replacement for messaging your mother it is absurd. As the place the professional half of your Messages traffic should have been from the start, it is the right answer on this page, and it has the useful property of working the same way for the client who owns an Android phone.
What Wire does better than iMessage
- Nothing about the encryption depends on a device backup setting that either party might have left off
- A Swiss company processing in Germany and Ireland, against a US corporation holding the iCloud backups
- An outsider joins an encrypted Guest Room from a browser, with no account and no particular handset required
- Administration, retention and export exist as deliberate organisational controls rather than consumer defaults
- Open source clients, so the encryption claim can be inspected rather than accepted
Where Wire is a step down from iMessage
- No SMS and no telephony, so it never becomes the only messaging app on the phone
- Priced per user for business plans, where iMessage costs nothing on hardware you already bought
- A thin integration catalogue, with no app marketplace of the kind Apple built the whole platform around
- Personal contacts rarely follow, so this covers the work half and leaves the rest behind
- Cloud only, so an organisation wanting its own servers should look at the entry above
Standout against iMessage. It is the only entry here built for a conversation that may one day have to be produced deliberately, which is a different job from a chat thread nobody planned to keep.
- Which law reaches it. Switzerland (adequacy decision, outside the EEA). iMessage is run from the United States, so the CLOUD Act obliges the provider to hand over data on a valid order regardless of which country the servers are in.
- Where the data sits. Switzerland.
- Source code. Open source, where iMessage is not: you can read what it does rather than take the description on trust.
Best for: People who want one app swapped, not an infrastructure project
Not everyone leaving iMessage wants to run a server. Threema is the option that asks nothing except that you install it: an ordinary messenger with an ordinary interface, end-to-end encrypted, with a random Threema ID instead of a phone number or an email address. Your iMessage identity is an Apple ID and a telephone number, both of which point at you by name; a Threema account points at nothing.
Threema GmbH operates from Pfäffikon and charges a one-off CHF 6.00 for the mobile app, with Threema Work from CHF 3.00 per user per month, so the company earns from people buying software rather than from anything it might learn. Its code is published and outside auditors have been through it.
Swiss hosting and Swiss jurisdiction put it outside both the EU and the intelligence-sharing arrangements, under an adequacy decision — which matters less as a flag than as an answer to the pattern this page is about: you stop depending on a single global product whose strongest protection turned out to be adjustable per country.
The honest limits are adoption and polish. The one-off fee stops a meaningful number of people from installing it when you ask, the user base is small next to anything preinstalled, mobile-to-desktop sync has been inconsistent, and there are no message effects, no sticker economy and none of the Apple furniture. It ranks third here because it does the least, and it is on the page because for a lot of people doing the least is exactly the requirement.
What Threema does better than iMessage
- No phone number, email address or Apple ID behind the account, so the identity is not tied to a purchase
- Works identically on iOS and Android, where iMessage protection depends on which handset the other person owns
- Bought once for CHF 6.00, so the company is paid by users rather than by anything it can infer about them
- A Swiss operating company, so the arrangement does not rest on one US vendor's per-country decisions
- Open source with published independent audits, and no cloud backup holding a copy of your key
Where Threema is a step down from iMessage
- The one-off fee is a genuine obstacle when you are asking friends and family to follow
- A small user base, so most of your contacts will not already be there
- Mobile-to-desktop sync has been less reliable than Messages across an Apple household
- No SMS, no tapback culture, no Mac continuity and none of the extras built into Messages
- Does the least of the three entries here, which is the trade for asking the least of you
Standout against iMessage. It is the only entry here you can be using in five minutes without changing anything else about how your devices work.
What actually breaks when you switch
The history does not travel. Messages are held in a local database and in Messages in iCloud, and no messenger on this page will import them.
A local encrypted device backup keeps the archive restorable onto Apple hardware, and desktop tools can extract threads to text or PDF for keeping, but the practical outcome is an archive you retain and a new conversation you start empty. Agree that with the other person before you move, because half of them will assume the thread came along.
