Signal cloud backups - Revision history

Bananabot: Added archive URLs for 1 citation(s) using CRWCitationBot

2026-02-23T07:45:29Z

Added archive URLs for 1 citation(s) using CRWCitationBot

← Older revision		Revision as of 07:45, 23 February 2026
Line 13:		Line 13:

	==Background==		==Background==
	Signal states on their website that they can't "read your messages or listen to your calls, and no one else can either."<ref>{{Cite web \|title=Signal \|url=https://signal.org/}}</ref><blockquote>"We’ve designed the Signal service to minimize the data we retain about Signal users, so the only information we can produce in response to a request like this is the date and time a user registered with Signal and the last date of a user’s connectivity to the Signal service.		Signal states on their website that they can't "read your messages or listen to your calls, and no one else can either."<ref>{{Cite web \|title=Signal \|url=https://signal.org/ \|archive-url=http://web.archive.org/web/20260222135458/https://signal.org/ \|archive-date=22 Feb 2026}}</ref><blockquote>"We’ve designed the Signal service to minimize the data we retain about Signal users, so the only information we can produce in response to a request like this is the date and time a user registered with Signal and the last date of a user’s connectivity to the Signal service.

	Notably, things we don’t have stored include anything about a user’s contacts (such as the contacts themselves, a hash of the contacts, any other derivative contact information), anything about a user’s groups (such as how many groups a user is in, which groups a user is in, the membership lists of a user’s groups), or any records of who a user has been communicating with."<ref name=":0">{{Cite web \|title=Grand jury subpoena for Signal user data, Eastern District of Virginia \|url=https://signal.org/bigbrother/eastern-virginia-grand-jury/ \|archive-url=https://web.archive.org/web/20250302042109/https://signal.org/bigbrother/eastern-virginia-grand-jury/ \|archive-date=2 Mar 2025 \|access-date=6 Mar 2025}}</ref></blockquote>		Notably, things we don’t have stored include anything about a user’s contacts (such as the contacts themselves, a hash of the contacts, any other derivative contact information), anything about a user’s groups (such as how many groups a user is in, which groups a user is in, the membership lists of a user’s groups), or any records of who a user has been communicating with."<ref name=":0">{{Cite web \|title=Grand jury subpoena for Signal user data, Eastern District of Virginia \|url=https://signal.org/bigbrother/eastern-virginia-grand-jury/ \|archive-url=https://web.archive.org/web/20250302042109/https://signal.org/bigbrother/eastern-virginia-grand-jury/ \|archive-date=2 Mar 2025 \|access-date=6 Mar 2025}}</ref></blockquote>

Trinity: Added archived reference links

2026-02-12T17:45:38Z

Added archived reference links

← Older revision		Revision as of 17:45, 12 February 2026
Line 18:		Line 18:

	==Incident==		==Incident==
	In 2019, Signal previewed a feature called "secure value recovery" which would allow users installing the app on a new device to retrieve data from cloud servers.<ref>{{Cite web \|title=Technology Preview for secure value recovery \|url=https://signal.org/blog/secure-value-recovery/ \|archive-url=https://web.archive.org/web/20241228040757/https://signal.org/blog/secure-value-recovery/ \|archive-date=28 Dec 2024 \|access-date=6 Mar 2025}}</ref> While the data is stored in Signal's cloud, it is stored in a securely encrypted manner.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref> The data collected and stored includes the user's name, photo, phone number, and a list of each Signal user that had been contacted.<ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|Cited source is heavily cherry picked\|reason=contact discovery on Signal is private and does not share the phone number as explained later in the cited sources}} Messages are not saved.		In 2019, Signal previewed a feature called "secure value recovery" which would allow users installing the app on a new device to retrieve data from cloud servers.<ref>{{Cite web \|title=Technology Preview for secure value recovery \|url=https://signal.org/blog/secure-value-recovery/ \|archive-url=https://web.archive.org/web/20241228040757/https://signal.org/blog/secure-value-recovery/ \|archive-date=28 Dec 2024 \|access-date=6 Mar 2025}}</ref> While the data is stored in Signal's cloud, it is stored in a securely encrypted manner.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref> The data collected and stored includes the user's name, photo, phone number, and a list of each Signal user that had been contacted.<ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|archive-url=https://web.archive.org/web/20250601035417/https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|archive-date=1 Jun 2025 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|Cited source is heavily cherry picked\|reason=contact discovery on Signal is private and does not share the phone number as explained later in the cited sources}} Messages are not saved.

