Skip to main content
Comparison

BundesMessenger vs. Wire

Compare BundesMessenger and Wire on what matters for secure public-sector communication: encryption protocol, independent government approval, and collaboration beyond your own authority.

Book a demo
product shot mobile and desktop calling tighter-1

Wire vs. BundesMessenger: Feature Comparison

Feature Wire Stashcat
Security & Privacy
Protocol Implementation MLS (IETF standard) Matrix (Olm/Megolm); MLS is still planned
End-to-End Encryption by Default icon check green inverted icon check green inverted
Admins and Operators Cannot Read Content icon check green inverted icon check green inverted
Encryption-At-Rest icon check green inverted icon check green inverted
Post-Compromise Security icon check green inverted Limited†
Perfect Forward Secrecy icon check green inverted Partial†
Visible Cross-Signed Device Verification icon check green inverted
Fleet Device Verification icon check green inverted Manual verification
Zero Knowledge icon check green inverted icon check green inverted
Zero Trust Architecture icon check green inverted icon check green inverted
Multi-Factor Authentication (MFA)
BSI-approved instrument for German Digital Sovereignty Wire Bund Poor
Core Messaging
1:1 Messaging icon check green inverted icon check green inverted
Private Groups icon check green inverted icon check green inverted
E2EE Public Channels or Rooms icon check green inverted icon check green inverted
E2EE History Sharing icon check green inverted icon check green inverted
Screen Sharing icon check green inverted PC-only
E2EE File Sharing icon check green inverted icon check green inverted
Text Formatting icon check green inverted icon check green inverted
Notification Settings icon check green inverted icon check green inverted
Account Personalization icon check green inverted Display name not customizable
Availability Status icon check green inverted Poor
Read Receipts icon check green inverted icon check green inverted
GIFs icon check green inverted icon check green inverted
Chat History Backup & Recovery icon check green inverted icon check green inverted
Cross Platform Backups icon check green inverted icon check green inverted
Send Audio Messages icon check green inverted icon check green inverted
Pin Conversations Poor icon check green inverted
Mark Message as New Poor
Native Self-Deleting Messages icon check green inverted
Conversation Reactions (Emojis) icon check green inverted
Conversation Search Available in groups
Global User Search (Public Cloud) icon check green inverted
Archive or Organizing Conversations icon check green inverted icon check green inverted
Encrypted 1:1 Audio or Video Calling icon check green inverted via Huddles
Encrypted Large Group Conference Calling icon check green inverted
Guest Access without Sign-Up icon check green inverted
Guest Links with Passwords icon check green inverted
Integration & Ecosystem
Fully Open Source icon check green inverted icon check green inverted
Public Cloud icon check green inverted icon check green inverted
Private Cloud icon check green inverted
On-Premises icon check green inverted
Customizations, SLAs available icon check green inverted No central support
Deploy Third Party Integrated Apps (Bots) icon check green inverted No central support
Federation Scale and Flexibility icon check green inverted In build-up phase
Secure Federation icon check green inverted
Management
User Roles & Permissions icon check green inverted   
Single Sign-On (SSO) icon check green inverted
Automated User Management (SCIM) icon check green inverted
Create Guest Rooms icon check green inverted
App Lock icon check green inverted icon check green inverted
Add/Manage Your Devices icon check green inverted icon check green inverted
Restrict File Sharing icon check green inverted Not documented
Restrict Guest Links icon check green inverted
Additional Feature Configuration icon check green inverted
Team and Workspace Management icon check green inverted icon check green inverted

The competitive data on this page was collected in October 2026 from BundesMessenger's public documentation (docs.bundesmessenger.info), BWI's OpenCoDE repositories, and partner publications by Element. This information may change without prior notice. Wire does not guarantee the completeness or accuracy of the information provided.

† BundesMessenger is built on the open Matrix protocol and derived from the Element app. Where BundesMessenger's own documentation does not describe a capability in detail, particularly its encryption properties, the assessment is based on the published Matrix specification and its Olm/Megolm encryption protocols. BWI may have implemented changes that are not publicly documented.

 

Summary

Wire vs. BundesMessenger, Which One Fits Your Organization?

BundesMessenger is an open-source, Matrix-based messenger that BWI developed for German public administration. Many of the capabilities authorities need from a secure messenger are still on its roadmap. Wire delivers them today:

  • MLS in production, not on the roadmap: Wire secures every message, call, and file with MLS (RFC 9420), the IETF standard for group encryption, BundesMessenger still relies on Matrix's Megolm and plans its first MLS features for the end of 2026.
  • BSI-approved for classified data: Wire Bund is approved by the BSI for VS-NfD communication.
  • Conferencing at scale: Wire runs end-to-end encrypted calls with up to 150 participants on desktop, web, and mobile. BundesMessenger's video Huddles are in beta, capped at five participants, and PC-only.
  • Collaboration beyond your own authority: Guests join Wire from a browser without an account, and Wire federation is already in production. BundesMessenger requires an authorized account for every participant, and its federation is still being rolled out.
Book a Demo
wire vs element-1
certified-1
BSI Approval on Wire Bund

Approved for VS-NfD, Not Just Built for Government

Being developed for the public sector is not the same as being approved for classified data. On April 27, 2026, the German Federal Office for Information Security (BSI) approved Wire Bund for processing and transmitting information classified as VS-NfD (Verschlusssache – Nur für den Dienstgebrauch). The approval is valid until the end of 2028 and subject to regular BSI review.