Messages stays installed, and planning for that is more useful than pretending otherwise. On an iPhone it is where SMS arrives, which means bank codes, appointment reminders and everyone who has not moved. What you are doing is relocating a handful of conversations that have a reason attached, not emptying the app, and a plan that assumes otherwise fails in the first week.
Whichever you pick, set up recovery on day one and write down what it depends on. Apple made this invisible by holding a copy of the key; Element, Wire and Threema all hand that responsibility back, which is the improvement and also the risk. A recovery key stored only in the password manager on the phone you are recovering from is not a recovery key, and people discover this at the worst possible moment.
If iMessage is encrypted, why would I move?
Because the encryption and the storage are two different systems and only one of them is sealed. Apple states that an enabled iCloud Backup includes a copy of the Messages in iCloud encryption key, so your messages can be recovered. That copy is protected end to end only when Advanced Data Protection is switched on, and it is off by default.
The part people underestimate is that the setting is not fully yours. Your correspondent holds the same conversation on their device, backed up under their configuration, and you have no visibility into it and no say. Turning on Advanced Data Protection on your own account improves your position and does not close the conversation, because half of it lives somewhere you do not administer.
The alternatives on this page remove the question rather than answering it. Threema, Wire and Element all manage the recovery problem with something you hold — a passphrase, a recovery key, an encrypted export — rather than with a cloud backup belonging to the company. That is the substantive difference, and it is much narrower and much more defensible than the usual claim that Apple reads your messages.
Does turning on Advanced Data Protection fix this?
For your own account, largely yes, and it is worth doing whether or not you move. It raises the number of end-to-end encrypted categories from fifteen to twenty-five, iCloud Backup among them, and the copy of the Messages key inside that backup becomes encrypted with it.
Three things it does not fix. Contacts, Calendars and iCloud Mail remain outside end-to-end encryption at every setting, so the list of who you know stays readable. The other person's backup is still governed by the other person. And Apple holds the recovery burden: with Advanced Data Protection on, losing your devices and your recovery method means losing the data, which is a real trade-off rather than a footnote.
The fourth thing is the one this page is built on. Apple has confirmed it can no longer offer Advanced Data Protection to new users in the United Kingdom, and that those who had not already enabled it no longer have the option. A setting that a regulator can remove from a country is a different kind of guarantee from one built into a protocol nobody can switch off remotely.
What do I lose by leaving Messages?
More than you would expect, because Messages is not only a messaging app on an Apple device — it is the place all text arrives. SMS from your bank, two-factor codes, the delivery driver, the person whose phone you have never asked about: all of it lands in the same conversation list. Moving to Threema, Wire or Element means adding an app, not replacing one, and the old app stays open.
You also lose the integration layer. Messages on the Mac with the same threads as the phone, tapbacks, Check In, message effects, satellite texting where it is available, and the fact that a new Apple device simply has your history on it. None of the alternatives reproduces that, and the ones that come closest reproduce the least interesting parts.
What you gain is narrow and it is the whole point: a conversation whose recovery does not run through a company's cloud backup, and an identity that is not tied to whether you bought an iPhone this year. Decide whether that is worth an extra icon for the three or four conversations it applies to. For most people it is, for most of their conversations it is not, and both halves of that sentence are honest.
Is a Swiss or self-hosted service actually safer than Apple?
Not because of the country, and anybody arguing from the flag alone is skipping the interesting part. Switzerland is not immune to legal process and the EU is not a shield. What changes is the shape of your exposure.
With iMessage you depend on a single American company operating one global product, offering one recovery mechanism, and adjusting what it offers per jurisdiction when it has to. The United Kingdom case is the proof: a protection available everywhere else stopped being available to new users in one country, and no user action caused it or could prevent it.
With Threema you depend on a Swiss company paid once for software, with an account that has no identity attached. With Wire you depend on a Swiss company processing in German and Irish data centres. With Element you can depend on nobody at all, because the homeserver can be yours. In each case the number of parties who could be leaned on to change the arrangement goes down, and that — not the country code — is the actual improvement.
Which one to pick
If your objection is precisely that a copy of the key sits in a cloud backup, Element is the answer here, and running your own homeserver is the version of that answer that removes the company from the arrangement rather than swapping it for a different one.
