Signal

Signal

@signal.org

Signal is a nonprofit end-to-end encrypted communications app. Privacy isn’t an optional mode, it’s the way Signal works. Every message, every call, every time. https://signal.org/donate/

44.2K followers1 following86 posts

Thank you @duckduckgo.com! We are truly proud to be recognized as a crucial part of the digital privacy ecosystem. Good to be in this work together.

DuckDuckGo@duckduckgo.com

We're proud to donate $1M to a diverse group of organizations around the world that promote privacy, digital rights, access to information online, and a healthier online ecosystem. This is made possible through your support of DuckDuckGo, thank you! 🎉 spreadprivacy.com/2026-duckduc...

A year ago we launched Signal Secure Backups. Now, we’re happy to share all of the additions and improvements we’ve made to backups since then: On-device backups, cross-platform support, storage optimization, and attachment backfill for linked devices. signal.org/blog/backup-...

signal.orgBack to Backups: A Year in ReviewLast September, we introduced an optional new way to automatically keep your Signal data safely and securely backed up so that important messages and memories can be easily recovered if something unex...

Introducing Automatic Key Verification! Complementing the existing safety number system, automatic key verification provides an additional, streamlined way to confirm the privacy of your chats. signal.org/blog/automat... TY @cloudflare.social and @trailofbits.bsky.social our independent auditors 💙🙏

signal.orgIntroducing Automatic Key VerificationSignal now offers a feature called “automatic key verification” which complements the existing safety number system. Signal is always end-to-end encrypted, and automatic key verification provides an a...

New: Link an Android tablet, Android phone, or iPhone as a linked device to your Signal account. The most important links are with the people who matter to you, but if you want two phones, a tablet, and a laptop linked to your Signal account, we’ve got your back. signal.org/blog/linked-...

signal.orgMore linked devices are on the table (and the Android tablet)The latest update for Signal Android introduces comprehensive support for linked devices. Now you can easily link another Android phone or Android tablet to your Signal account. Thanks to significant ...

Polls can now be created in individual chats too. Show a curated list of choices to your indecisive friend or recapture the magic of passing a note to your crush by sending a “Do you like me? Y/N/Maybe” poll

Signal@signal.org

Signal polls are here! Find the best time for your group chat to hang out, choose a vacation destination, or ask if you should give yourself a haircut at 1 AM. Now in the latest version of Signal for iOS, Android, and Desktop. signal.org/blog/polls/

We just increased the maximum number of pinned chats from 4 to 10, so you can show 6 more people how much you love what they have to say.

To help protect Signal users from phishing and social engineering attacks, we’ve introduced additional confirmations and educational messaging in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal. More changes are on the way.

A response to recent reporting in Germany, in service of clarity and accountability: First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, & the integrity of the app’s code was not compromised. 1/

View full thread

For the time being, please stay vigilant against phishing and account takeover attempts. Remember that no one from Signal Support will ever send you a message request or ask for your registration verification code or Signal PIN. 10/

For an added layer of protection, you can enable Registration Lock in your Signal Settings (Account -> Registration Lock). 11/

A response to recent reporting in Germany, in service of clarity and accountability: First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, & the integrity of the app’s code was not compromised. 1/

View full thread

The compromised accounts were then weaponized to target the victims' contact lists by posing as the owners of the account. We understand the trust that people put in Signal, and how devastating this kind of social engineering can be. 8/

While it’s true that all messaging platforms are susceptible to scammers and phishing that betrays people’s trust and convinces them to “unlock the front door” where no backdoor exists, we are looking to do everything we can to help people avoid and detect such scams. 9/

A response to recent reporting in Germany, in service of clarity and accountability: First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, & the integrity of the app’s code was not compromised. 1/

View full thread

Because such a change results in de-registering your Signal accounts, attackers prepared people for this by telling them that being de-registered was intended behavior, and that all they would need to do is “re-register,” or, create a new account. 6/

When they moved to create a new Signal account — one that was now decoupled from their hijacked account — the victims thought they were logging back in to their primary account. As a result, many didn't notice the takeover. 7/

A response to recent reporting in Germany, in service of clarity and accountability: First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, & the integrity of the app’s code was not compromised. 1/

View full thread

Because we don’t collect user data, what we know about these attacks comes from the victims of phishing. And from what victims have told us, the attacks followed a broad pattern: 4/

After tricking people into revealing their Signal credentials, attackers then used those credentials to take over their account and also frequently changed the associated phone number. 5/

A response to recent reporting in Germany, in service of clarity and accountability: First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, & the integrity of the app’s code was not compromised. 1/

However, sophisticated attackers have engaged in a harmful phishing campaign posing as “Signal Support” by changing their profile display name & using social engineering to trick people into handing over their credentials—information that allowed attackers to take over some targeted Signal accts. 2/

This is something that plagues any mainstream messaging app once it reaches the scale of Signal, but we know how high the stakes are given the trust people place in us. In the coming weeks, you’ll see us rolling out a number of changes to help hinder these kinds of attacks. 3/

We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted.

View full thread

Note that no action is needed for this fix to protect Signal users on iOS. Once you install the patch, all inadvertently-preserved notifications will be deleted and no forthcoming notifications will be preserved for deleted applications.