	Users objected,<ref>{{Cite web \|title=Don’t want PIN, don’t want anything stored in cloud \|url=https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-url=https://web.archive.org/web/20240301015109/https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=PIN, cloud storage are showstoppers \|url=https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/}}</ref><ref>{{Cite web \|title=Forced PIN, bite it Signal \|url=https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/}}</ref><ref>{{Cite web \|title=Welcome to the cloud Signal users! \|url=https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/}}</ref> requesting that Signal instead provide a means to export encrypted backups that could be imported locally, which would eliminate dependence on cloud-based servers. Some users also raised technical concerns about the security of the system and doubted that it could sufficiently protect their data.<ref name=":1">{{Cite web \|title=Proper secure value security: PINs are too easy to brute force, SGX is not reliable enough \|url=https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-url=https://web.archive.org/web/20240301015110/https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref> These concerns were shared by cybersecurity experts,<ref name=":2">{{Cite web \|title=Signal’s New PIN Feature Worries Cybersecurity Experts \|url=https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-url=https://web.archive.org/web/20250117232443/https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-date=17 Jan 2025 \|access-date=6 Mar 2025}}</ref><ref name=":3">{{Cite web \|title=Signal Going to Cloud? A Discussion with Sean O'Brien \|url=https://www.youtube.com/watch?v=PFi-VI7_T3o}}</ref><ref name=":4">{{Cite web \|title=Does Signal’s “secure value recovery” really work? \|url=https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/}}</ref> and security researchers demonstrated that the system was vulnerable to attacks, which allowed them to access the user data being stored.<ref>{{Cite web \|title=SGX CacheOut SGAxe attack. Signal’s cloud storage and contact discovery vulnerable \|url=https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-url=https://web.archive.org/web/20230519115856/https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|reason="In recent weeks, Signal has introduced more features that make it more user friendly to people who may not have extremely paranoid threat models. For example, it’s now possible to migrate all Signal data, including message history, from one phone to another, using a feature that does not rely on cloud servers and is also encrypted, according to Signal. "\|Cited vice article explains more nuance}}		Users objected,<ref>{{Cite web \|title=Don’t want PIN, don’t want anything stored in cloud \|url=https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-url=https://web.archive.org/web/20240301015109/https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=PIN, cloud storage are showstoppers \|url=https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/ \|archive-url=https://web.archive.org/web/20230615212112/https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/ \|archive-date=15 Jun 2023}}</ref><ref>{{Cite web \|title=Forced PIN, bite it Signal \|url=https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/ \|archive-url=https://web.archive.org/web/20200711160148/https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/ \|archive-date=11 Jul 2020}}</ref><ref>{{Cite web \|title=Welcome to the cloud Signal users! \|url=https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/ \|archive-url=https://web.archive.org/web/20230616073034/https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/ \|archive-date=16 Jun 2023}}</ref> requesting that Signal instead provide a means to export encrypted backups that could be imported locally, which would eliminate dependence on cloud-based servers. Some users also raised technical concerns about the security of the system and doubted that it could sufficiently protect their data.<ref name=":1">{{Cite web \|title=Proper secure value security: PINs are too easy to brute force, SGX is not reliable enough \|url=https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-url=https://web.archive.org/web/20240301015110/https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref> These concerns were shared by cybersecurity experts,<ref name=":2">{{Cite web \|title=Signal’s New PIN Feature Worries Cybersecurity Experts \|url=https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-url=https://web.archive.org/web/20250117232443/https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-date=17 Jan 2025 \|access-date=6 Mar 2025}}</ref><ref name=":3">{{Cite web \|title=Signal Going to Cloud? A Discussion with Sean O'Brien \|url=https://www.youtube.com/watch?v=PFi-VI7_T3o \|archive-url=https://web.archive.org/web/20200606204527/https://www.youtube.com/watch?v=PFi-VI7_T3o \|archive-date=6 Jun 2020}}</ref><ref name=":4">{{Cite web \|title=Does Signal’s “secure value recovery” really work? \|url=https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/ \|archive-url=https://web.archive.org/web/20200623171135/https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/ \|archive-date=23 Jun 2020}}</ref> and security researchers demonstrated that the system was vulnerable to attacks, which allowed them to access the user data being stored.<ref>{{Cite web \|title=SGX CacheOut SGAxe attack. Signal’s cloud storage and contact discovery vulnerable \|url=https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-url=https://web.archive.org/web/20230519115856/https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|reason="In recent weeks, Signal has introduced more features that make it more user friendly to people who may not have extremely paranoid threat models. For example, it’s now possible to migrate all Signal data, including message history, from one phone to another, using a feature that does not rely on cloud servers and is also encrypted, according to Signal. "\|Cited vice article explains more nuance}}

