TL;DR: BatChat and Wire both offer end-to-end encryption with zero-knowledge server architecture, but they serve different audiences. BatChat excels in anti-surveillance features like screenshot blocking and preset passwords, with a 50,000-member group limit. Wire offers open-source transparency with Swiss jurisdiction and GDPR compliance. Your choice depends on whether you prioritize enterprise compliance or maximum message-level privacy controls.
Introduction
BatChat (蝙蝠聊天) and Wire represent two distinct philosophies in the encrypted messaging landscape. BatChat, developed by Chengdu Feifu Technology in China, focuses on message-level privacy with features like screenshot blocking, preset passwords (预设密信), and per-message timer controls. Wire, originally co-founded by Skype co-founder Janus Friis and now owned by Wire Swiss GmbH, positions itself as an enterprise-grade communications platform with strong European privacy compliance.
Both apps claim end-to-end encryption and zero-knowledge server design. Both offer features you will not find in mainstream messengers. But under the hood, their architectures, threat models, and ideal use cases diverge significantly.
This comparison examines encryption, server infrastructure, privacy policies, group capabilities, platform support, and pricing to help you decide which messenger aligns with your privacy requirements.
Company Background and Jurisdiction
BatChat: China-Based, Privacy-Focused
BatChat is developed by Chengdu Feifu Technology Co., Ltd. (成都飞蝠科技有限公司), a privately held software company registered in Chengdu, Sichuan Province, China. The company’s ICP registration number is 蜀ICP备19040194号.
BatChat launched as a response to concerns within China’s digital ecosystem about message security and surveillance. Unlike WeChat — which stores messages on Tencent servers and complies with Chinese government data requests — BatChat markets itself as a zero-knowledge platform where even the company cannot access user communications.
The Chinese jurisdiction brings both advantages and challenges. On one hand, Chinese data localization laws mean BatChat’s servers are geographically contained. On the other hand, China’s National Security Law and Cybersecurity Law grant authorities broad data access powers, creating tension with BatChat’s zero-storage marketing claims. The fundamental question is whether BatChat’s architecture genuinely prevents data handover, or whether the claims exist primarily as marketing positioning.
Wire: Swiss Jurisdiction, Enterprise Focus
Wire was founded in 2012, originally as Wire Swiss GmbH based in Zug, Switzerland. In 2019, the company restructured — the consumer messaging app (Wire Personal) was sold to Holding Hampton Group, while the enterprise platform remained under Wire Swiss. In 2023, the consumer app was re-acquired by Wire.
Switzerland is not part of the European Union but maintains strong data protection laws under the Federal Act on Data Protection (FADP), which aligns closely with GDPR. Swiss law does not require Wire to implement backdoors for government surveillance, and Switzerland is not a member of the Five Eyes, Nine Eyes, or Fourteen Eyes intelligence alliances.
Wire’s enterprise customers include governments, financial institutions, and regulated industries across Europe. The company publishes transparency reports and responds to government data requests within the limits of Swiss law.
| Criterion | BatChat | Wire |
|---|---|---|
| Parent company | Chengdu Feifu Technology | Wire Swiss GmbH (Switzerland) |
| Year founded | ~2019 | 2012 |
| Headquarters | Chengdu, Sichuan, China | Berlin, Germany (operational); Zug, Switzerland (legal) |
| Government jurisdiction | China | Switzerland (GDPR + FADP) |
| Transparency reports | Not published | Published |
| Open source | No (proprietary) | Yes (client & server) |
| Primary market | Chinese-speaking users | European enterprise & government |
Encryption Architecture
BatChat: RSA + SRP + Double Ratchet
BatChat encrypts all messages client-side before transmission (消息安全防护后传输). According to BatChat’s official documentation and public statements, the cryptographic stack consists of:
- RSA for initial key exchange and peer authentication
- SRP (Secure Remote Password) for password-based authentication without transmitting credentials over the network
- Double Ratchet for per-message forward secrecy, ensuring that compromising one session key does not expose past or future messages
BatChat’s encryption covers text messages, voice calls, video calls, file transfers, and group conversations. All encryption and decryption happen exclusively on the user’s device. The servers are designed to relay only ciphertext, with no ability to decrypt contents.
The most significant gap in BatChat’s cryptographic posture is the absence of published protocol specifications and independent security audits. Unlike Signal — which has undergone peer-reviewed academic verification — or Wire — whose Proteus protocol is published and auditable — BatChat’s implementation exists as a black box. Users must trust that the claimed primitives are correctly implemented, correctly composed, and free of backdoors.
