Signal
Signal is a free, open-source encrypted messaging application focused on privacy and security. Operated by the nonprofit Signal Foundation, it provides end-to-end encrypted text, voice, and video communication without collecting user data or running advertisements.
Score generated by AI agents based on publicly cited evidence and reviewed by the project maintainer. Not independently validated.
Score History
Timeline events are AI-curated from public reporting. Score trajectory is derived from documented events.
Moxie Marlinspike and Stuart Anderson founded Whisper Systems to build encrypted communication tools for Android. The startup released TextSecure and RedPhone as the first consumer-friendly mobile encryption apps, with a small team driven by the mission of making private communication accessible. No commercial pressures, no advertising, and no data collection -- the sole lock-in was the phone number registration requirement inherited from telephony conventions.
After the Twitter acquisition and open-sourcing, Marlinspike relaunched as Open Whisper Systems and merged TextSecure and RedPhone into Signal. Edward Snowden's public endorsement validated Signal as the gold standard for encrypted communication. The WhatsApp partnership made the Signal Protocol the most widely deployed E2EE system globally. Minor lock-in existed through phone number requirements and lack of cross-platform data portability, but no extractive behaviors were present.
The Signal Foundation's formation as a 501(c)(3) with Brian Acton's $105 million loan permanently closed the door on shareholder extraction. Signal demonstrated its pro-user regulatory posture by fighting a federal subpoena with the ACLU and deploying domain fronting to circumvent censorship. However, Marlinspike's 2016 anti-federation stance and blocking of third-party clients solidified minor competitive conduct concerns, and the loss of domain fronting when Google and Amazon blocked the technique temporarily reduced accessibility in censored regions.
The WhatsApp privacy policy backlash drove Signal downloads up 1,192% in early 2021, pushing the platform from niche privacy tool to mainstream contender. However, this era also brought Signal's most significant governance controversy: the MobileCoin integration linked to founder Moxie Marlinspike's financial interests. The server source code went unupdated for nearly a year while the payments feature was developed in secret. Signal also introduced a mandatory PIN system that drew criticism from security researchers. Meanwhile, China and Iran blocked Signal, and Signal launched the face blur tool and group video calls.
Marlinspike's departure and Meredith Whittaker's appointment as president marked a governance transition. The removal of SMS support from Android frustrated some users but improved security clarity. Signal transparently disclosed its $40 million annual operating costs while generating only $2 million in donations, raising sustainability questions. Whittaker quickly established herself as a forceful advocate for encryption, threatening to leave the UK over the Online Safety Bill. The Twilio phishing incident exposed ~1,900 phone numbers but Signal's minimal data retention limited the damage.
Under Whittaker's leadership, Signal has become the most prominent institutional voice defending end-to-end encryption against government backdoor mandates in the EU, UK, and Sweden. Feature development has accelerated with usernames, post-quantum encryption, call links, secure backups, and polls. Russia blocked Signal in 2024, and the Signalgate scandal paradoxically boosted Signal's profile and downloads. Financial sustainability remains the primary existential concern, with the $1.99/month backup subscription representing Signal's first recurring revenue stream.
Alternatives
The dominant encrypted messaging app with 2 billion+ users, making it by far the easiest way to reach contacts who won't install Signal. Uses the Signal Protocol for end-to-end encryption but is owned by Meta and shares metadata with Facebook's ad infrastructure. A privacy downgrade from Signal, but the only realistic option when contacts refuse to install anything new.
Swiss-based encrypted messenger that requires no phone number or email to register — the strongest anonymity option among mainstream messengers. End-to-end encrypted by default, open-source, audited, and hosted in Switzerland. One-time purchase (~$5, no subscription). Smaller user base is the main tradeoff. Easy switch — just buy the app and share your Threema ID.
Dimensional Breakdown
Summaries below were written by AI agents based on the cited evidence. They are editorial interpretations, not independent research findings.
Dimension History
Timeline (46 events)
Whisper Systems Launches TextSecure and RedPhone
Moxie Marlinspike and Stuart Anderson co-founded Whisper Systems and released TextSecure (encrypted SMS) and RedPhone (encrypted voice calls) as the first consumer-friendly mobile encryption apps for Android.
Twitter Acquires Whisper Systems
Twitter acquired Whisper Systems to improve its own security infrastructure. The acquisition briefly made RedPhone unavailable, drawing criticism from activists who relied on it during the 2011 Egyptian revolution. Twitter subsequently released TextSecure and RedPhone as open-source software under GPLv3.
Marlinspike Founds Open Whisper Systems
After leaving Twitter, Moxie Marlinspike founded Open Whisper Systems as a collaborative open-source project to continue developing TextSecure and RedPhone. The project operated as a volunteer-driven effort focused on making encryption accessible to mainstream users.
