Updated on: September 23, 2024
Skype offers various security features, but concerns about data privacy have grown due to its ownership by Microsoft. Are these concerns justified?
In this article, I’ll discuss Skype’s security measures, including encryption and privacy controls, and explore potential vulnerabilities you should be aware of. I’ll also compare Skype’s safety with other communication tools and highlight important aspects of Microsoft’s data collection practices that could affect your privacy.
Finally, I’ll provide actionable steps to boost your security while using Skype. From adjusting your privacy settings to using a VPN like ExpressVPN, learn about everything you need to know to stay safe. Read on to learn how to use Skype securely and protect your personal data. Editors' Note: ExpressVPN and this site are in the same ownership group.
What Is Skype & Who Owns It?
Skype is a secure voice over internet protocol (VoIP) app that lets you make video and voice calls, send instant messages, and share files over the internet. The platform supports both individual and group calls and is available on a variety of devices, including Windows, Linux, Mac, iPhone, iPad, and Android. Additionally, Skype allows you to make phone calls and send SMS messages, offering both a paid subscription and a pay-as-you-go service.
In 2011, Microsoft acquired Skype, bringing it into its ecosystem alongside tools like Teams and Outlook. As a result, Skype operates under Microsoft’s data policies and security frameworks, which determine how user data is managed and protected.
What Data Does Skype Collect?
Skype — or more specifically, Microsoft — collects various user data. This includes:
- Personal information (names, email addresses, phone numbers, and payment details needed for account creation and transactions).
- Usage data (call history, message content, and the frequency of interactions).
- Information about your device and network (IP addresses, operating system, and device type).
- Location data (for localized services).
- Diagnostic data (helps Microsoft identify and fix issues to improve user experience).
There are some concerns regarding how this data is used, particularly for personalized ads and integration with other Microsoft services. While users can control certain privacy settings, some worry about the extent of data-sharing across the Microsoft ecosystem and the implications for their privacy.
How Does Skype Protect Your Privacy?
Microsoft and Skype have implemented several security features to protect you. Here’s how Skype protects your privacy.
Communications Encryption: TLS and AES
Skype uses a combination of advanced encryption methods to protect all communications, including voice and video calls, file transfers, and instant messages. End-to-end encryption is applied to one-on-one conversations to ensure that unauthorized parties can’t intercept or access the data exchanged. For group calls, while not end-to-end encrypted, Skype still secures data as it moves between users.
Skype relies on two key encryption protocols to protect user communications: Transport Layer Security (TLS) and Advanced Encryption Standard (AES). TLS protects the transmission channel, ensuring that data cannot be intercepted while it’s traveling between users, and AES protects the data itself, making it unreadable without the correct decryption key.
Two-Factor Authentication
Skype offers two-factor authentication (2FA) as an additional layer of security for user accounts. With 2FA enabled, users must provide both their password and a time-sensitive security code to access their account. This code is typically sent via text message or email.
2FA helps protect against unauthorized access, even if a password is compromised. 2FA is not turned on by default, but you can easily enable it through Microsoft’s account settings.
Transparency Reporting
Microsoft’s transparency reports are published in its Reports Hub. They outline any government requests for user data. These reports show how many requests are received, how Microsoft responds, and in which regions requests are made.
Reading these reports, users can see how their data is being handled and under what circumstances Microsoft complies with requests for data. These reports also outline how often Microsoft challenges requests in court.
Data Retention and Deletion Policies
Skype follows Microsoft’s data retention and deletion policies. Microsoft retains certain types of user data only for as long as needed to provide services or meet legal obligations. This means that your call logs, message history, and files are not kept indefinitely unless required by law.
You can also request to have your data deleted through your account settings or by contacting Microsoft’s support team. Once a deletion request is processed, the data is permanently removed from Microsoft’s servers.
How to Protect Your Device & Data While Using Skype
You can take various steps to protect your device and data while using Skype. Here are the settings I recommend checking out.