Wire: Proteus Protocol (Signal Protocol Implementation)
Wire uses Proteus, its own implementation of the Signal Protocol (Axolotl Ratchet), for end-to-end encryption. Proteus consists of:
- Curve25519 for elliptic-curve Diffie-Hellman key exchange
- HKDF (HMAC-based Key Derivation Function) for key derivation
- ChaCha20-Poly1305 for authenticated encryption
- Double Ratchet for forward secrecy and future secrecy on every message
Wire’s Proteus protocol is fully specified in a public document. The implementation is open source and available on GitHub. In 2017, a team from the University of Waterloo and the University of Oxford published an independent security analysis of Proteus, identifying several theoretical weaknesses that Wire subsequently patched. The existence of this public analysis — and Wire’s responsive patching — is itself evidence of the security benefit that comes from open source and specification transparency.
Wire also supports MLS (Messaging Layer Security), the IETF standardized protocol for end-to-end encryption designed specifically for group messaging. MLS was adopted by the IETF in 2023 after years of development by contributors from Cisco, Google, Meta, Mozilla, Phoenix R&D, and Wire itself. This makes Wire one of the earliest adopters of MLS in production.
| Criterion | BatChat | Wire |
|---|---|---|
| Key exchange | RSA + SRP | Curve25519 + HKDF (Proteus) |
| Forward secrecy | Double Ratchet | Double Ratchet |
| Authenticated encryption | Not publicly documented | ChaCha20-Poly1305 |
| Protocol specification | Not published | Proteus (published) |
| Academic audits | None documented | Yes (2017 Oxford/Waterloo) |
| Post-quantum resistance | No | No |
| MLS support | No | Yes |
| Open source | No | Yes (GPLv3) |
Key takeaway: Wire’s encryption benefits from published protocol specifications, academic review, and open-source implementation. BatChat uses established cryptographic primitives but has not subjected its implementation to public scrutiny.
Server Architecture and Data Storage
BatChat’s Zero-Storage Model
BatChat’s official documentation makes a bold claim: “Zero server data storage. Not even the BatChat development team can access user data” (服务器零数据存储 — 即使是蝙蝠聊天开发团队也无法获取用户数据).
Under this architecture, messages are encrypted on the sender’s device, transmitted through BatChat’s relay servers, and decrypted on the recipient’s device. No message content — plaintext or ciphertext — persists on BatChat servers after delivery is confirmed. This extends to files, images, voice messages, and video calls.
The zero-storage claim has a practical consequence for legal compliance: if BatChat’s servers genuinely hold no user data, they have nothing to hand over in response to a government data request. This is the same principle that Wire and Signal rely on — make data access technically impossible rather than merely policy-restricted.
However, zero storage does not mean zero metadata. BatChat’s servers must know which clients to deliver messages to, maintain connection state, and handle push notifications. Like any messaging platform, some metadata (IP addresses, connection timestamps, account identifiers) must flow through server infrastructure. BatChat has not published documentation on metadata retention policies or the degree to which metadata is minimized.
Wire’s Zero-Knowledge Design
Wire implements zero-knowledge architecture: all encryption keys are generated and stored on client devices, and Wire’s servers never have access to plaintext or encryption keys. This is documented and verifiable through Wire’s open-source server code.
Wire stores encrypted data on its servers to enable multi-device synchronization. When a user sends a message from their phone, it is encrypted with each recipient device’s session key and queued on Wire’s server. When the recipient’s laptop comes online, the server delivers the encrypted message. The server holds only ciphertext — the keys never leave client devices.
Wire’s privacy policy explicitly states:
- Messages and calls are end-to-end encrypted
- Wire does not sell user data
- Wire does not use user content for advertising
- Wire does not store message content after delivery (though encrypted sync data may persist temporarily for multi-device delivery)
Wire’s enterprise offering includes additional data retention controls, allowing organizations to configure self-hosted server deployments where all data stays within the organization’s infrastructure. This is not available with BatChat.
| Criterion | BatChat | Wire |
|---|---|---|
| Server storage | Claimed zero | Encrypted queue for multi-device sync |
| Metadata policy | Not documented | Documented, minimized |
| Self-hosting option | No | Yes (enterprise) |
| GDPR compliance | Not applicable | Yes |
| Third-party data sharing | Not documented | None (no ad model) |
Privacy Features
Screenshot and Screen Recording Protection
BatChat offers industry-leading screenshot and screen recording protection (截屏防护/录屏保护). The app blocks system-level screen capture attempts across all chat types — individual conversations, group chats, and secret chats. When a user attempts to screenshot a BatChat conversation, the system returns a blank or black screen rather than capturing content.