BundesMessenger is backed by a federal IT provider and widely discussed as the government's own messenger. In publicly available sources, however, we found no BSI approval of the BundesMessenger product for VS-NfD. Earlier VS-NfD use of its predecessor, BwMessenger, was tied to special official mobile devices rather than to the messenger itself.

Wire Bund — BSI VS-NfD approval ISO 27001 ISO 27701 FedRAMP FIPS 140-2 NIST 800-171

 

Download Whitepaper
Collaboration Across Boundaries

Built for Work That Doesn't Stop at Your Authority

Public-sector work involves other agencies, contractors, and citizens. BundesMessenger is designed for authorized users inside German public administration: video Huddles are in beta for up to five participants on the PC client, every participant needs a BundesMessenger or BwMessenger account, and federation between authorities is still being rolled out.

Wire supports encrypted conferences with up to 150 participants on desktop, web, and mobile. Guests join from a browser without an account, links are protected with passwords, externals collaborate with limited rights, and federation connects separate Wire backends in production today, with full control over which backends and users can connect.

Learn more
23
WireMessaging-section1
The Power of MLS — IETF Standard

MLS Today, Not on the Roadmap

Both platforms build on open standards. The difference is which standard secures your conversations right now.

BundesMessenger uses Matrix encryption (Olm and Megolm). Megolm, which protects group chats, does not by itself provide post-compromise security: if a session key is compromised, later messages in that session can be read. BWI's own documentation names MLS as the next step, with first features planned for the end of 2026 and MLS-based federation realistically from 2027 at the earliest.

Wire already runs on MLS (RFC 9420), the IETF standard for group encryption, across messaging, calling, and file sharing:

  • Post-compromise security heals a group after a device is compromised.
  • Efficient key management keeps large encrypted groups and conferences fast.
  • Cryptographic agility prepares the platform for post-quantum algorithms.

Built to Meet Enterprise Demands.

MLS Protocol

Ensure secure, scalable communication for large teams with the latest IETF standard, perfect for regulated industries and high-trust environments.

E2EE by Default

Messages, files, and calls are fully E2EE by default, no setup required. Only you and your designated recipients can access the messages.

SSO & SCIM

Easily manage identities and access control at scale with seamless Single Sign-On and automated provisioning via SCIM for simplified log-in.

ID Shield

Protect your team with added layers of verification, ensuring only the right people gain access to sensitive environments.

Conferencing

Host secure voice and video calls with up to 150 participants. Every session is encrypted end-to-end and secured using MLS.

Guest Management

Invite external collaborators with custom permissions. Maintain full control while enabling secure, temporary participation in shared spaces.

Secure Federation

Collaborate across organizational boundaries with different security clearances without compromising on security and privacy.

Flexible Deployment

Deploy on your terms, whether in the private cloud, public cloud, or on-premises. Maintain compliance and retain full control over infrastructure.

Frequently Asked Questions

Is BundesMessenger approved for VS-NfD?

We found no public BSI approval of BundesMessenger as a product for VS-NfD-classified information. Its predecessor, BwMessenger, has been used for VS-NfD content on special official mobile devices within the Bundeswehr since 2021, where the device environment carries much of the protection. Wire Bund received a direct BSI approval for VS-NfD communication in April 2026, valid until the end of 2028. Organizations that need to exchange VS-NfD information should check the current approval status of any tool with the BSI before deployment.

How do Wire and BundesMessenger differ in encryption?

BundesMessenger uses the Matrix encryption protocols Olm (1:1) and Megolm (groups). Megolm uses a shared session key per room and does not by itself recover after a key compromise. Wire uses MLS (RFC 9420), which provides forward secrecy and post-compromise security for groups of any size. BWI plans to introduce first MLS features in BundesMessenger by the end of 2026, so the two platforms may converge on the same standard over time. Today, only Wire uses MLS in production.

Can I collaborate with people outside my authority?

With BundesMessenger, only authorized users with a personal account can participate, and federation is limited to other BundesMessenger instances. Federation is currently in its build-up phase and available in individual organizations. With Wire, you can invite guests who join from a browser without an account, add externals with limited rights, and federate with other Wire backends.

Is BundesMessenger free?

BundesMessenger is open source and available on OpenCoDE for reuse by public authorities. Operating it, however, is up to each authority or its service provider and requires a Kubernetes cluster and Helm. When comparing costs, factor in infrastructure, operations, and support. Wire offers cloud, private cloud, and on-premises deployments with vendor SLAs.

Why is Wire the better option than BundesMessenger?

Wire offers today what BundesMessenger still has on its roadmap or doesn't offer at all. Every message, call, and file in Wire is secured with MLS, while BundesMessenger plans its first MLS features for the end of 2026. Wire Bund is approved by the BSI for VS-NfD communication, and we found no public BSI approval for BundesMessenger. Wire hosts encrypted conferences with up to 150 participants on every device, compared with BundesMessenger's five-person Huddles in beta on PC. Wire also lets guests join without an account and federates in production, and it comes with flexible deployment options and vendor SLAs instead of requiring each authority to run its own infrastructure.

Get started

See Wire in action

Discover how Wire enables secure, compliant, and seamless collaboration for your team - without compromising usability or control.

Book a demo