	Signal began to roll out the cloud-based recovery feature in 2020. without clear communication with the public or app users about the new feature.<ref name=":5">{{Cite web \|title=Can someone explain this new PIN system? \|url=https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/}}</ref><ref>{{Cite web \|title=Mandatory PIN without clear explanation within the app might cause significant number of users to quit using Signal \|url=https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597}}</ref><ref name=":6">{{Cite web \|title=What exactly is Signal protecting with the mandatory PIN? \|url=https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/}}</ref><ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save? \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854}}</ref><ref>{{Cite web \|title=Following user backlash, Signal lowers one of its drastic PIN measures \|url=https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/}}</ref><ref>{{Cite web \|title=What info does Signal store about it's user? \|url=https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-url=https://web.archive.org/web/20211011111619/https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-date=11 Oct 2021 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=About data collection and data delivery \|url=https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/ \|archive-url=https://web.archive.org/web/20250201072439/https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/?ref=readnext \|archive-date=1 Feb 2025 \|access-date=6 Mar 2025}}</ref> Signal users questioned the need for the PIN, and communication from the Signal team responded that it was to ensure messages were not missed or lost.<ref>{{Cite web \|title=I don’t understand what the new PIN requirement is for \|url=https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895}}</ref> A more detailed response from Signal following user backlash explains that cloud backups were encrypted in the same way as messages, and were safe.<ref name=":7" />		Signal began to roll out the cloud-based recovery feature in 2020. without clear communication with the public or app users about the new feature.<ref name=":5">{{Cite web \|title=Can someone explain this new PIN system? \|url=https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/ \|archive-url=https://web.archive.org/web/20230615184050/https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/ \|archive-date=15 Jun 2023}}</ref><ref>{{Cite web \|title=Mandatory PIN without clear explanation within the app might cause significant number of users to quit using Signal \|url=https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597 \|archive-url=https://web.archive.org/web/20200521073518/https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597 \|archive-date=21 May 2020}}</ref><ref name=":6">{{Cite web \|title=What exactly is Signal protecting with the mandatory PIN? \|url=https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/ \|archive-url=https://web.archive.org/web/20230616052149/https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/ \|archive-date=16 Jun 2023}}</ref><ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save? \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854 \|archive-url=https://web.archive.org/web/20250605155719/https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854 \|archive-date=5 Jun 2025}}</ref><ref>{{Cite web \|title=Following user backlash, Signal lowers one of its drastic PIN measures \|url=https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/ \|archive-url=https://web.archive.org/web/20200606100450/https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/ \|archive-date=6 Jun 2020}}</ref><ref>{{Cite web \|title=What info does Signal store about it's user? \|url=https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-url=https://web.archive.org/web/20211011111619/https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-date=11 Oct 2021 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=About data collection and data delivery \|url=https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/ \|archive-url=https://web.archive.org/web/20250201072439/https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/?ref=readnext \|archive-date=1 Feb 2025 \|access-date=6 Mar 2025}}</ref> Signal users questioned the need for the PIN, and communication from the Signal team responded that it was to ensure messages were not missed or lost.<ref>{{Cite web \|title=I don’t understand what the new PIN requirement is for \|url=https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895 \|archive-url=https://web.archive.org/web/20250601035417/https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895 \|archive-date=1 Jun 2025}}</ref> A more detailed response from Signal following user backlash explains that cloud backups were encrypted in the same way as messages, and were safe.<ref name=":7" />