Signal iOS App Released with Encrypted Calling
Open Whisper Systems released Signal for iOS, initially supporting only encrypted voice calls as a RedPhone counterpart. This marked Signal's debut as a unified product name, with plans announced to merge TextSecure and RedPhone functionality under the Signal brand.
WhatsApp Partners with Open Whisper Systems for Encryption
Open Whisper Systems announced a partnership with WhatsApp to integrate the Signal Protocol into WhatsApp's messaging platform. The partnership would eventually bring end-to-end encryption to over 1 billion WhatsApp users, demonstrating Signal's willingness to share its core technology freely.
TextSecure and RedPhone Merge into Signal for Android
Open Whisper Systems merged TextSecure and RedPhone into a single app called Signal for Android, completing the unified messaging platform. The app offered end-to-end encrypted text, voice, and media sharing in a single interface, making encrypted communication simpler for mainstream users.
Edward Snowden Publicly Endorses Signal
NSA whistleblower Edward Snowden tweeted 'I use Signal every day' in November 2015, providing a powerful endorsement that boosted Signal's credibility as a privacy tool. The endorsement became Signal's most prominent testimonial and drove significant adoption among privacy-conscious users and journalists.
WhatsApp Completes Signal Protocol Integration
WhatsApp and Open Whisper Systems announced completion of end-to-end encryption across all WhatsApp communication forms, bringing Signal Protocol protection to over 1 billion monthly active users. This made Signal Protocol the most widely deployed end-to-end encryption protocol in the world.
Marlinspike Argues Against Federation for Signal
Moxie Marlinspike published 'The Ecosystem is Moving,' arguing that federated protocols cannot iterate fast enough to remain competitive. He cited Slack cannibalizing IRC, Facebook cannibalizing email, and WhatsApp cannibalizing XMPP as evidence that centralized services outcompete federated ones, cementing Signal's anti-federation stance.
Signal Responds to First Government Subpoena with Minimal Data
Signal received a federal grand jury subpoena from the Eastern District of Virginia requesting extensive user data including phone numbers, addresses, IP logs, and browsing histories. Working with the ACLU, Signal demonstrated it could only provide two data points: account registration date and last connection date. The ACLU also fought and overturned the accompanying gag order.
Facebook Messenger Adopts Signal Protocol for Secret Conversations
Facebook deployed an optional end-to-end encrypted mode called 'Secret Conversations' in Facebook Messenger using the Signal Protocol. This further expanded the protocol's reach beyond WhatsApp, bringing Signal's encryption technology to another billion-plus user base.
Independent Security Audit Validates Signal Protocol
An international team of researchers from the University of Oxford, Queensland University of Technology, and McMaster University published the first formal security audit of the Signal Protocol. The audit found no major flaws, pronouncing the protocol cryptographically sound with strong forward secrecy and authentication properties.
Signal Deploys Domain Fronting to Circumvent Censorship
Signal deployed domain fronting through Google App Engine to circumvent government blocking in Egypt, Oman, Qatar, and UAE. The technique made blocking Signal equivalent to blocking all of google.com, effectively making censorship too costly for authoritarian governments to implement.
Signal Launches Standalone Desktop App
Open Whisper Systems released a standalone Signal Desktop application based on Electron, replacing the previous Chrome App that required Google's browser. The move eliminated Signal's dependency on Chrome and made the app available to Firefox and Safari users on Windows, macOS, and Linux.
Signal Foundation Established with $50M from Brian Acton
Moxie Marlinspike and WhatsApp co-founder Brian Acton announced the Signal Foundation, a 501(c)(3) nonprofit. Acton provided $50 million in initial funding as a zero-interest loan due in 2068, which later grew to $105 million. The nonprofit structure formally eliminated any pathway to shareholder value extraction.
Amazon and Google Block Domain Fronting, Disrupting Signal's Censorship Circumvention
Google blocked domain fronting on April 14, 2018, and Amazon followed on April 27, threatening to suspend Signal's AWS account. The loss of domain fronting disrupted Signal's ability to bypass censorship in Egypt, Oman, Qatar, and UAE, forcing the team to develop alternative censorship circumvention approaches.
Signal Introduces Sealed Sender Metadata Protection
Signal launched 'sealed sender,' a feature that encrypts the sender's identity inside the message envelope, preventing even Signal's servers from knowing who sent a message to whom. The feature used short-term certificates to verify sender identity without exposing it to intermediaries.
European Commission Recommends Signal for Staff Communications
The European Commission sent an internal directive to staff recommending Signal as the approved application for instant messaging with external contacts. The endorsement came after cybersecurity breaches at EU institutions, including the 2018 COREU diplomatic cable theft and a 2017 Moscow delegation breach.
