← All articles
Sovereign XMPP

Sovereign chat is a trust decision, not a server decision

7 October 2026 · 3 min · xmpp · self-hosting · trust · privacy · sovereign

Ask someone why they don’t self-host their chat, and you usually get a version of “it’s more work.” Fair. But underneath that is a quieter assumption: that the person running the server you already use is a fine substitute for you. Every messenger is run by someone. The choice isn’t between “a server” and “no server” — it’s about who you trust to hold the key to the room.

Self-hosting is that decision made deliberately, instead of by default.

The person holding the keys

Whatever app you use, your conversations pass through hardware and software someone else operates. For a walled garden that operator is a company with an advertising model; for a federation it’s a mesh of strangers; for you — once you run your own XMPP server — it’s the person who knows your backup strategy and reads your security notices. That last one is the whole point of a sovereign messenger: the trust is local, explicit, and yours.

This is different from just picking a “secure” app. Encryption answers the question can someone read my words. It says nothing about who sits next to the ledger — the metadata that describes your life even in silence (the thing self-hosting actually protects). Once you’ve decided who you’d trust with that, the comparison against the big apps basically resolves itself (XMPP vs Signal vs WhatsApp).

Talking yourself out of it is the old architecture talking

“Self-hosting is hard” was true when it meant nursing a server in a closet. It’s deliberately less true now. Real, standards-compliant servers run on a small VPS, and mature clients put the whole thing on your actual desktop — Infium ships native builds for Windows and macOS, so owning your chat is no longer a browser-only experiment. The work is real, but it’s the work of being the operator of something you own, not a stranger’s tenant.

What you’re actually choosing

  • Who holds the keys — your server, your call whom to hand them to.
  • Whether the ledger is for sale — no ad arm is inferring your social graph from timing.
  • Whether anyone outside can suspend you — custody of your account is yours.

None of that is automatic. It holds only because you chose it, and you choose it every time you patch, back up, and answer for the box. That’s not a bug in self-hosting; it’s the entire offer. Run it yourself, or join a server you trust — but make it a decision, not a default.

The question was never “which app.” It’s “who holds the keys to my conversations?” For more and more of us, that answer is finally “me.”

Prefer to skip the ops work? Infium is a live XMPP server with OpenPGP end-to-end encryption. Request an invite or try the live demo — it runs in your browser, no signup wall.

← back to infium.net