	Several users requested that Signal update their privacy policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref> The Signal privacy policy has not changed since 2018.		Several users requested that Signal update their privacy policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref> The Signal privacy policy has not changed since 2018.

Bythmusters: added cargo

2026-02-03T03:04:52Z

added cargo

← Older revision		Revision as of 03:04, 3 February 2026
Line 1:		Line 1:
			{{IncidentCargo
			\|Company=Signal
			\|StartDate=2020
			\|EndDate=
			\|Status=
			\|ProductLine=
			\|Product=
			\|ArticleType=
			\|Type=Cloud, Privacy
			\|Description=
			}}
	Signal is a privacy-focused, open source encrypted messaging service. In 2020, the company was accused of collecting and storing sensitive user data on their cloud database without user consent.		Signal is a privacy-focused, open source encrypted messaging service. In 2020, the company was accused of collecting and storing sensitive user data on their cloud database without user consent.

Keith: removed tone warning

2025-08-29T16:11:53Z

removed tone warning

← Older revision		Revision as of 16:11, 29 August 2025
Line 1:		Line 1:
	~~{{ToneWarning}}~~

	Signal is a privacy-focused, open source encrypted messaging service. In 2020, the company was accused of collecting and storing sensitive user data on their cloud database without user consent.		Signal is a privacy-focused, open source encrypted messaging service. In 2020, the company was accused of collecting and storing sensitive user data on their cloud database without user consent.

Illerfish2: More tone-oriented edits

2025-08-29T14:20:52Z

More tone-oriented edits

← Older revision		Revision as of 14:20, 29 August 2025
Line 11:		Line 11:
	In 2019, Signal previewed a feature called "secure value recovery" which would allow users installing the app on a new device to retrieve data from cloud servers.<ref>{{Cite web \|title=Technology Preview for secure value recovery \|url=https://signal.org/blog/secure-value-recovery/ \|archive-url=https://web.archive.org/web/20241228040757/https://signal.org/blog/secure-value-recovery/ \|archive-date=28 Dec 2024 \|access-date=6 Mar 2025}}</ref> While the data is stored in Signal's cloud, it is stored in a securely encrypted manner.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref> The data collected and stored includes the user's name, photo, phone number, and a list of each Signal user that had been contacted.<ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|Cited source is heavily cherry picked\|reason=contact discovery on Signal is private and does not share the phone number as explained later in the cited sources}} Messages are not saved.		In 2019, Signal previewed a feature called "secure value recovery" which would allow users installing the app on a new device to retrieve data from cloud servers.<ref>{{Cite web \|title=Technology Preview for secure value recovery \|url=https://signal.org/blog/secure-value-recovery/ \|archive-url=https://web.archive.org/web/20241228040757/https://signal.org/blog/secure-value-recovery/ \|archive-date=28 Dec 2024 \|access-date=6 Mar 2025}}</ref> While the data is stored in Signal's cloud, it is stored in a securely encrypted manner.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref> The data collected and stored includes the user's name, photo, phone number, and a list of each Signal user that had been contacted.<ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|Cited source is heavily cherry picked\|reason=contact discovery on Signal is private and does not share the phone number as explained later in the cited sources}} Messages are not saved.