We’re grateful to Apple for the quick action here, and for understanding and acting on the stakes of this kind of issue. It takes an ecosystem to preserve the fundamental human right to private communication.

We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted.

New: Group member labels, a way to describe yourself or your role in a group chat, only visible to that group chat. Label yourself the “Goalie” to your soccer team or “Favorite Child” to your family to stir some drama. Available on Android, Desktop & iOS signal.org/blog/group-m...

signal.orgLabel yourselfWe all take on different roles in relation to our friends, neighbors, family members, and colleagues. Keep those different roles clear in your many Signal group chats by using group member labels, now...

We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously. 1/7

View full thread

While we build robust technical safeguards, user vigilance is ultimately the best defense against phishing. We will continue to work on mitigating these risks via interface design and signposting throughout the app. 6/7

We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously. 1/7

View full thread

To help prevent this, remember that your Signal SMS verification code is only ever needed when you are first signing up for the Signal app. To protect people from such phishing, Signal actively warns users against sharing their SMS code and PIN. 4/7

We also want to emphasize that Signal Support will *never* initiate contact via in-app messages, SMS, or social media to ask for your verification code or PIN. If anyone asks for any Signal related code, it is a scam. We make this clear when users receive their SMS code during initial signup. 5/7

We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously. 1/7

To be clear: Signal’s encryption and infrastructure have not been compromised and remain robust. These attacks were executed via sophisticated phishing campaigns, designed to trick users into sharing information – SMS codes and/or Signal PIN – to gain access to users’ accounts. 2/7

These attacks, like all phishing, rely on social engineering. Attackers impersonate trusted contacts or services (such as the non-existent “Signal Support Bot”) to trick victims into handing over their login credentials or other information. 3/7

New artist-created sticker packs in Signal, ready for you to use to your heart's content. Thank you to the artists: Amanda Cotan, Lexi Vay, Miguel Ángel Camprubí, Plastic Thing & Tiffany Beucher. We love your work!

Signal video and voice calls are now supported for up to *75 participants*! Share your screen, raise your hand, react with the right emoji, and create easily shareable call links with Signal calls. signal.org/blog/call-li...

signal.orgsignal.org
Signal@signal.org

We’ve improved private group video calls in Signal with new features, incl. call links. Create a link that anyone on Signal can use to join a group call *without* having to join a Signal group chat first + raise hand, emoji reactions, calls tab, & more signal.org/blog/call-li...

📌 Pin your most important messages to the top of your 1-1 and group chats. Long press a message to pin it for yourself and everyone else in the chat. Now available on the latest version of Signal for Android, Desktop, and iOS. signal.org/blog/pinned-...

signal.orgPut a pin in itYour most frequently asked questions, dinner reservations, and vacation itineraries are already top of mind. Now they can be top of chat as well. In the latest version of Signal rolling out now, you c...

Signal reposted

Signal reposted

Like many services, as Signal grows, it becomes a more appealing place for scammers to try and cause harm. We've put together tips to help you protect yourself from phishing, scams, & impersonation attempts. Plus info about how Signal support communicates. support.signal.org/hc/en-us/art...

support.signal.orgStaying Safe from Phishing, Scams, and ImpersonationWe provide a privacy-first, end-to-end encrypted (E2EE) messaging and calling platform designed so only you and your intended recipients can communicate securely. Even with strong encryption, attac...

It's been a big year at Signal. Thanks to you, more & more people are speaking privately and freely. Thanks to you, we hit the top of app stores in multiple countries & served as critical global comms infrastructure. It's an honor to build Signal for you, with your support. 🩵

Like many services, as Signal grows, it becomes a more appealing place for scammers to try and cause harm. We've put together tips to help you protect yourself from phishing, scams, & impersonation attempts. Plus info about how Signal support communicates. support.signal.org/hc/en-us/art...

support.signal.orgStaying Safe from Phishing, Scams, and ImpersonationWe provide a privacy-first, end-to-end encrypted (E2EE) messaging and calling platform designed so only you and your intended recipients can communicate securely. Even with strong encryption, attac...

Now available on iOS 😎

Signal@signal.org

Until now, if you lost or broke your phone, your Signal message history was *gone,* a real challenge for everyone whose most important conversations happen in Signal. So, with careful design and development, we’re rolling out opt-in secure backups. signal.org/blog/introducing-secure-backups

Rolling out now, the latest iOS update includes the first cool, refreshing wave of the Liquid Glass redesign for iOS 26 and iPadOS 26 with refined animations and new visual elements.

Signal reposted

PSA: tips to protect yourself from scams on Signal. Every major comms platform has to contend w phishing, impersonation, & scams. Sadly. Signal is major, and as we've grown we've heard about more of these attacks--scammy people pretending to be something or someone to trick and abuse others. 1/

Now on Desktop: Customizable chat folders Keep healthy boundaries between friends & family or work & leisure. Filter 1-on-1 and group chats, put all of your unread messages one place, or make project-specific folders for related chats. Settings > Chats Or right-click any chat

Signal reposted

📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms). It’s also concerning. 1/

Meredith Whittaker @meredithmeredith.bsky.social

PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.