• Skip to main content
  • Skip to header right navigation
  • Skip to site footer
Restore Privacy Logo

Restore Privacy

Resources to stay safe and secure online

  • Privacy Tools
    • Secure Browser
    • VPN
    • Ad Blocker
    • Secure Email
    • Private Search
    • Password Manager
    • Tor
    • Identity Theft Protection
    • Privacy Tools
  • Reviews
    • Email Reviews
      • ProtonMail
      • Tutanota
      • Mailfence
      • CTemplar
      • Mailbox.org
      • Posteo
      • Fastmail
      • Hushmail
    • VPN Reviews
      • ExpressVPN
      • NordVPN
      • Surfshark
      • Perfect Privacy
      • CyberGhost
      • IPVanish
      • Private Internet Access
      • Netflix VPN
      • Best VPN for Torrenting
      • NordVPN vs ExpressVPN
    • Cloud Storage Reviews
      • pCloud
      • Nextcloud
      • IDrive
      • SpiderOak
      • Sync.com
      • MEGA Cloud Storage
      • Tresorit
    • Secure Messenger Reviews
      • Telegram
      • Signal
      • Wire
    • Password Manager Reviews
      • KeePass
      • NordPass
      • 1Password
      • Dashlane
      • LastPass
      • Bitwarden
  • VPN
    • What is VPN
    • VPN Coupons
      • ExpressVPN Coupon
      • NordVPN Coupon
      • NordVPN Cyber Monday
      • Cyber Monday VPN Deals
      • ExpressVPN Cyber Monday
      • Surfshark Cyber Monday
    • Best VPN Services
    • VPN Router
    • Free VPN
    • Free Trial VPN
    • Cheap VPNs
    • VPN for Firestick
  • Reports
  • Mission
  • Privacy Tools
    • Secure Browser
    • VPN
    • Ad Blocker
    • Secure Email
    • Private Search
    • Password Manager
    • Tor
    • Identity Theft Protection
    • Privacy Tools
  • Reviews
    • Email Reviews
      • ProtonMail
      • Tutanota
      • Mailfence
      • CTemplar
      • Mailbox.org
      • Posteo
      • Fastmail
      • Hushmail
    • VPN Reviews
      • ExpressVPN
      • NordVPN
      • Surfshark
      • Perfect Privacy
      • CyberGhost
      • IPVanish
      • Private Internet Access
      • Netflix VPN
      • Best VPN for Torrenting
      • NordVPN vs ExpressVPN
    • Cloud Storage Reviews
      • pCloud
      • Nextcloud
      • IDrive
      • SpiderOak
      • Sync.com
      • MEGA Cloud Storage
      • Tresorit
    • Secure Messenger Reviews
      • Telegram
      • Signal
      • Wire
    • Password Manager Reviews
      • KeePass
      • NordPass
      • 1Password
      • Dashlane
      • LastPass
      • Bitwarden
  • VPN
    • What is VPN
    • VPN Coupons
      • ExpressVPN Coupon
      • NordVPN Coupon
      • NordVPN Cyber Monday
      • Cyber Monday VPN Deals
      • ExpressVPN Cyber Monday
      • Surfshark Cyber Monday
    • Best VPN Services
    • VPN Router
    • Free VPN
    • Free Trial VPN
    • Cheap VPNs
    • VPN for Firestick
  • Reports
  • Mission

Signal Messenger Review

January 14, 2021 By Heinrich Long — 76 Comments

signal messenger review

Signal is a secure, free, and open source messaging application that uses end-to-end encryption to securely send and receive all kinds of communications with other Signal users. Using the Internet for all encrypted communication, Signal comes highly recommended by some of the top privacy and security advocates.

In this Signal review, we’ll look at the capabilities, usability, and security that Signal offers. We’ll also talk about how the design of the service provides extremely strong protection for your privacy. Signal is truly impressive, so let’s cut the chatter and dig in to the review.