	~~Some users~~ objected ~~on philosophical grounds~~,<ref>{{Cite web \|title=Don’t want PIN, don’t want anything stored in cloud \|url=https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-url=https://web.archive.org/web/20240301015109/https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=PIN, cloud storage are showstoppers \|url=https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/}}</ref><ref>{{Cite web \|title=Forced PIN, bite it Signal \|url=https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/}}</ref><ref>{{Cite web \|title=Welcome to the cloud Signal users! \|url=https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/}}</ref> requesting that Signal instead provide a means to export encrypted backups that could be imported locally which would eliminate dependence on cloud-based servers. Some users also raised technical concerns about the security of the system and ~~doubt~~ it could sufficiently protect their data.<ref name=":1">{{Cite web \|title=Proper secure value security: PINs are too easy to brute force, SGX is not reliable enough \|url=https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-url=https://web.archive.org/web/20240301015110/https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref> ~~Some of these~~ concerns were ~~also~~ shared by cybersecurity experts,<ref name=":2">{{Cite web \|title=Signal’s New PIN Feature Worries Cybersecurity Experts \|url=https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-url=https://web.archive.org/web/20250117232443/https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-date=17 Jan 2025 \|access-date=6 Mar 2025}}</ref><ref name=":3">{{Cite web \|title=Signal Going to Cloud? A Discussion with Sean O'Brien \|url=https://www.youtube.com/watch?v=PFi-VI7_T3o}}</ref><ref name=":4">{{Cite web \|title=Does Signal’s “secure value recovery” really work? \|url=https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/}}</ref> and security researchers demonstrated that the system was vulnerable to attacks, which allowed them to access the user data being stored.<ref>{{Cite web \|title=SGX CacheOut SGAxe attack. Signal’s cloud storage and contact discovery vulnerable \|url=https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-url=https://web.archive.org/web/20230519115856/https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|reason="In recent weeks, Signal has introduced more features that make it more user friendly to people who may not have extremely paranoid threat models. For example, it’s now possible to migrate all Signal data, including message history, from one phone to another, using a feature that does not rely on cloud servers and is also encrypted, according to Signal. "\|Cited vice article explains more nuance}}		Users objected,<ref>{{Cite web \|title=Don’t want PIN, don’t want anything stored in cloud \|url=https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-url=https://web.archive.org/web/20240301015109/https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=PIN, cloud storage are showstoppers \|url=https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/}}</ref><ref>{{Cite web \|title=Forced PIN, bite it Signal \|url=https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/}}</ref><ref>{{Cite web \|title=Welcome to the cloud Signal users! \|url=https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/}}</ref> requesting that Signal instead provide a means to export encrypted backups that could be imported locally, which would eliminate dependence on cloud-based servers. Some users also raised technical concerns about the security of the system and doubted that it could sufficiently protect their data.<ref name=":1">{{Cite web \|title=Proper secure value security: PINs are too easy to brute force, SGX is not reliable enough \|url=https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-url=https://web.archive.org/web/20240301015110/https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref> These concerns were shared by cybersecurity experts,<ref name=":2">{{Cite web \|title=Signal’s New PIN Feature Worries Cybersecurity Experts \|url=https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-url=https://web.archive.org/web/20250117232443/https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-date=17 Jan 2025 \|access-date=6 Mar 2025}}</ref><ref name=":3">{{Cite web \|title=Signal Going to Cloud? A Discussion with Sean O'Brien \|url=https://www.youtube.com/watch?v=PFi-VI7_T3o}}</ref><ref name=":4">{{Cite web \|title=Does Signal’s “secure value recovery” really work? \|url=https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/}}</ref> and security researchers demonstrated that the system was vulnerable to attacks, which allowed them to access the user data being stored.<ref>{{Cite web \|title=SGX CacheOut SGAxe attack. Signal’s cloud storage and contact discovery vulnerable \|url=https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-url=https://web.archive.org/web/20230519115856/https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|reason="In recent weeks, Signal has introduced more features that make it more user friendly to people who may not have extremely paranoid threat models. For example, it’s now possible to migrate all Signal data, including message history, from one phone to another, using a feature that does not rely on cloud servers and is also encrypted, according to Signal. "\|Cited vice article explains more nuance}}