Enable 2FA in Your Microsoft Account
Follow these simple steps to enable 2FA in your Microsoft account:
- Sign into your account at account.microsoft.com. Once there, click Security in the left-hand sidebar.
- Click Manage how I sign in, then click Turn on under Two-step verification. Note: Sometimes two-factor authentication (2FA) is called “two-step verification” or “two-factor verification”. But don’t worry! It’s all the same thing.
- Click Next.
- Click Get it now to go to the next screen — but don’t follow the on-screen instructions. Instead, I’ll show you how to directly and easily download the Microsoft Authenticator app. You’ll need your Android or iOS device.
- Go to the Google Play Store or Apple App Store on your Android or iOS device, then search for “Microsoft Authenticator”. Once you find the app, go ahead and install it onto your device.
- Open the Microsoft Authenticator app and tap Add account.
- Choose the type of account you’re adding. In my example, I’ve chosen a personal account.
- Tap Sign in with Microsoft.
- Enter your Microsoft account email address, then click Next. Obtain the code sent to your email address, copy it, and paste it into Authenticator. Click Next once pasted.
- You’re now done with the Microsoft Authenticator app. The next step is to go back to your Microsoft account page from Step 4. Make sure to record the recovery code somewhere safe.
Reconsider Sharing Your Location With Copilot
You can control whether or not you share your location with Copilot and Bing. This feature is meant to improve your search results by making them more relevant to where you are. For instance, when you search for local services or directions, Copilot can give you better suggestions if it knows your location.
But if you’re not comfortable sharing your location, you can simply turn it off (the option is under Privacy in the Settings).
Opt out of Voice Clip Contribution
Skype’s translation feature lets you contribute your voice clips to improve the service. The app records your conversations only when the translation feature is active, using voice-to-text technology to transcribe what you say. The transcription is then translated into the selected language, making the conversation accessible to both parties.
With your permission, Skype can use your data to improve its services. Your transcribed audio may be analyzed to help improve speech recognition and translation accuracy. Microsoft may involve employees and third parties in this process, but it anonymizes your data and requires non-disclosure agreements from anyone handling it. But if you still don’t like anyone reading the transcripts of your calls, you can opt out in the Privacy Settings. If you choose not to contribute your voice clips, your audio will be deleted after the call.
Disable Sharing Optional Diagnostic Data
Skype collects various diagnostic data about how the app performs on your device — but it doesn’t include personal details like your name or email address.
Some of this data is required to maintain Skype’s security and performance, while other parts are optional and help improve the product further. The required data helps Microsoft identify issues like frequent crashes or performance problems, allowing them to fix these bugs quickly. Optional data provides more detailed insights that contribute to product improvements. You can choose whether or not to share optional diagnostic data (again, this option is under Privacy in Settings).
Clear Skype Application Data
Skype stores various types of data on your device, such as chat logs, call history, and cached files, along with cookies that track certain preferences and usage patterns. While this stored data helps Skype run more smoothly and makes it easier to retrieve past conversations, it can also accumulate over time, taking up valuable storage space. You can clear this data in the Privacy Settings to free up space and protect your privacy.
Clearing this data removes local information, including cookies, from your device. But it won’t delete your account or remove any information stored on Skype’s servers — only what’s saved on your device.
Use a VPN
A VPN hides your IP address and encrypts the data you send and receive, making it much harder for hackers or third parties to intercept your conversations. This is especially important if you use Skype on public Wi-Fi networks, where data is often less secure and more vulnerable to breaches. A good VPN, like ExpressVPN, ensures that all your online activities remain private, regardless of the network you’re connected to.
Use Antivirus Software
Using antivirus software is essential for protecting your device and data while using Skype. Good antivirus software helps prevent malware and phishing attempts. When you’re online, particularly during Skype calls or file transfers, there’s always a risk that malicious software could try to exploit vulnerabilities in your system. An antivirus program such as Norton scans for these threats in real time, ensuring that harmful software doesn’t compromise your device’s security.
Editors' Note: ExpressVPN and this site are in the same ownership group.