Signal Pros and Cons

+ Pros

  • End-to-end (E2E) encryption
  • Encryption algorithms: Signal protocol, with Perfect Forward Secrecy (PFS) for text messages, voice messages, and video calls
  • Open source software
  • Disappearing messages (aka self-destructing messages)
  • Published transparency reports
  • Logs minimum amount of data
  • Does not log IP Addresses
  • Can replace your phone’s SMS messaging app
  • Focus is totally on individual users
  • All Signal products are free of charge

– Cons

  • Requires a telephone number to sign up

Now we’ll briefly cover the main features of Signal encrypted messenger.

Feature summary

Here are some key features to consider when deciding whether the Signal app is right for you:

  • Signal is generally considered the most secure messaging app in existence.
  • 100% open source code. The code is available on GitHub.
  • The Signal Messaging Protocol was independently audited in 2016.
  • The service is fully GDPR compliant.
  • Clients for Android, iOS, Mac OS, Windows, Linux.

Company information

In 2013,  Moxie Marlinspike (real name Matthew Rosenfeld) founded Open Whisper Systems to develop the Signal app and protocol. In 2018, Marlinspike and Brian Acton founded Signal Messenger, LLC, to take over the development of both the Signal app and the Signal Protocol.

Signal Messenger, LLC is funded by the Signal Technology Foundation (aka Signal Foundation), a 501(c)(3) non-profit organization. All products of the Signal Foundation are published as free and open-source software.

Where is your Signal data stored?

When you use Signal, your data is stored in encrypted form on your devices. The only information that is stored on the Signal servers for each account is the phone number you registered with, the date and time you joined the service, and the date you last logged on. As Signal points out,

Notably, things we don’t have stored include anything about a user’s contacts (such as the contacts themselves, a hash of the contacts, any other derivative contact information), anything about a user’s groups (such as how many groups a user is in, which groups a user is in, the membership lists of a user’s groups), or any records of who a user has been communicating with.

All message contents are end-to-end encrypted, so we don’t have that information either.

This is great for your privacy, since no one can get any more information than that without physical access to your device or those of the people you communicate with.

This is different from apps like Wire messenger, which stores info about your contacts on central servers. However, it does mean that if you want to keep copies of your messages, you will need to configure Signal to back them up and restore them on your device.

Follow this link for instructions on using Signal backup and restore.

Third-party testing and audits of Signal

Even when a product is 100% open source like Signal, you don’t really know how good it is until someone checks it out. Here are some published findings by experts you can review to see how good Signal really is.

Signal security audits

A formal security analysis of the Signal protocol was conducted in 2016. According to that analysis, conducted by researchers from Germany, Switzerland, the United States, and Canada, there were no major flaws in the design. It showed that the protocol was cryptographically sound.

This analysis has been updated several times since, without changing the researcher’s conclusion that the protocol is sound. The last update was published in July, 2019.

Note: In September, 2019, a bug in the user interface of the Android version of the Signal app was discovered that could have allowed an attacker to eavesdrop on Signal users.

According to Vice.com, the bug was fixed the same day it was reported. This incident shows both the responsiveness of the Signal team, and the importance of keeping your copy of the Signal app and desktop updated.

Signal hands-on testing

For purposes of this Signal review, I tested out the mobile app for Android, along with the Linux desktop app.

Note: Signal is different than many other secure messaging apps in that you need to install and register it on a mobile phone before you can use it anywhere else. Therefore, I’ll address the mobile (Android) app first.

Installing Signal on an Android phone

Installing Signal on an Android phone involves downloading the app from Google Play and registering your phone using your telephone number. Some people object to registering using a phone number instead of an email address or anonymous username.

But registering with your phone number lets Signal connect easily to your phone’s contact list. Another benefit to this approach is that it lets Signal replace your phone’s built-in messaging app on Android devices.

Note: You can download an Android Signal APK here, and install the app that way, but Signal recommends against it unless you are an advanced user with special needs that would justify doing so.