Signal Introduces Message Reactions
Signal added emoji reactions to messages, allowing users to react without sending a full reply. Reaction notifications were sent only to the original author, making them particularly useful in group conversations. The feature brought Signal closer to feature parity with commercial competitors.
Signal Introduces Mandatory PIN with Controversial Secure Value Recovery
Signal began requiring users to set a PIN code for Secure Value Recovery (SVR), a system that backs up contact information to Signal's servers using Intel SGX enclaves. Security researchers criticized the reliance on SGX (which had known vulnerabilities) and the fact that the 4-digit PIN default was weak against brute-force attacks. Users were confused about the PIN's purpose.
Signal Launches Face Blur Tool During BLM Protests
During the George Floyd protests, Signal released a face-blurring tool for photos to protect protesters from facial recognition surveillance. The tool automatically detected and blurred faces locally on-device before sharing. Signal's CEO Moxie Marlinspike wrote: 'We believe that something in America needs to change.'
Signal Launches Groups v2 with Admin Controls and Privacy Groups
Signal rolled out a redesigned private group system developed in partnership with Microsoft Research. The new system introduced admin controls, group permissions, and member management while maintaining zero-knowledge group privacy -- Signal's servers could not see group memberships, titles, or avatars.
Signal Adds Encrypted Group Video Calling
Signal launched end-to-end encrypted group video calls, initially supporting up to 5 participants (later expanded to 40, then 50). Edward Snowden tweeted 'I have been waiting for this for a very long time.' The feature brought Signal closer to competing with Zoom and FaceTime for small group video communication.
Signal Downloads Surge 4,900% After WhatsApp Privacy Policy Change
After WhatsApp announced policy changes requiring data sharing with Facebook, Signal downloads jumped from 285,000 the previous week to 17.8 million in the week of January 5-12, 2021 -- a 61-fold increase. Signal hit 50 million installs on Google Play by January 14. For the first four months of 2021, Signal downloads surged 1,192% year-over-year to 64.6 million.
Iran Blocks Signal After WhatsApp Exodus
Iran blocked Signal in January 2021 as Iranian users flocked to the platform following WhatsApp's controversial privacy policy update. Iranian ISPs implemented DNS-based blocking, redirecting Signal traffic to the government's standard blockpage at IP 10.10.34.35.
China Blocks Signal via Great Firewall
China blocked Signal through the Great Firewall in March 2021, cutting off access for journalists, activists, and dissidents who used the app to avoid surveillance. The block was implemented at the network level, requiring VPN or proxy tools to access Signal from within China.
Signal Accepts Cryptocurrency Donations via The Giving Block
Signal began accepting donations in 12 cryptocurrencies including Bitcoin and Ether through The Giving Block. The feature enabled anonymous donations for supporters who valued privacy in their financial transactions. US-based donors could receive tax deductions.
Signal Server Source Code Gap Exposed After Nearly a Year
Signal's server source code repository had not been updated since April 2020, raising transparency concerns in the open-source community. When Signal finally pushed updates in April 2021, the gap was linked to the development of MobileCoin payment integration that Signal had kept hidden. The server's anti-spam component remained proprietary.
Signal Integrates MobileCoin Payments Amid Conflict of Interest Concerns
Signal announced in-app cryptocurrency payments using MobileCoin, a privacy-focused cryptocurrency whose earliest technical advisor was Signal founder Moxie Marlinspike. MobileCoin's price surged from $7 to $65 in the days before the announcement. Critics including Bruce Schneier called it an 'incredibly bad idea' that invited regulatory scrutiny. MobileCoin founder Joshua Goldbard admitted: 'I started MobileCoin to fund Signal.'
Signal CEO Reveals Cellebrite Forensic Tool Vulnerabilities
Moxie Marlinspike published a blog post revealing critical vulnerabilities in Cellebrite's forensic extraction tools used by law enforcement. Signal demonstrated that a specially crafted file on a scanned phone could execute arbitrary code on Cellebrite's software, potentially tainting all past and future forensic evidence collected by that device.
Moxie Marlinspike Steps Down as Signal CEO
Signal founder Moxie Marlinspike announced his resignation as CEO, stating Signal had grown to the point where it could continue without his direct involvement. Brian Acton volunteered as interim CEO. Marlinspike's departure was linked by some observers to MobileCoin, where he served as a paid technical advisor. He remained on Signal's board.
Twilio Phishing Attack Exposes ~1,900 Signal Users' Phone Numbers
Twilio, Signal's phone number verification provider, suffered a phishing attack that potentially exposed approximately 1,900 Signal users' phone numbers and SMS verification codes. Signal's registration lock and PIN features mitigated the damage, as no message content, contacts, or profile information was compromised.