	Signal's ~~privacy policy remains unaltered~~ from ~~its latest version updated in 2018 and does~~ not ~~reflect~~ the new cloud ~~feature~~.		Signal began to roll out the cloud-based recovery feature in 2020. without clear communication with the public or app users about the new feature.<ref name=":5">{{Cite web \|title=Can someone explain this new PIN system? \|url=https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/}}</ref><ref>{{Cite web \|title=Mandatory PIN without clear explanation within the app might cause significant number of users to quit using Signal \|url=https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597}}</ref><ref name=":6">{{Cite web \|title=What exactly is Signal protecting with the mandatory PIN? \|url=https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/}}</ref><ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save? \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854}}</ref><ref>{{Cite web \|title=Following user backlash, Signal lowers one of its drastic PIN measures \|url=https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/}}</ref><ref>{{Cite web \|title=What info does Signal store about it's user? \|url=https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-url=https://web.archive.org/web/20211011111619/https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-date=11 Oct 2021 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=About data collection and data delivery \|url=https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/ \|archive-url=https://web.archive.org/web/20250201072439/https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/?ref=readnext \|archive-date=1 Feb 2025 \|access-date=6 Mar 2025}}</ref> Signal users questioned the need for the PIN, and communication from the Signal team responded that it was to ensure messages were not missed or lost.<ref>{{Cite web \|title=I don’t understand what the new PIN requirement is for \|url=https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895}}</ref> A more detailed response from Signal following user backlash explains that cloud backups were encrypted in the same way as messages, and were safe.<ref name=":7" />

	~~===Signal's response===~~		Several users requested that Signal update their privacy policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref> The Signal privacy policy has not changed since 2018.

	Signal began to roll out the cloud-based recovery feature in 2020 without clear communication with the public or app users about the new feature.<ref name=":5">{{Cite web \|title=Can someone explain this new PIN system? \|url=https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/}}</ref><ref>{{Cite web \|title=Mandatory PIN without clear explanation within the app might cause significant number of users to quit using Signal \|url=https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597}}</ref><ref name=":6">{{Cite web \|title=What exactly is Signal protecting with the mandatory PIN? \|url=https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/}}</ref><ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save? \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854}}</ref><ref>{{Cite web \|title=Following user backlash, Signal lowers one of its drastic PIN measures \|url=https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/}}</ref><ref>{{Cite web \|title=What info does Signal store about it's user? \|url=https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-url=https://web.archive.org/web/20211011111619/https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-date=11 Oct 2021 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=About data collection and data delivery \|url=https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/ \|archive-url=https://web.archive.org/web/20250201072439/https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/?ref=readnext \|archive-date=1 Feb 2025 \|access-date=6 Mar 2025}}</ref> Signal users queried the need for the PIN, and communication from the team suggested it was to ensure messages were not missed or lost by keeping messages logged in a cloud format.<ref>{{Cite web \|title=I don’t understand what the new PIN requirement is for \|url=https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895}}</ref> A more detailed response from Signal following user backlash explains that cloud backups were encrypted in the same way as messages, and were safe.<ref name=":7" /> Several users requested that Signal update their policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref>
	==References==		==References==
	{{reflist}}		{{reflist}}
	[[Category:Signal messenger]]		[[Category:Signal messenger]]

Illerfish2: Illerfish2 moved page Signal's data collection despite privacy-focused advertising to Signal cloud backups: Page's past references to voluntary breaches in data privacy were unfounded. Page now focuses on the particular issue of cloud backups through PIN system. "Despite" listed as a word to avoid in wiki guidelines, not sufficiently neutral in tone.