Once you finish installing and registering your account, the Signal app will use your Internet connection to securely communicate with other Signal users by text, voice, video, group messaging, even file sharing, all using the secure Signal protocol.

Note: If you replace Android’s messaging app with Signal, you will need to distinguish between Signal users and non-users before sending messages. That’s because Signal cannot send encrypted SMS or MMS messages, meaning messages to non-Signal users will not be secure. Signal notifies you whenever you are messaging someone with a Signal account, and will offer you an easy way to invite non-users to join Signal when you connect to them.

Working with Signal

When you open Signal app you’ll see a list of your current phone contacts who are Signal users. The interface itself is clean and includes a wealth of information about the status of your contacts and your communications with them:

signal messenger android image

Tap the listing for a particular contact to open it. You’ll see the full thread of your conversation with that contact, the same as you would with any other messaging app.

But Signal has a number of features that can enhance your privacy, adjust the user interface, or just have fun adding things like animated stickers. Here are some of those features:

  • Secure connection indicators – For iOS and Desktop Signal apps, all communications are always secure. For the Android app, the text input field for a conversation will show the words, “Signal message” and the Send icon will be blue and include an image of a closed lock when the connection is secure.
  • Message reaction emojis – Quickly reply to messages with emoji reactions.
  • View-once media – On mobile devices you can configure individual photos and videos to disappear after they have been viewed once.
  • Group chats – Stay connected with your family and other groups of people.
  • Insights – For Android users, a system that shows you what percentage of your Signal messages were sent encrypted.
  • Disappearing messages – Set messages to disappear from both your and the recipient’s devices after a set amount of time has elapsed.
  • Safety Numbers – Verify that you are communicating with the device you expect to be talking to by comparing safety numbers.
  • Encrypted stickers – Add some fun without compromising your security.

Not only are the Signal mobile apps good looking and feature packed, they are also well made. Reviews are also good with Signal receiving ratings of 4.8 out of 5 stars at the Apple app store and 4.5 out of 5 stars at the Google Play store.

Signal Desktop clients

Signal officially supports the following desktop platforms:

  • Windows
  • Mac OS
  • Linux (64 bit and 32 bit)

Installing Signal Desktop for Windows or Signal Desktop for MacOS is just like installing any other app. It only takes a moment to download, and seconds to install.

Installing Signal Desktop for Linux isn’t a particularly user-friendly process. You need to be able to do a bit of work on the Linux command line, but after a couple of steps you’ll have Signal Desktop for Linux installed and ready to run.

Because your phone number is the only way Signal can identify you, you need to link your account to Signal Desktop. Launching Signal Desktop for the first time displays a QR code you can use to make the connection It will look something like this:

signal messenger desktop linking

Follow the directions on the bottom of this window to connect Signal Desktop to your mobile device and sync your data between the two.

Once the desktop is synched to your mobile phone, you’ll see that clean Signal interface along with your contacts.

signal messenger desktop interface

I’ll leave it up to you to explore what else the Signal Desktop can do besides displaying those fun stickers!

Support

Signal Support is a searchable collection of around 70 articles addressing the most common questions and topics a Signal user might want information on.

signal messenger support page

For cases where this isn’t enough, you can hit the Contact Us link at the top of the page to submit a help ticket.

How secure and private is Signal

When it comes to security, the Signal messaging protocol is generally considered to be the most secure messaging protocol available. It is so good that many other messaging products, including Facebook Messenger, Skype, and WhatsApp, claim to have adopted the protocol for use in their own products.

When it comes to privacy, Signal is also a winner. As we discussed earlier, Signal only records three bits of information about their users. This is far less information than other services collect.

And you can take the privacy protections even one step further. This article has detailed instructions for registering a Signal account without disclosing your personal phone number.

Transparency reports

Signal has published only one transparency report, which you can see here. The report, from October 2016, is incredibly detailed, even including transcripts of the subpoena used, and all the additional communication that passed back and forth.

signal encryption report

It would be great to see more transparency reports, on a regular schedule, like we see with other services. For example, we noted regular transparency updates in our ProtonVPN review. As another example, Surfshark has a warrant canary that is updated daily.

