Signal Review – A Review of the Privacy-focused Messaging and Voice Calling App

Signal is a free messaging and voice call app designed with privacy in mind that can be found on iOS, Android and desktop platforms. With it you can send texts, pictures, videos and files as well as make one-on-one or group voice and video calls.

This app also enables users to verify conversations by verifying with safety numbers, and offers features like read receipts and screen security that enable messages to disappear similar to Snapchat.

End-to-End Encryption

End-to-end encryption safeguards all your calls, texts, pictures and files while they travel from your phone to another person’s. No one can see what is being sent until it reaches its intended recipient device – eliminating governments and hackers’ ability to eavesdrop.

Signal is popular with users concerned with privacy. Its non-intrusive messaging approach sets it apart from mainstream apps like WhatsApp owned by Facebook that collect user data en masse – although that doesn’t guarantee immunity against cyber attacks; indeed it was recently breached.

Hackers recently used Twilio, used by Signal and other services, as the target of their attack. They accomplished this through phishing campaigns that targeted employees of Twilio services to convince them to click a link, and their passwords were exposed so attackers could use these codes to get into Signal accounts and log into three. Unfortunately they weren’t able to gain access to correspondence or contact lists unless victims enabled Registration Lock; without that private PIN they wouldn’t have been able to activate their accounts on new devices without knowing their private PIN which can only be obtained by accessing settings from inside an app’s settings.

Three users were only affected by this attack; nevertheless, it serves as a timely reminder that even if you use an encrypted messenger like Signal, your messages still must pass through multiple devices to reach their intended recipient(s). That is why mobile devices must be protected using passwords, fingerprint authentication and strong PINs.

As part of your Signal account security plan, all sensitive data should be spread out among multiple devices to avoid being completely lost if one device gets stolen or lost. Furthermore, profile PINs offer another level of protection, helping keep account data even if switching phones. You’ll find this option within the Settings of the app where you can select one when first joining or change it later if need be.

Safety Numbers

Safety Numbers are an invaluable feature of Signal, helping users verify that the person they’re communicating with is indeed who they claim to be. Every time someone initiates a dialogue in Signal, a unique code known as the Safety Number is generated and shared between both parties involved – this safeguard prevents attacks such as man-in-the-middle attacks by making sure only your intended recipients can see your texts or calls.

When your Safety Number with a contact changes, typically an alert will notify you on your phone of this change and allow you to re-verify that it belongs to the correct individual and whether any malicious actors may be intercepting your communications. Unfortunately, recent research revealed that this wasn’t always happening on certain platforms; researchers suggested that either party’s Safety Number may not necessarily alter when one reinstalls an app or switches devices.

Signal has made changes to its safety numbers to combat this issue, no longer using phone numbers as safety numbers but instead choosing per-conversation safety numbers instead. This still uses one key for encryption but makes it more difficult for cryptanalytic attacks to uncover identity keys from them.

Signal has taken an impressive step to protect the privacy of your conversations, which is great to see them take such an aggressive stance towards security in their software. However, please keep in mind that this only protects from cryptanalytic attacks; phone numbers could still be published or shared via other methods such as social media sites.

Signal, in an attempt to resolve this problem, informed Bleeping Computer that they had been aware of this issue since November and had implemented updates. They noted that most safety number changes occur when users reinstall or upgrade their phone; nevertheless, it may still be worth verifying any contact whose number has changed, even if you previously verified them.

Auto-Destroy Messages

Signal’s Auto-Destroy Message feature works similarly to Snapchat in that messages will automatically delete from a receiver’s device after a set period has elapsed, removing any trace of sensitive conversations and providing added privacy by eliminating risk from taking screenshots or saving messages meant for private communication. This is an ideal feature for those wishing to prevent someone taking screenshots or saving messages that should remain private.

Signal offers more than just Auto-Destroy Message; users can take steps to protect themselves by activating Screen Lock on their devices to stop taking screenshots when the Signal app is open, creating password or PIN number authentication requirements before accessing chats and apps, or Group Link functionality which requires group admins to approve new members before joining, providing extra protection from being compromised by hackers or outsiders.

Signal’s View-once Media feature allows users to securely share videos, photos, or any media with their contacts that can only be seen once. Similar to Snapchat’s disappearing images and videos, View-once Media adds another level of protection in case something sensitive accidentally gets sent out by accident.

View-once Image is another helpful Signal function, automatically destructing images or videos after they have been opened by their recipient. This can ensure that sensitive photos or videos only get seen once, which can be especially helpful if someone steals your phone.

Signal provides the option to hide its screen in Android’s application switcher, making it harder for other apps or people to take screenshots of your conversations. Furthermore, Signal offers a Screen Lock setting which enables users to add PIN numbers, passwords or biometric information before accessing their device.

Signal offers many ways to customize the experience and make it more personal for users, from choosing individual chat bubble colors and backgrounds, to selecting from an extensive range of Stickers which add personality or give users space to express themselves creatively.

Privacy Settings

Signal’s settings are designed to enable users to take control of their security and privacy. Users can choose not to include their number in their profile (though this will decrease how easily people can find them on Signal), activate a screen lock that requires either a code or biometric such as fingerprint recognition or Face ID authentication (to make opening the app harder), as well as enable a proxy that hides their IP address from Signal servers; although doing this could decrease call quality slightly.

On the settings screen, users have the option of choosing to use their username instead of their phone number to connect with other Signal users. While this may be beneficial in certain circumstances, Freedom of the Press Foundation notes that even unique usernames can still be guessed by other users and that keeping an up-to-date contact list ensures you won’t continue communicating with contacts who may have since upgraded or switched messaging apps can help keep communication flowing smoothly.

Signal offers additional privacy options, such as the option to enable disappearing messages and one-time media that will automatically delete after a set period of time. Signal cautions, however, that this feature is no guarantee against malicious users taking screenshots from another device or their camera roll in order to keep their conversation alive.

Other privacy settings include disabling typing indicators, which prevents Signal from recording your keyboard activity to recognize keyboard shortcuts and learn your typing habits. Finally, an advanced option allows Signal users to configure voice calls that bypass traditional telecom providers in favor of running through servers instead.

Signal isn’t only distinguished by its privacy features; there’s also Registration Lock. This feature requires users to enter a PIN whenever registering or reinstalling Signal on a new phone, helping prevent unauthorized access and protecting against man-in-the-middle attacks.

Press ESC to close