Meredith Whittaker Appointed as Signal President
Meredith Whittaker, former Google AI researcher and co-founder of the AI Now Institute, became Signal's first president. Whittaker had organized a 20,000-employee Google walkout in 2018 protesting workplace issues. She assumed responsibility for strategy, financial sustainability, and public communications.
Signal Removes SMS Support from Android App
Signal announced the removal of plaintext SMS/MMS support from its Android app, which had previously allowed Signal to serve as a default SMS client. The decision was driven by security concerns -- unencrypted SMS messages alongside encrypted Signal messages caused user confusion and unexpected messaging fees. Some users criticized the change as removing a key onboarding feature.
Signal Publishes Financial Transparency Post on Operating Costs
Signal published 'Privacy is Priceless, but Signal is Expensive,' transparently disclosing approximately $40 million in annual operating costs and appealing to users for donations. The post detailed infrastructure costs, hosting expenses, and the financial challenge of running a privacy-focused service without advertising or data monetization.
Signal Launches Stories Feature
Signal introduced Stories, allowing users to share ephemeral image, video, and text updates that disappear after 24 hours. The feature was end-to-end encrypted and configurable for different audience groups. Some users criticized it as unnecessary social media feature creep, though Signal maintained it was among their most requested features.
Signal Threatens to Leave UK Over Online Safety Bill
Signal President Meredith Whittaker stated Signal would leave the UK rather than comply with the Online Safety Bill's provisions that could require backdoor access to encrypted messages. WhatsApp made similar threats. Whittaker argued there is no technical way to create a 'safe backdoor' -- encryption is either broken for everyone or works for everyone.
Signal Upgrades to Post-Quantum Encryption (PQXDH)
Signal announced an upgrade from X3DH to PQXDH (Post-Quantum Extended Diffie-Hellman), adding quantum-resistant encryption using CRYSTALS-Kyber alongside existing elliptic curve cryptography. The hybrid approach protects against 'Harvest Now, Decrypt Later' threats from future quantum computers while maintaining current security guarantees.
Signal Launches Usernames to Hide Phone Numbers
Signal introduced usernames, allowing users to connect without sharing phone numbers. Phone numbers were no longer visible to chat contacts by default, and users could optionally prevent discovery by phone number entirely. Usernames required two or more trailing digits to minimize spoofing. The feature addressed a long-standing privacy criticism about phone number requirements.
Whittaker Slams EU Upload Moderation as Encryption Backdoor
Signal President Meredith Whittaker criticized the EU's revised 'upload moderation' proposal for the Chat Control regulation, calling it 'the same old surveillance wine in a new bottle.' She published a technical paper demonstrating that upload moderation fundamentally undermines end-to-end encryption regardless of implementation specifics.
Russia Blocks Signal for 'Violating Anti-Terrorism Laws'
Russia's Roskomnadzor blocked Signal, citing violations of anti-terrorism legislation. The app was removed from Russian app stores and ISPs began blocking access. Signal was widely used by independent Russian journalists and opposition activists. Users could still access the service through Signal's built-in anti-censorship proxy settings.
Signal Adds Call Links and Video Conference Features
Signal introduced reusable call links, emoji reactions during calls, hand raising, and a dedicated Calls tab, supporting up to 50 participants in encrypted video conferences. The features positioned Signal as a viable alternative to Zoom, Google Meet, and Microsoft Teams for private video communication.
Signal Threatens to Leave Sweden Over Encryption Backdoor Law
Meredith Whittaker announced Signal would exit Sweden entirely rather than comply with proposed legislation requiring messaging apps to store and provide access to user communications. Sweden's own Armed Forces formally objected to the legislation, warning that mandated backdoors would create systemic vulnerabilities exploitable by foreign adversaries.
Signalgate: Trump Officials Accidentally Add Journalist to Military Planning Chat
National Security Advisor Mike Waltz accidentally added The Atlantic editor-in-chief Jeffrey Goldberg to a Signal group chat where Defense Secretary Pete Hegseth shared specific details about planned strikes against Yemen's Houthi rebels, including aircraft types and strike timing. The Pentagon inspector general later determined Hegseth risked U.S. servicemembers' safety. The incident paradoxically boosted Signal's profile and downloads.
Signal Launches Secure Backups with Optional Paid Tier
Signal introduced Signal Secure Backups, enabling end-to-end encrypted cloud backup of message history. The free tier included all text messages and 45 days of media; a paid tier at $1.99/month offered unlimited media backup. Backups were protected by a 64-character recovery key generated on-device, never shared with Signal's servers. The feature addressed a long-standing user complaint about data loss when switching devices.
Signal Introduces Polls and Message Pinning
Signal added end-to-end encrypted polls for group chats with up to 10 options, plus message pinning for 1-on-1 and group conversations. Both features maintained full encryption. Poll responses were not anonymous, with all group members able to see individual votes.