Signal business features

Unlike other messaging services, such as Wire, Signal offers only a single, free version. There are no pricing tiers, no extra-cost features, and no business-specific features. This is consistent with the idea behind the product, which is to become the most secure messaging app available. Nothing more, nothing less.

Signal prices

The Signal pricing model is about as complicated as the list of Signal business features. The price for everything they publish is zero.

Everything is free and open source software.

While you can use everything from Signal free of charge, the Signal Technology Foundation is an independent 501c3 nonprofit. They are committed to developing open source privacy technology that is desperately needed in this world of endless surveillance. You can make a contribution to the organization by visiting this page, and following the directions you find there.

Conclusion: Consider using Signal in 2021

Signal is clearly one of the leading secure messaging apps available today. While some people dislike the requirement to register with a phone number, the design of the whole system is such that it is hard to see this as a major problem. I have no qualms about recommending Signal to anyone investigating encrypted messaging services for personal use.

It is also a great alternative to WhatsApp that people are flocking to in 2021 as privacy concerns mount with WhatsApp and Facebook.

But you don’t need to take my advice on this. Users are flooding into the Signal camp from all directions. According to this February 2020 article at The Verge, The European Union has told its staff to switch to Signal for all its public instant messaging.

And let’s not forget these endorsements from big-name privacy and security advocates:

signal messenger endorsements

The most recent “big name” recommendation for Signal came from Elon Musk in response to the latest WhatsApp privacy issues.

elon musk on signal messenger

What else is there to say?

Is Signal right for you?

It is hard for me to imagine someone reading this post for whom Signal would not be the right secure messaging app. And remember: If the need to register with a phone number really bothers you, read this article for alternatives to giving Signal your personal phone number.

One other reason not to try Signal: if most of the people you need secure messaging for are already using another secure messaging service like Wire or Telegram, it might make sense to join them there instead of trying to get them to all move to Signal.

Beyond those cases, I believe that anyone looking for a secure messaging service should try Signal now.

For alternatives, check out our roundup of the best encrypted messaging apps.

Last updated on January 14, 2021.

Heinrich Long

About Heinrich Long

Heinrich was born in a small town in the Midwest (USA) before setting sail for offshore destinations. Although he long chafed at the global loss of digital privacy, after Edward Snowden’s revelations in 2013, Heinrich realized it was long past time to join the fight. Heinrich enjoys traveling the world, while also keeping his location secret and digital tracks covered.

Reader Interactions

Comments

  1. AvatarSR

    April 4, 2021

    Re “you need to install and register it on a mobile phone before you can use it anywhere else” —
    does that mean you can’t install and register for desktop use with a Google Voice number?

    Reply
  2. AvatarFirefox

    April 2, 2021

    if Signal have the features,Screenshot notification, like WickrMe, it would be the best

    Reply
  3. Avatarchalkoutline

    March 19, 2021

    According to this article, Signal is government-funded and contains a backdoor. Thoughts? https://yasha.substack.com/p/signal-is-a-government-op-85e

    Reply
    • Sven TaylorSven Taylor

      March 20, 2021

      Yes, I find the article interesting, but while there are lots of suggestions, it’s still lacking concrete proof of anything. But if this is enough to make you want to jump ship, there are other good secure messengers here.

      Reply
    • AvatarGomez

      March 23, 2021

      Actually, a backdoor is not needed. Has anyone seen Anroid or iOS system code ?
      When you can see keystrokes, encryption is irrelevant. There’s only one encryption method (otp) that cannot be broken, use it, then enter the cipher text into the messaging app. This renders keyloggers useless.
      Convenient… no. Secure… absolutely.

      Reply
      • AvatarMike

        March 26, 2021

        Could you describe how to do that or post a link to a website with instructions about the OTP encryption you speak of?

