Decentralized Social Networks

For Iranian users facing aggressive state censorship, internet blackouts, and surveillance, traditional centralized social media platforms (like Instagram, X/Twitter, and Telegram) present significant risks. These platforms provide a single point of failure: the government can block them entirely, or pressure the company to hand over user data.

Decentralized social networks offer a robust alternative. Instead of being run by a single company on a single set of servers, they operate across thousands of independent servers (nodes) that communicate with each other. This structure makes them much harder to censor and gives users greater control over their digital identity.

Why Decentralization Matters in Iran

1. Censorship Resistance: To block a decentralized network, the regime must block thousands of individual servers (instances) or relays, rather than just one domain like twitter.com. If one server is blocked, you can move to another.
2. No Central Authority: There is no single CEO or headquarters to pressure into handing over Iranian user data.
3. Data Sovereignty: You choose who hosts your data. You can join a trusted server hosted in a safe jurisdiction, or even self-host your own server to keep data entirely under your control.
4. Access Without Accounts: Many decentralized platforms allow viewing public content without logging in, bypassing "login walls" used to track users.

---

Mastodon (The Fediverse)

Mastodon is the most popular decentralized alternative to X (formerly Twitter). It is part of the "Fediverse," a collection of platforms that can talk to each other using the ActivityPub protocol. It functions like email: you can have an account on one server (e.g., user@serverA.com) and follow users on another (e.g., friend@serverB.com).

How It Works

• Instances: The network is made up of independent servers called "instances." Each instance has its own rules, administrators, and moderation policies.
• Timelines:
  • Home: Posts from people you follow.
  • Local: Posts from everyone on your specific instance.
  • Federated: Posts from people across the entire network that your instance knows about.

Security & Privacy for Iranian Users

1. Choosing an Instance

Selecting the right instance is critical. Your instance administrator has technical access to your IP address and non-encrypted data (like your DMs).

• Do not use instances hosted inside Iran: These are subject to state law and surveillance.
• Avoid "General" instances if possible: Large instances like mastodon.social are often the first to be blocked by the filtering committee.
• Recommendation: Choose instances hosted in jurisdictions with strong privacy laws (e.g., Switzerland, Iceland, Germany) or run by trusted activist organizations.
• Use a VPN/Tor: Always access your instance via a trusted VPN or Tor Browser to hide your IP address from the instance administrator.

2. Privacy Settings

• Direct Messages are NOT End-to-End Encrypted: Mastodon DMs are visible to the server admins. Never use Mastodon DMs for sensitive operational details. Use Signal for private chat.
• Profile Visibility:
  • Go to Preferences > Profile > Appearance.
  • Uncheck "Suggest account to others."
  • Uncheck "Show follows and followers on profile" (hides your social graph).
• Post Visibility:
  • Set default post privacy to Followers-only or Unlisted to avoid appearing in public timelines unless necessary.
• Automated Deletion:
  • Enable "Automatically delete old posts" in settings. Old posts can be used to build a profile of your location and habits over time.

---

Element (Matrix)

Matrix is a decentralized protocol for real-time communication (chat), similar to a decentralized Telegram or WhatsApp. Element is the most common app used to access Matrix.

How It Works

• Homeservers: You create an account on a specific homeserver (e.g., matrix.org or a private one).
• Rooms: You join chat rooms which can be public or private. These rooms are replicated across all the homeservers of the participants, making them extremely resilient to shutdowns.

Security & Privacy for Iranian Users

1. Encryption

• Native End-to-End Encryption (E2EE): Unlike Mastodon, Matrix supports E2EE for private chats and private rooms. This means the server admin cannot read your messages.
• Verification: Ensure you "verify" sessions with your contacts (using emojis or QR codes) to prevent Man-in-the-Middle attacks.

2. Metadata Risks

• While message content is encrypted, the metadata (who you are talking to, when, and in which rooms) is visible to the homeserver administrator.
• Mitigation: Use a trusted homeserver or one you control. Access via Tor if your threat model requires hiding your IP and usage patterns.

3. Recommended Settings (Element)

• Disable Read Receipts & Typing Notifications: Go to Settings > Preferences and disable these to reduce the metadata you leak about your activity patterns.
• Voice/Video Calls: Disable "Peer-to-Peer" calls in settings if you are calling strangers, to prevent leaking your IP address directly to them.

---

Nostr (Censorship-Resistant Protocol)

Nostr (Notes and Other Stuff Transmitted by Relays) is a newer protocol designed specifically to be uncensorable. It does not rely on "servers" that hold your account.

Why It Is Vital for Iran

• Account Ownership: Your account is just a cryptographic key pair (a Public Key and a Private Key). You do not "register" with anyone. No admin can delete your account.
• Relays: You send your messages to "relays." Relays are simple servers that store and forward messages. If one relay blocks you or is blocked by the regime, you can simply switch to another relay without losing your account or followers.
• Resilience: It is extremely difficult for the regime to block Nostr completely because thousands of relays exist, and users can connect to any of them.

Best Practices

• Protect Your Private Key (nVsec): This is your identity. If you lose it, your account is gone forever. If someone steals it, they become you. Store it in a password manager.
• Public Key (npub): Share this freely so people can follow you.
• Clients: Use clients like Damus (iOS), Amethyst (Android), or web clients like Snort.social via Tor Browser.

---

Comparison Table

Final Recommendations for Iranian Users

1. Do not trust "Decentralized" to mean "Private": On Mastodon and Nostr, public posts are public. On Mastodon, admins can see private DMs. Only Matrix (E2EE) or Signal are safe for sensitive private chats.
2. Use Tor or Trusted VPNs: Even on decentralized networks, your connection to the server reveals your IP address. Always cloak your connection.
3. Pseudonymity: Never use your real name, photo, or handle linked to your real identity. Decentralized networks are public and scraped by surveillance tools.
4. Verification: If following news sources or activists, verify their Identity Key (Matrix) or Public Key (Nostr) through a second channel (like their official website) to ensure you aren't following a regime imposter.