This protection extends to screen recording. On compatible Android devices and iOS versions, BatChat prevents third-party screen recording apps and the built-in screen recorder from capturing the app window. This is one of BatChat’s defining features and is not available in Wire or most other encrypted messengers.
Wire does not offer screenshot blocking or screen recording protection. Wire’s security model assumes the recipient is trusted and does not attempt to prevent content capture. This reflects Wire’s enterprise origin — in a corporate context, policy and compliance control behavior more than technical restrictions.
Preset Passwords (预设密信)
BatChat provides preset passwords (预设密信), a feature that allows users to set a password-protected phrase that must be entered by the sender before a chat session can begin. If the sender does not know the preset password, the conversation cannot be initiated. This adds an out-of-band authentication layer on top of the encryption.
This is a unique feature not found in Wire, Signal, Telegram, or WhatsApp. It provides an additional trust anchor: even if someone gains access to a user’s account, they cannot initiate a conversation without knowing the preset password.
Wire provides verified identity through device fingerprint comparison, similar to Signal’s safety numbers, but does not offer the out-of-band password verification that BatChat’s preset passwords provide.
Disappearing Messages
Both BatChat and Wire offer self-destructing messages, but with different implementations:
- BatChat: Per-message timer from 3 seconds to 30 minutes. The timer starts when the recipient opens the message. Screenshot notifications alert the sender if a disappearing message is captured.
- Wire: Per-conversation timer in Wire Personal. Times range from 10 seconds to 4 weeks. The timer applies to the whole conversation, not individual messages.
BatChat’s per-message flexibility is more granular than Wire’s per-conversation approach. For more details on this feature, read our BatChat disappearing messages guide ( opens in a new window).
| Privacy Feature | BatChat | Wire |
|---|---|---|
| Screenshot blocking | Yes (system-level) | No |
| Screen recording blocking | Yes (select devices) | No |
| Preset passwords | Yes | No |
| Disappearing messages | Per-message, 3s-30min | Per-conversation, 10s-4w |
| Screenshot notifications | Yes | No |
| Multi-device deletion sync | No | Yes (encrypted sync) |
Group Chat Capabilities
BatChat: Massive Groups, Limited Administration
BatChat supports group conversations with up to 50,000 members — a capacity that dwarfs virtually every other encrypted messenger. By comparison, Signal and Wire support 1,000 members, Telegram supports 200,000 (but without default end-to-end encryption), and WhatsApp supports 1,024.
This massive group capacity is particularly relevant in the Chinese market, where large community groups on WeChat are common. BatChat positions itself as a privacy-preserving alternative for large organizations, community managers, and event coordinators who need broadcast capability without sacrificing encryption.
BatChat group features include:
- 50,000-member capacity
- Displaying read status indicators
- Group file sharing (encrypted)
- Admin roles and member management
- Bidirectional message deletion (双向删除)
- Bulk invitation via link or QR code
Wire: Enterprise-Grade Group Management
Wire supports up to 1,000 members per group, with a stronger focus on administrative controls and enterprise workflows. Wire groups include:
- Guest rooms for external participants (limited access)
- Granular admin permissions
- MLS-based encrypted group messaging
- Integration with enterprise directories and SSO
- Conference calling with screen sharing
For large organizations with compliance requirements, Wire’s administrative tools — including audit logs, user provisioning, and self-hosted server options — provide capabilities that BatChat does not offer.
| Group Feature | BatChat | Wire |
|---|---|---|
| Max group size | 50,000 | 1,000 |
| End-to-end encryption | Yes | Yes |
| MLS support | No | Yes |
| Guest access | No | Yes |
| Admin audit logs | No | Yes (enterprise) |
| Screen sharing | No | Yes |
Platform Availability
BatChat
BatChat is available on:
- Android: APK download from the official website and select Chinese app stores (Huawei AppGallery, Xiaomi GetApps)
- iOS: App Store (search “蝙蝠聊天” or “BatChat”)
- Desktop: Windows PC client and macOS client available for download from the official website
- Web: No web-based client exists
BatChat is primarily available in Simplified Chinese and Traditional Chinese. English language support exists but is limited — some UI elements and documentation remain in Chinese. This reflects the app’s primary target market of Chinese-speaking users.