If the conversations that worry you are professional rather than personal, Wire is where they belong: encrypted for everyone by default, processed in Germany and Ireland, and indifferent to which brand of phone the other party is holding.
If you want one app installed tonight and nothing else changed, Threema is the shortest move on this page, and the random ID does something iMessage structurally cannot, which is to hold an account that is not attached to a named person.
And if you stay, at least turn on Advanced Data Protection, understand that it does not cover Contacts, Calendars or iCloud Mail, and remember that the person at the other end of the conversation has their own backup and their own settings. The United Kingdom showed what happens when that switch stops being available; it is worth knowing whether yours is on before somebody else decides.
Frequently Asked Questions
Element if you want the account and its key backup on infrastructure you or your organisation controls. Wire if the conversations are professional and have to include people who do not own Apple hardware. Threema if you want the simplest swap: an ordinary messenger, bought once, with no phone number or email address attached to the account. All three work identically on iOS and Android, which is the property iMessage does not have.
Not the messages themselves. iMessage is end-to-end encrypted and has used the post-quantum PQ3 protocol since iOS 17.4, announced on 21 February 2024.
What Apple documents is narrower and more specific: when iCloud Backup is enabled, that backup includes a copy of the Messages in iCloud encryption key so your data can be recovered, and iCloud Backup is only end-to-end encrypted if you have turned on Advanced Data Protection. The conversation is sealed; in the default configuration a copy of the key is not.
It is the optional iCloud setting that raises the number of end-to-end encrypted data categories from fifteen to twenty-five, adding iCloud Backup, Photos, Notes, iCloud Drive and others. It matters because iCloud Backup is where the copy of the Messages encryption key lives.
Without it, that key is in a backup Apple can access; with it, the key is encrypted too. It is off by default, and it shifts the recovery burden onto you: lose your devices and your recovery method and the data is gone.
Apple states that it can no longer offer Advanced Data Protection in the United Kingdom to new users, and that people in the UK who had not already enabled it no longer have the option to do so.
The same statement, dated 23 September 2025, confirms the feature remains available everywhere else in the world. The point for anyone choosing a messenger is not the politics but the mechanism: the strongest protection on the platform turned out to be something that could be withdrawn from a country by a decision nobody using it was party to.
No, and not at any setting. Apple lists Contacts, Calendars and iCloud Mail as categories that do not use end-to-end encryption, citing interoperability with existing standards. So even with Advanced Data Protection enabled, the record of who is in your life and when you met them is stored in a form Apple can read. For anybody whose concern is who they communicate with rather than what was said, that is the more relevant fact than anything about the message protocol.
Not into another messenger. Messages live in a local database on the device and in Messages in iCloud, and there is no export format that Threema, Wire or Element will import.
A local encrypted device backup preserves the history for restoring to another Apple device, and third-party desktop tools can extract threads to text or PDF for archiving. The realistic plan is to keep the old history as an archive and start the new conversation clean, which is a decision the other person has to agree to as well.
Yes, and that is the advantage over iMessage rather than a concession. Threema, Wire and Element all have full iOS clients, so an iPhone user installs an app and everything works; the difference is that an Android user gets the identical experience and the identical encryption. iMessage is the only system in this comparison where the protection available to a participant depends on which company made their handset.
For a consumer account the question mostly does not arise, because you are not a data controller using it.
For an organisation it is the wrong question anyway: the relevant fact is that Apple Inc. is a US corporation, so a valid US disclosure order reaches the company holding the iCloud backups regardless of which data centre they sit in. If your requirement is that no American company holds any part of the conversation, iMessage cannot satisfy it and no setting changes that.
No, and almost nobody does. On an iPhone, Messages is where SMS arrives, which means bank codes, delivery notifications and anyone whose phone you have never asked about. It stays installed. What moves is the set of conversations with a reason attached — three or four of them for most people — and the app you move them to is an addition to the home screen rather than a replacement for it.
Who worked on this review
Explore More European Alternatives
Discover privacy-focused European alternatives to other popular US tech services.