        Reply
  4. AvatarMike

    March 10, 2021

    With the concerns about the FBI being able to access a Signal user’s messages, this article breaks down what happened and the information the FBI received was, most likely, of little use for their investigation. Also, the author distinguishes the information the FBI obtained, including comparing Signal to Apple’s iMessage and how Signal is much more secure and private than Apple’s encrypted messenger.

    https://thehackernews.com/2016/10/signal-messenger-fbi-subpoena.html

    Reply
  5. Avatarm

    February 24, 2021

    NSA/DI has Signal’s decryption keys.

    Reply
    • Sven TaylorSven Taylor

      February 24, 2021

      Proof?

      Reply
      • AvatarJ

        March 23, 2021

        And with that, the anonymous account fell silent…

        Reply
  6. AvatarMatrixxWeb

    February 24, 2021

    Hi,

    This review is impressive. I wonder! How did you test the app do you have a particular software to do that, I am very curious I’m also interested in testin.

    Thanks
    MatrixxWeb

    Reply
    • AvatarPitian

      March 25, 2021

      Two weeks ago I got my first spam message on Signal which is supposed to be impossible. The message purported to be from Amazon (although I don’t have an Amazon account) and offered me a new iPhone if I clicked on a link to claim my reward which of course I didn’t do. The message apparently originated in Vietnam. I immediately reported the security breach on the Signal support link with full details. I still have the message on my phone. Also followed up a week later. No response.
      This is completely unacceptable. I’ll give it another week then delete Signal after telling all my contacts why.

      Reply
      • AvatarDiti Dickson

        March 31, 2021

        I also received the same spam purportedly from Amazon offering me an Iphone 12. Also my friend who had recommended I change to Signal also received the same span. So much for security.

        Reply
        • Avatarpitian

          April 10, 2021

          Hi Diti Ditson. Others are reporting spam too. I’ve deleted Signal but kept this link. It’s strange that Signal’s support team doesn’t seem to be interested in this.

  7. AvatarLostinTexas

    February 22, 2021

    Wish it worked on my computer. Otherwise it is OK, time will tell.

    Reply
  8. Avatarkeram

    February 8, 2021

    @to pee or not to pee and @Sven Tylor
    About that article from rt.com (…national security…): Does it mean that it’s not safe to use Signal? Is the government able to see the content of the messages?

    Reply
    • Sven TaylorSven Taylor

      February 8, 2021

      As I always say, choosing privacy tools is a subjective process and a lot of it just comes down to who you trust. Remember that Signal is completely open source and has been audited. I think it remains a fine choice. But there are many other options if you want to consider other secure messengers.

      Reply
    • Avatarto pee or not to pee

      February 8, 2021

      the content? that’s the question. i think, simply because something is open source, it doesnt mean that is safe.
      Please think again… when audited also means safe to use, why the need for updates then and how many updates got it since the last audit?
      are you able to choose yourself the encryption key between you and the other end?

      Reply
    • AvatarLoC

      February 14, 2021

      There seems to be an assertion circulating that because Signal was created by the US government/TLA’s it’s somehow not ‘safe’. That argument is non-sequitur.

      The RT article cited below is actually very good in that they explain the reason for Signal’s initial creation, i.e. to aid in the overthrowing of democracy-hostile governments. And I’d suggest this in itself is not a cause for concern.

      And on a more objective level the encryption seems to be sound as does the security model. And given it has now had a lot more public attention and yet no further qualified concerns have been raised I’d think it safe enough for most people.

      And anyway if you were really that concerned you wouldn’t be using a cellular telephone network for anything sensitive. They are pretty much commercial arms of government and as such beholden to them.

      Reply
  9. Avatarto pee or not to pee

    January 27, 2021

    first you have to have notional scrutiny clearvoyance to pass the examen, and if you follow a bright light, you will most certainly fail due to the blinded by the bright light outcome.

    https://www.rt.com/op-ed/513732-signal-messenger-us-national-security/

    Reply
    • Sven TaylorSven Taylor

      January 27, 2021

      Well that’s interesting. Thanks for sharing.

