As of November 2026

Umbera and Session compared

How Umbera and Session handle sign-up, encryption, metadata, source code, channels and price, based on each project’s official documentation.

01

Side by side

SessionUmbera
Phone number to sign upSessionNot required. No phone number or email.UmberaNot required. A username and password; no email either.
End-to-end encryption, one-to-one chatsSessionYes, by default.UmberaYes, by default. Every chat; there is no unencrypted chat type.
End-to-end encryption, groupsSessionYes, by default. Groups of up to 100 members.UmberaYes, by default. Groups use MLS (RFC 9420). The server doesn’t know a message is for a group or who is in it.
Post-quantum protectionSessionNot yet. Session Protocol V2, in development, is planned to add post-quantum cryptography and restore perfect forward secrecy.UmberaMessages: yes. Calls: no. Every message envelope is sealed with X25519 and ML-KEM-1024 together. Calls use DTLS-SRTP (WebRTC), which is not post-quantum.
Sender and metadataSessionOnion routing. Messages travel through the Session network as onion requests. Calls are peer-to-peer, so the IP address is visible to the other person and to a STUN/TURN server.UmberaSender sealed inside the ciphertext. Messages go to a mailbox address only the two people can derive, and it changes periodically. Sizes are padded to blocks. The server sees the delivery time.
Open sourceSessionYes. The apps are published under GPL-3.0, the storage server under MIT.UmberaCryptographic core only. umbera-core (Rust) is open source under Apache-2.0 on GitHub and crates.io. The app and the server code are not published.
Built-in TorSessionNo, its own network. Session describes its onion routing as similar to Tor, with some differences.UmberaYes. One switch routes all app traffic through Tor.
Channels and communitiesSessionYes, Communities. Large public, self-hosted groups; messages are encrypted only in transit to the community server.UmberaYes, Communities. Channels with a separate pseudonym in every channel; private channels are end-to-end encrypted. Open during the trial, then part of Umbera Premium.
Disappearing messagesSessionYes. “Disappear after send” or “Disappear after read”; removed from both devices and from the network.UmberaIn one-to-one chats. 1 minute, 1 hour, 1 day or 1 week; deleted on both phones, attached files deleted from the server. Not available in groups yet.
PriceSessionFree. Session says it will always remain free to use; “Session Pro” premium features may come later.UmberaFree plan and a subscription. After a free trial, a few contacts stay free for good. Encryption, Tor and Shield are always free. Umbera Premium adds any number of people, groups and Communities.
02

Also worth knowing about Umbera

One phone per account.

Signing in on a new phone signs the old one out and erases its local data. There is no desktop app yet; it is on the roadmap.

No password reset.

There is no email or phone number on file. A 12-word recovery phrase is the way back in, and chats are not backed up to a cloud.

Vault and Shield.

Vault hides a message inside an ordinary photo or video. Shield checks the phone for known spyware on the device itself.

03

Sources

Official pages of each project, checked on 7 November 2026.

Umbera

Umbera’s own facts come from its app and server code; the open part can be checked here:

“Not documented” means we found no such feature in the official sources listed on this page. It doesn’t mean the feature can’t exist.

Facts change — tell us at info@umbera.app if something is outdated.

Install Umbera

A free trial with everything open, then a few contacts stay free for good. No card required.