BatChat is not available on Google Play Store, F-Droid, or other international app distribution platforms. Users outside China must download the APK directly from the official website.
Wire
Wire is available on:
- Android: Google Play Store, F-Droid (open-source client)
- iOS: App Store
- Desktop: Windows, macOS, Linux (native apps)
- Web: Wire for Web (browser-based client)
Wire supports over 20 languages with full localization. The app is distributed globally through mainstream app stores, making it accessible to users worldwide without sideloading.
| Platform | BatChat | Wire |
|---|---|---|
| Android | APK download only | Google Play + F-Droid |
| iOS | App Store | App Store |
| Windows | ✅ | ✅ |
| macOS | ✅ | ✅ |
| Linux | ❌ | ✅ |
| Web | ❌ | ✅ |
| Languages | Primarily Chinese | 20+ languages |
Pricing
BatChat
BatChat offers a freemium model:
- Free tier: Full end-to-end encryption, all privacy features, and group chat functionality up to reasonable size
- VIP membership: Paid subscription offering extended limits and premium features including larger storage for file transfers, advanced group administration tools, and priority support
BatChat generates revenue through VIP subscriptions. The company does not sell user data or display advertisements.
Wire
Wire offers three tiers:
- Wire Personal (Free): End-to-end encrypted messaging, calls, file sharing for personal use
- Wire Enterprise: Per-user pricing with administrative controls, SSO integration, self-hosting options, and compliance tools
- Wire Government: Custom deployment for government agencies with on-premises infrastructure
Wire’s business model is transparent: enterprise subscriptions fund the platform. Wire does not sell data, display advertisements, or monetize personal user information.
| Pricing Aspect | BatChat | Wire |
|---|---|---|
| Free tier | Yes (core features) | Yes (Wire Personal) |
| Paid model | VIP subscription | Enterprise per-user |
| Ad-supported | No | No |
| Data monetization | None claimed | None (confirmed) |
Privacy and Legal Comparison
Government Data Requests
The jurisdictional difference between BatChat and Wire is substantial:
BatChat operates under Chinese law. China’s Cybersecurity Law (网络安全法) and Data Security Law (数据安全法) grant authorities broad powers to request user data for national security, criminal investigation, and public safety purposes. Chinese tech companies are legally required to comply with these requests.
BatChat’s counter-argument is that its zero-storage architecture makes compliance technically impossible — if the server has no data, there is nothing to hand over. This is a plausible technical defense, but it cannot be independently verified because BatChat’s server code is closed source.
Wire operates under Swiss law. While Swiss authorities can issue data requests, Switzerland’s legal framework provides stronger privacy protections. Wire’s transparency reports disclose the number and nature of government data requests and Wire’s responses. Wire’s open-source server code allows independent verification of data handling claims.
Metadata Collection
Metadata — information about who communicates with whom, when, and for how long — is often as revealing as message content. Both apps address metadata differently:
BatChat does not publicly document its metadata collection or retention policies. The zero-storage claim applies to message content, but it is unclear what connection metadata, usage patterns, or device information BatChat’s servers retain.
Wire publishes detailed data processing documentation. Wire collects: registration data (name, email, phone — optional), device push tokens, and minimal diagnostic data. Wire explicitly states that it does not collect or store communication metadata beyond what is technically required for message delivery.
Which One Should You Choose?
Choose BatChat if you:
- Need the strongest possible message-level privacy protections, including screenshot blocking and screen recording prevention
- Communicate with large groups (up to 50,000 members) while maintaining end-to-end encryption
- Want per-message control over disappearing message timers
- Value features like preset passwords for out-of-band authentication
- Operate primarily within the Chinese digital ecosystem
- Are comfortable with closed-source software and trust BatChat’s zero-storage claims
Choose Wire if you:
- Require open-source transparency and independently audited encryption
- Need enterprise features like SSO, audit logs, and self-hosted deployments
- Operate under GDPR or other European data protection regulations
- Want comprehensive multi-device support including Linux and web clients
- Prefer Swiss jurisdiction with published transparency reports
- Communicate primarily with international contacts who need global app store access
For Maximum Security
For users with the highest security requirements, consider using multiple messengers for different contexts:
- BatChat for maximum message-level protections and large encrypted groups
- Wire for enterprise compliance and open-source transparency
- Signal for academic-grade encryption with the most peer-reviewed protocol in existence (read our BatChat vs Signal comparison for details)
No single messenger is optimal for every threat model. The best approach is understanding the trade-offs and matching the tool to the specific communication context.