      Reply
    • AvatarJD

      April 6, 2021

      Russian State misinformation. News and information originating from any RT outlet should be considered suspect, or, at least, taken with a large grain of salt regarding sources and intents.

      From Wikipedia :

      “RT (formerly Russia Today) is a Russian state-controlled international television network funded by the federal tax budget of the Russian government. It operates pay television channels directed to audiences outside of Russia, as well as providing Internet content in English, Spanish, French, German, Arabic, and Russian.”

      https://en.wikipedia.org/wiki/RT_(TV_network)

      Reply
      • Sven TaylorSven Taylor

        April 6, 2021

        Sure, but I’d also say Wikipedia pushes propaganda as well…

        Reply
« Older Comments

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Sidebar

Essential Privacy Guides:
Secure Browsers
Private Search Engines
Secure Email
Best Password Managers
Secure Messaging Services
Best Ad Blockers
Best VPN Services
Secure Cloud Storage

Privacy & Security Guides:
Privacy Tools
Alternatives to Google Products
Firefox Privacy Modifications
Five Eyes, 9 Eyes, 14 Eyes Spying
Browser Fingerprinting
Is Tor Safe?
Alternatives to Gmail
VPN vs Tor
Alternatives to WhatsApp
Is Your Antivirus Spying on You?
Controlling Communication Channels is Crucial for Privacy
Anonymity Networks: VPNs, Tor, and I2P
How to Really Be Anonymous Online
Private and Anonymous Payments

Secure Email Reviews:
ProtonMail Review
Tutanota Review
Mailfence Review
Mailbox.org Review
Hushmail Review
Posteo Review
Fastmail Review
Runbox Review
CTemplar Review
Temporary Email Services
Encrypted Email

Password Manager Reviews:
Bitwarden Review
LastPass Review
KeePass Review
NordPass Review
Dashlane Review
1Password Review
Best Password Managers

Secure Messaging App Reviews:
Wire Review
Signal Review
Threema Review
Telegram Review
Session Review
Wickr Review

VPN Reviews and Guides:
What is a VPN
ExpressVPN Review
NordVPN Review
Surfshark Review
Perfect Privacy Review
ProtonVPN Review
IPVanish Review
Avast VPN Review
VyprVPN Review
Private Internet Access Review
PureVPN Review
CyberGhost Review
VPN Routers
Best VPN for Netflix
Best VPN for Torrenting
Best VPN for Firestick
No Logs VPN Services
Cheap VPNs
ExpressVPN vs NordVPN
NordVPN vs Surfshark

How To Guides
How to Encrypt Files on Windows
How to Encrypt Email
How to Configure Windows 10 for Privacy
How to use Two-Factor Authentication (2FA)
How to Secure Your Android Device for Privacy
How to Secure Your Home Network
How to Protect Yourself Against Identity Theft
How to Unblock Websites
How to Fix WebRTC Leaks
How to Test Your VPN
How to Hide Your IP Address
How to Create Strong Passwords
How to Really Be Anonymous Online

Recommended Privacy Setup

  1. Secure browser: Modified Firefox or Brave
  2. VPN: NordVPN or Surfshark
  3. Ad blocker: uBlock Origin or AdGuard
  4. Secure email: Mailfence or ProtonMail
  5. Secure Messenger: Signal or Threema
  6. Private search engine: MetaGer or Swisscows
  7. Password manager: NordPass or Bitwarden

Support this Project

Restore Privacy was created to provide you with honest, useful, and up-to-date information about online privacy and security topics. You can support this project through donations, purchasing items through our links (we may earn a commission at no extra cost to you), and sharing this information with others.

You can read our mission here.

Restore Privacy is also on Twitter

COPYRIGHT © 2021 RESTORE PRIVACY, LLC · PRIVACY POLICY · TERMS OF USE · CONTACT · SITEMAP