Is Signal safe

Is Signal safe to use?

Yes, for most people who want private messages and calls. Signal end-to-end encrypts every message and call by default, and when the law has forced it to answer requests for user data, the only details it could produce were when an account registered and when it last connected. One limit is sign-up: you need a phone number, though you can hide it from the people you chat with. End-to-end encryption means only the people in a chat can read it: the server in the middle passes along scrambled data.

Checked on 24 October 2026. Each fact links to the company's own page.

Is Signal encrypted?

Yes, end to end and by default. Signal's home page says its end-to-end encryption, built on the open source Signal Protocol, covers "every message, every call, every time," and that Signal cannot read your messages or listen to your calls.

Group chats are included, with no setting to turn on: Signal's responses to legal requests say "everything in Signal is end-to-end encrypted by default." Its privacy policy adds that your profile name and picture are end-to-end encrypted.

Can Signal read my messages?

No. Signal's privacy policy says "Signal cannot decrypt or otherwise access the content of your messages or calls." Its servers queue encrypted messages for devices that are offline for a while, and your message history is stored on your own devices.

Encryption protects a message on its way. Once it arrives, it is as safe as the phone or computer it sits on, and Signal's terms of service leave keeping your device and account secure to you.

What does Signal know about me?

Your phone number, and the technical details it needs to deliver messages. Signal's privacy policy lists random authentication tokens, keys and push tokens, and says that, if you let it, the app checks which of your contacts use Signal by sending hashed contact information to its server.

Signal publishes its responses to legal requests. It says it has no access to messages, calls, profile information, group information, contacts, stories or call logs. In March 2026 it published its answer to a grand jury subpoena from a federal court in Washington, D.C., which asked about 37 phone numbers: seven had no account, and for six it gave the account creation time and last connection time.

Is Signal safer than WhatsApp or Telegram?

For encryption, Signal and WhatsApp start from the same protocol, and Telegram end-to-end encrypts less by default. WhatsApp's Encryption Overview names the Signal Protocol as the basis of its end-to-end encryption. Telegram's FAQ says its regular chats and group chats use server-client encryption, and only Secret Chats are end to end.

Server-client encryption protects a message on its way between your app and the company's servers. End-to-end encryption protects it the whole way.

The apps differ more in what each company collects. WhatsApp's privacy policy lists details such as your IP address and when you use the app, while Signal's legal responses show it could hand over only when an account registered and when it last connected. Is WhatsApp safe to use? and Is Telegram safe to use? go into each one.

Does Signal have post-quantum encryption?

Yes. Post-quantum encryption is built to hold even against a future quantum computer strong enough to break today's public-key cryptography. In September 2023 Signal added PQXDH, which starts each new chat with both X25519, today's common key agreement, and the post-quantum CRYSTALS-Kyber, so an attacker has to break both.

PQXDH protects against someone who records encrypted traffic now and decrypts it once such a computer exists. Signal's post said further upgrades would be needed against an attacker who already has one during the conversation.

In October 2025 Signal announced the Sparse Post Quantum Ratchet (SPQR), which keeps mixing new post-quantum keys into a conversation as it goes on, using ML-KEM, the US post-quantum standard. Signal said it was rolling SPQR out so that every conversation moves to it with nothing for you to do.

Who runs Signal?

Signal Technology Foundation, a US nonprofit under section 501(c)(3) of the tax code, according to Signal's donation page. Its home page says Signal is not tied to any major tech company, can never be acquired by one, and is paid for by grants and donations.

Signal's terms of service say it does not sell, rent or monetize your personal data or content, and its home page says the app has no ads and no trackers.

Where does Socketchat fit?

Socketchat is end-to-end encrypted group chat in the terminal, for a group that runs its own server. Rooms and direct messages are encrypted with MLS (Messaging Layer Security), the internet standard for encrypted group chat, and Socketchat keeps all messages private between the people in a room. It needs no phone number. The server sees room rosters, when a message is sent, and IP addresses. Is Socketchat safe? covers the details.

More questions

Is Signal really secure?

Its encryption is open source, and Signal publishes the protocol as specifications on its documentation site. For its newest post-quantum work, Signal's October 2025 post says machine-checked proofs run every time a developer pushes a change. To check that you are talking to the right person, Signal recommends comparing safety numbers, ideally in person.

Does Signal need a phone number?

Yes, to sign up. Signal's February 2024 announcement says people you chat with no longer see your number unless they already have it saved, and an optional username lets someone start a chat with you without it. A setting can also stop anyone from finding you by your number.

Install Socketchat

macOS or Linux, in a terminal
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/sachio222/socketchat/releases/latest/download/socketchat-installer.sh | sh
Windows, in PowerShell
powershell -ExecutionPolicy Bypass -c "irm https://github.com/sachio222/socketchat/releases/latest/download/socketchat-installer.ps1 | iex"
Or with Homebrew, on macOS or Linux
brew install sachio222/tap/socketchat

Open a new terminal when it finishes.

Then start a server with socketchat server init --host chat.example.com and socketchat server run, and open port 7444. Quick start on the home page.

Read next