Most messengers reduce you to one thing before anything else: a phone number. Not your name, not your keys — a sequence of digits rented from a carrier. The app says “enter your number”, the SIM card that holds it says “I’m the owner”, and from that moment your identity in the app is a relationship you have with… your phone company. It’s the quietest argument for a sovereign messenger there is. Not the cryptography — the identity.
A phone number was built to route calls, not to vouch for people
Phone numbers were designed as addresses for telephones, not identities for people. They’re rented from carriers, bound to a device and a billing relationship, and they live on infrastructure you don’t control. Numbers get ported, suspended, reassigned. Plans lapse. SIMs get lost, swapped, or talked out of people’s hands. Nothing about that makes a good proof of who you are.
Yet the biggest messengers made the number the account. Signal’s own registration instructions are blunt about it: Signal uses your existing phone number, and the number must be able to receive a verification SMS or call (source). Whoever can receive that SMS — you, or someone who persuaded your carrier to issue a replacement SIM — can register as you. That’s the security model, wrapped around a rental.
It’s telling that Signal, the app privacy people trust most, eventually built an escape hatch: its newer Android registration makes a phone number optional, swapping it for a set of cryptographic keys you buy once (source). Read that backwards — the privacy gold standard added a key-based identity because phone numbers were a weakness it wanted people to be able to opt out of.
WhatsApp is the same identity, plus the platform. Registration runs off your number (source), and that number is account data shared across the wider Meta graph (source). Your chat identity isn’t just tied to a SIM — it’s a row in someone else’s ledger, cross-referenced with their other products.
What happens when the number stops being yours
None of this is theoretical. The failure modes are ordinary:
- You move countries. New number, and every account pinned to the old one needs unpinning before the digits lapse — or recovery gets awkward.
- You switch carriers. While the number is in limbo, so are the chats attached to it.
- Someone moves your number without you. Persuade a carrier to port to a new SIM and the verification code guarding the account arrives in someone else’s hand.
Notice what all three share: a third party — the carrier — holds a key to your identity, and you usually find out after the fact. The trust decision you thought you made with one company was actually made with two: the app, and whoever resells your digits.
A name on a domain outlives every SIM
XMPP, the open standard Infium is built on, went the other way long ago. Your address is name@domain — like email, not like a phone number. The identity isn’t rented from a carrier; it’s issued by a server, and the server is a choice, not a billing relationship.
- It doesn’t follow a SIM. New phone, new country, new number — your address doesn’t move, because it was never attached to the hardware.
- Recovery doesn’t run on SMS. On Infium your account is
name@infium.net, created by a human invitation rather than a self-serve signup wall, and the server refuses plaintext connections. - The graph stays where you put it. Infium runs no server-to-server federation, so your identity and contact graph live inside the network you chose — not in a public directory of everyone’s address book. That’s the metadata argument made structural.
- The record follows the address, not the SIM. Your history re-syncs across devices from the server’s archive, so a new phone means “log in”, not “start over”.
- Keys back the identity. End-to-end encryption (OpenPGP in Infium’s case) means “who you are” is finally proven by keys you hold, not by proof that you still rent the number.
The honest trade
The catch is real, and it’s the mirror image of the one you have now. Nobody can SMS you your account back, because there’s no carrier in the loop. Your identity is exactly as safe as your credentials and keys — which is the point. You’re the one holding them. That’s not neglect; it’s the difference between renting the room and running it.
A phone number is a lease. A sovereign address is something you hold — and it’s the layer underneath everything else: moving your chats, owning your metadata, even outliving any product’s roadmap. When the identity is yours, everything built on it can be too.
Infium is a private, invite-only XMPP server where your address is a name on a domain — not a SIM card. Request an invite or try the live demo, no signup wall, right in your browser.