Frequently Asked Questions

Answers to the questions people ask most often about Freedom Messenger.

General

What is Freedom Messenger?

A team messenger you host on your own server. Chat, voice calls, tasks, and file sharing — all under your control. It is designed to work in countries with internet restrictions.

Is it free?

The software itself is available for purchase as a one-time license or subscription. You also need a server to run it on, which typically costs $5/month from any VPS provider. Alternatively, we offer managed hosting where we set up and maintain the server for you.

How is this different from Telegram or WhatsApp?

Telegram and WhatsApp are run by companies that control your data. They can be blocked by governments, and they can read or hand over your messages. Freedom Messenger runs on your server — you control the data, and built-in technology makes it resistant to blocking.

How is this different from Matrix/Element or Mattermost?

Matrix and Mattermost are great open-source tools, but they require significant technical expertise to set up and maintain. Freedom Messenger is designed for simplicity — a single binary, 15-minute setup, and $5/month hosting. It also includes built-in censorship resistance that other tools lack.

Security

Are messages end-to-end encrypted?

Not yet. Messages are encrypted at rest on the server using AES-256-GCM, but the server can decrypt them. End-to-end encryption using the Signal Protocol is planned for v2.0. See Transparency for a full discussion of what is and is not protected.

Can my admin read my messages?

Yes, currently the server admin has access to the encryption keys and can technically read message content. This is a known limitation that E2E encryption will address. If you are choosing a messenger for a group where you do not trust the admin, this is important to consider.

What happens if my server gets seized?

An attacker with physical access to the server can read the config.toml (master secret) and decrypt the database. Regular backups to a separate location and E2E encryption (when available) are the best mitigations.

Is two-factor authentication really mandatory?

Yes. Every user must set up TOTP-based 2FA before they can use the messenger. This is a deliberate design choice — in our threat model, a single compromised account can expose conversations for everyone in those chats.

Technical

What are the server requirements?

Minimum: 1 vCPU, 512 MB RAM, 1 GB disk. A $5/month VPS handles up to 200 users comfortably. See Requirements for details.

What operating systems are supported?

The server runs on Linux (recommended), Windows, or Docker. Client apps are available for Android, macOS, Windows, Linux, and any modern browser. iOS is coming soon.

Can I run multiple servers from one app?

Yes. The Workspaces feature lets you connect to multiple Freedom Messenger servers from a single app and switch between them.

What happens if my server goes down?

Users will see a connection error and cannot send or receive messages until the server is back. The systemd service automatically restarts on failure (with throttling). Regular backups protect your data.

Can I migrate my server to a new VPS?

Yes. Back up the database, files, and config.toml. Set up a new server, restore the backup, update your domain's DNS to point to the new IP. Users reconnect automatically.

Usage

How many users can it handle?

A $5/month server (1 vCPU, 1 GB RAM) comfortably handles up to 200 active users. Larger servers can handle more. The bottleneck is typically disk I/O for the SQLite database.

Is there a message or file size limit?

Files are limited to 50 MB per upload. There is no practical limit on message text length.

Can I use it without installing an app?

Yes. Freedom Messenger works in any modern browser. You can also install it as a PWA (Progressive Web App) for an app-like experience without going through an app store.

Does it work on iPhone?

There is no native iOS app yet (it is in development). iPhone users can use the browser version or install the PWA through Safari. Push notifications work through the PWA.