Has Skype Ever Been Compromised?
Yes, Skype has become a target for cybercriminals who use compromised accounts to spread malware. In 2023, Trend Micro cybersecurity experts revealed that hackers had infiltrated Skype accounts to distribute DarkGate malware. This sophisticated malware spread through infected Skype messages, often disguised as legitimate files or links.
DarkGate malware can steal sensitive data, including passwords, and gain remote access to infected devices. While the exact number of compromised accounts has not been disclosed, the scale of the attack suggests that thousands of Skype users may have been affected.
Microsoft has also faced criticism for its privacy practices, particularly regarding using human contractors to review audio recordings from Skype’s translation services. While the company claimed to anonymize data, users were not always aware their conversations could be accessed by humans. This has led to concerns about the potential for privacy breaches.
Skype vs. Other VoIP Apps
Skype competes with apps like WhatsApp, FaceTime, Signal, Google Meet, and Zoom for video and voice calling. These apps all have their own strengths and weaknesses, which I have compared below, so the choice depends on your specific needs.
But overall, Signal is the best choice for users prioritizing privacy. It offers end-to-end encryption for all communications, which Skype only provides for one-on-one calls and messages. However, Skype has more features for business and group communications. For example, it supports screen sharing on both mobile and desktop, while Signal only offers this on desktop. Skype also supports larger group calls than Signal — Signal only supports 50 people.
Quick Comparison of the Most Popular VoIP Apps Today
In short, Skype offers wide device compatibility and solid features, but lacks in areas like encryption and group call capacity compared to other VoIP apps. It’s a good option for casual or business use, but other apps may be more tailored to specific needs.
Frequently Asked Questions
Is Skype 100% safe?
No, Skype is not 100% safe. Like any online platform, it has vulnerabilities that hackers or malicious actors can exploit. While Skype offers encryption and security features like two-factor authentication (2FA), it doesn’t provide end-to-end encryption for group calls and chats, which exposes these communications more.
You can improve your safety by using tools like antivirus software and a VPN and practicing good online habits such as avoiding suspicious links. However, no platform can guarantee complete safety, so you should always remain vigilant.
Are there any dangers to using Skype?
Yes, there are potential dangers when using Skype, but they are manageable with proper security practices. Risks include account hacking, malware spread through malicious links, and privacy concerns related to data collection.
To stay safe, follow some essential safety best practices — use strong passwords, enable two-factor authentication (2FA), and avoid clicking on unfamiliar links or files. Additionally, using antivirus software and a VPN can enhance security while using Skype.
Why shouldn’t you use Skype?
You may choose not to use Skype if privacy is your top concern. Skype only offers end-to-end encryption for one-on-one conversations, leaving group calls and chats less secure. This makes it less than ideal for those who need full encryption for all communications.
Additionally, Skype collects a variety of personal data, including usage data, which is shared across the Microsoft ecosystem. Some users may prefer alternatives like Signal, which offers end-to-end encryption by default for all messages and calls and has fewer concerns regarding data collection.
Can people get your info from Skype?
Yes. By default, some of your profile information such as your Skype name, display name, location, and profile picture can be visible to everyone. However, you can manage these settings to limit visibility to only your contacts.
Having your account hacked is a much bigger privacy concern. If someone gains access to your account, they can see your contact list, call history, and messages. This could lead to further security risks, such as phishing attacks.
Luckily, you can significantly reduce this risk by using strong passwords and enabling two-factor authentication in your Microsoft account. Taking extra steps like using a VPN can further protect your data.
What are the disadvantages of Skype?
The main disadvantages of Skype are limited encryption for group chats and calls and its extensive data collection practices. Skype only offers end-to-end encryption for one-on-one conversations, which may not meet the privacy needs of users concerned about the security of their group communications. Additionally, Skype collects personal data such as call history and location, which some users may find intrusive.
The platform is also less feature-rich than competitors like Zoom or Google Meet, which offer more advanced tools for business use, such as larger participant limits and better collaboration features.