The use of encryption can effectively protect the user's data, but poses a significant challenge to digital forensics, in which data should be decrypted to be used as evidence. However, some IMs encrypt their data for protection against external threats. This allows for complementary interaction when extracting data generated by the use of IMs. Most messengers are cross-platform, supporting both mobile devices and PCs, and providing synchronization services, a situation which can overcome the constraints of data extraction for evidence acquisition.

PC messenger data, on the other hand, can be collected relatively easily, but tend to be less informative than data from mobile messengers. Messenger apps on mobile devices store user-friendly data, but data collection can be difficult due to various constraints. Instant messenger (IM) apps, which store a variety of behavioral information about users, such as secret chats, group chats, and file sharing, are important tools for digital forensics investigation.

Telegram x ios 2020