Conclusion
BatChat and Wire both deliver on the core promise of end-to-end encryption, but their approaches to privacy, transparency, and trust diverge fundamentally.
BatChat provides the most aggressive message-level privacy features on the market — screenshot blocking, screen recording prevention, preset passwords, and per-message burn timers. For users who prioritize preventing message content from being captured or archived by recipients, BatChat has no equal among mainstream encrypted messengers. However, its closed-source nature and Chinese jurisdiction introduce unknowns that transparency-focused users will find concerning.
Wire provides enterprise-grade encryption with European privacy compliance and full open-source transparency. Its Proteus protocol has been academically analyzed, its server code is public, and its Swiss jurisdiction offers stronger legal protections. Wire’s collaboration tools — screen sharing, conference calling, MLS-based group encryption — make it more suitable for organizational use. However, Wire lacks the message-level capture protections (screenshot blocking, screen recording prevention) that distinguish BatChat.
The choice between them is ultimately a choice between two different visions of privacy: BatChat’s vision of controlling what the recipient can do with your message, versus Wire’s vision of ensuring that nobody but the recipient can ever access your message in the first place.
For a broader look at where BatChat fits in the encrypted messaging landscape, see our comprehensive BatChat security review and our comparison of top encrypted messaging apps. To learn more about BatChat’s features, visit the BatChatHub homepage for the latest guides and tutorials.
FAQ
Is BatChat more secure than Wire?
“More secure” depends on your threat model. BatChat provides stronger message-level protections — screenshot blocking, screen recording prevention, and preset passwords — that Wire does not offer. Wire provides open-source transparency, published protocol specifications, and academic security audits that BatChat has not undergone. For preventing message capture by recipients, BatChat is stronger. For cryptographic assurance through public verification, Wire is stronger. For most users, Wire’s transparency provides higher confidence in the underlying encryption.
Can BatChat messages be intercepted by the Chinese government?
BatChat claims zero server data storage, meaning messages exist on the server only in encrypted transit and are not stored. If this claim is accurate, even a compelled government data request would yield nothing to hand over. However, BatChat’s server code is not open source, so this claim cannot be independently verified. Users should assume that any messaging platform operating under Chinese jurisdiction could potentially be compelled to implement surveillance capabilities if legally required.
Does Wire have screenshot blocking like BatChat?
No. Wire does not offer screenshot blocking or screen recording prevention. Wire’s security model assumes the recipient is trusted and does not attempt to restrict what users can do with message content they have legitimately received. This is standard for most encrypted messengers including Signal and WhatsApp. BatChat’s screenshot blocking is a distinctive feature not available in mainstream alternatives.
Which app supports larger groups: BatChat or Wire?
BatChat supports groups of up to 50,000 members, far exceeding Wire’s 1,000-member limit. For community managers, event organizers, or large organizations that need encrypted broadcast communication, BatChat’s group capacity is a significant advantage. Wire’s 1,000-member limit is standard for encrypted messengers (Signal also supports 1,000) and is sufficient for most team and organizational communication.
Is Wire's open-source code audited for security?
Yes. Wire’s Proteus protocol was analyzed by researchers from the University of Waterloo and the University of Oxford in 2017. The researchers identified several theoretical weaknesses, which Wire subsequently patched. Wire’s client and server code is publicly available on GitHub under the GPLv3 license. Independent security researchers, enterprise customers, and security-conscious users can verify the code matches the published protocol specification. BatChat, by contrast, has not undergone any publicly documented security audit.
Can I use BatChat outside of China?
Yes, BatChat is functional globally. However, you will need to download the APK directly from BatChat’s official website for Android, as the app is not distributed on Google Play Store or other international app stores. The iOS version is available on the App Store by searching “蝙蝠聊天.” The app’s primary language is Chinese, and English localization is limited. If you primarily read English, you may prefer Wire, Signal, or another messenger with stronger English-language support.
Does Wire collect and sell user data?
No. Wire’s business model is based on enterprise subscriptions — paid plans for organizations that need administrative controls, SSO integration, and self-hosted deployments. Wire does not sell user data, display advertisements, or monetize personal user information. Wire’s privacy policy explicitly states that it does not use content, metadata, or any user data for any purpose other than operating the service. This is a fundamental difference from free messaging apps owned by advertising companies.