The French government has taken a significant step in enhancing the security of its communications by prohibiting all public sector employees, including ministers, from utilizing popular messaging apps like WhatsApp and Telegram for professional purposes. This directive, effective from September 1, mandates a shift to Tchap, a secure messaging service developed by the state. Prime Minister Francois Bayrou communicated this decision through a circular issued on July 25, emphasizing the necessity of safeguarding sensitive information exchanged within government entities.
Security concerns drive messaging app restrictions
The rationale behind this decision stems from concerns regarding the potential vulnerabilities associated with consumer messaging applications. French officials have expressed apprehensions about the perceived connections of these platforms to foreign intelligence services—WhatsApp being linked to U.S. agencies and Telegram to Russian entities. The Prime Minister’s office articulated that public agents face an escalating risk of interception, which could compromise the confidentiality of their communications.
This directive emerges against the backdrop of increasing scrutiny over U.S. data access capabilities, particularly under the 2018 Cloud Act, which permits American judicial authorities to access data held by U.S. companies, even if that data is stored overseas.
Tchap offers French-controlled alternative to foreign platforms
Tchap, which was established in 2018 by France’s Interministerial Directorate for Digital Affairs (Dinum) with input from various governmental bodies, provides a secure alternative to foreign messaging apps. The platform features end-to-end encryption, with all data stored on French government servers managed by the Interior Ministry. Its name pays tribute to the Chappe telegraph, an 18th-century French communication innovation.
Accessible on both mobile devices and computers, Tchap requires users to register with authorized government email domains, such as gouv.fr or elysee.fr. According to the government circular, Tchap “guarantees complete confidentiality of professional exchanges” and ensures “optimal security and public control of its operation.”
Previous security initiatives paved way for broader mandate
This latest mandate builds upon prior cybersecurity initiatives. In November 2023, former Prime Minister Elisabeth Borne had already instructed ministers and cabinet members to utilize Olvid, another French-developed encrypted messaging service. Under the new directive, those ministerial offices currently using Olvid may continue to do so but are encouraged to prioritize Tchap for communications with state administrations.
Early security challenges highlight ongoing cybersecurity focus
Despite its promising features, Tchap has faced security challenges in the past. During its beta launch in 2019, cybersecurity expert Baptiste Robert identified a vulnerability that allowed unauthorized registration, potentially granting access to information meant for state employees. This issue was swiftly addressed following Robert’s public disclosure.
Meanwhile, Telegram has come under additional scrutiny, particularly after its founder, Pavel Durov, faced charges in France for allegedly failing to provide authorities with information regarding users violating laws on the platform and for inadequate content moderation. Currently, Telegram continues to serve various sectors, including hospitals and universities across France, in addition to its use by government ministries.