2025-08-29T14:15:49Z

Illerfish2 moved page Signal's data collection despite privacy-focused advertising to Signal cloud backups: Page's past references to voluntary breaches in data privacy were unfounded. Page now focuses on the particular issue of cloud backups through PIN system. "Despite" listed as a word to avoid in wiki guidelines, not sufficiently neutral in tone.

← Older revision		Revision as of 14:15, 29 August 2025
(No difference)

Illerfish2: Removed unrelated incident (source states that Signal was unable to comply with requests for user data), cleaned up source organization, tone edit

2025-08-29T14:10:41Z

Removed unrelated incident (source states that Signal was unable to comply with requests for user data), cleaned up source organization, tone edit

Show changes

Beanie Bo: Beanie Bo moved page Signal data collection to Signal's data collection despite privacy-focused advertising: more specificity

2025-08-27T18:41:56Z

Beanie Bo moved page Signal data collection to Signal's data collection despite privacy-focused advertising: more specificity

← Older revision		Revision as of 18:41, 27 August 2025
(No difference)

Beanie Bo: fixed bold

2025-08-27T18:40:09Z

fixed bold

← Older revision		Revision as of 18:40, 27 August 2025
Line 25:		Line 25:
	''Requests have been mad''e for Signal to update their policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref>		''Requests have been mad''e for Signal to update their policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref>

	== ~~'''~~Alternative measures~~'''~~ ==		== Alternative measures ==
	While some social media posts and articles suggest that opting out of setting a pin would prevent a user's data from being uploaded to the cloud, this has not been proven to be the case. <ref>{{Cite web \|title=A few thoughts about Signal’s Secure Value Recovery \|url=https://web.archive.org/web/20200712205333/https://blog.cryptographyengineering.com/2020/07/10/a-few-thoughts-about-signals-secure-value-recovery/}}</ref> When a user sets a pin, their data is uploaded to the cloud and secured using SVR, and when they choose to opt-out, a pin is created for them anyway and their data is uploaded to Signal's cloud. There is currently no way for a Signal user to prevent their data from being uploaded and stored in the cloud.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref>		While some social media posts and articles suggest that opting out of setting a pin would prevent a user's data from being uploaded to the cloud, this has not been proven to be the case. <ref>{{Cite web \|title=A few thoughts about Signal’s Secure Value Recovery \|url=https://web.archive.org/web/20200712205333/https://blog.cryptographyengineering.com/2020/07/10/a-few-thoughts-about-signals-secure-value-recovery/}}</ref> When a user sets a pin, their data is uploaded to the cloud and secured using SVR, and when they choose to opt-out, a pin is created for them anyway and their data is uploaded to Signal's cloud. There is currently no way for a Signal user to prevent their data from being uploaded and stored in the cloud.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref>

Beanie Bo: removed redundance, changed tone

2025-08-27T18:39:40Z

removed redundance, changed tone

Show changes

← Older revision		Revision as of 17:45, 12 February 2026
Line 18:		Line 18:

	==Incident==		==Incident==
	In 2019, Signal previewed a feature called "secure value recovery" which would allow users installing the app on a new device to retrieve data from cloud servers.<ref>{{Cite web \|title=Technology Preview for secure value recovery \|url=https://signal.org/blog/secure-value-recovery/ \|archive-url=https://web.archive.org/web/20241228040757/https://signal.org/blog/secure-value-recovery/ \|archive-date=28 Dec 2024 \|access-date=6 Mar 2025}}</ref> While the data is stored in Signal's cloud, it is stored in a securely encrypted manner.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref> The data collected and stored includes the user's name, photo, phone number, and a list of each Signal user that had been contacted.<ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|Cited source is heavily cherry picked\|reason=contact discovery on Signal is private and does not share the phone number as explained later in the cited sources}} Messages are not saved.		In 2019, Signal previewed a feature called "secure value recovery" which would allow users installing the app on a new device to retrieve data from cloud servers.<ref>{{Cite web \|title=Technology Preview for secure value recovery \|url=https://signal.org/blog/secure-value-recovery/ \|archive-url=https://web.archive.org/web/20241228040757/https://signal.org/blog/secure-value-recovery/ \|archive-date=28 Dec 2024 \|access-date=6 Mar 2025}}</ref> While the data is stored in Signal's cloud, it is stored in a securely encrypted manner.<ref name=":7">{{Cite web \|title=PSA: Disabling PINs will now upload nothing to the server \|url=https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-url=https://web.archive.org/web/20230616082821/https://old.reddit.com/r/signal/comments/htmzrr/psa_disabling_pins_will_now_upload_nothing_to_the/ \|archive-date=16 Jun 2023 \|access-date=6 Mar 2025}}</ref> The data collected and stored includes the user's name, photo, phone number, and a list of each Signal user that had been contacted.<ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|archive-url=https://web.archive.org/web/20250601035417/https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854/4 \|archive-date=1 Jun 2025 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|Cited source is heavily cherry picked\|reason=contact discovery on Signal is private and does not share the phone number as explained later in the cited sources}} Messages are not saved.

	Users objected,<ref>{{Cite web \|title=Don’t want PIN, don’t want anything stored in cloud \|url=https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-url=https://web.archive.org/web/20240301015109/https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=PIN, cloud storage are showstoppers \|url=https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/}}</ref><ref>{{Cite web \|title=Forced PIN, bite it Signal \|url=https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/}}</ref><ref>{{Cite web \|title=Welcome to the cloud Signal users! \|url=https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/}}</ref> requesting that Signal instead provide a means to export encrypted backups that could be imported locally, which would eliminate dependence on cloud-based servers. Some users also raised technical concerns about the security of the system and doubted that it could sufficiently protect their data.<ref name=":1">{{Cite web \|title=Proper secure value security: PINs are too easy to brute force, SGX is not reliable enough \|url=https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-url=https://web.archive.org/web/20240301015110/https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref> These concerns were shared by cybersecurity experts,<ref name=":2">{{Cite web \|title=Signal’s New PIN Feature Worries Cybersecurity Experts \|url=https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-url=https://web.archive.org/web/20250117232443/https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-date=17 Jan 2025 \|access-date=6 Mar 2025}}</ref><ref name=":3">{{Cite web \|title=Signal Going to Cloud? A Discussion with Sean O'Brien \|url=https://www.youtube.com/watch?v=PFi-VI7_T3o}}</ref><ref name=":4">{{Cite web \|title=Does Signal’s “secure value recovery” really work? \|url=https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/}}</ref> and security researchers demonstrated that the system was vulnerable to attacks, which allowed them to access the user data being stored.<ref>{{Cite web \|title=SGX CacheOut SGAxe attack. Signal’s cloud storage and contact discovery vulnerable \|url=https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-url=https://web.archive.org/web/20230519115856/https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|reason="In recent weeks, Signal has introduced more features that make it more user friendly to people who may not have extremely paranoid threat models. For example, it’s now possible to migrate all Signal data, including message history, from one phone to another, using a feature that does not rely on cloud servers and is also encrypted, according to Signal. "\|Cited vice article explains more nuance}}		Users objected,<ref>{{Cite web \|title=Don’t want PIN, don’t want anything stored in cloud \|url=https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-url=https://web.archive.org/web/20240301015109/https://community.signalusers.org/t/dont-want-pin-dont-want-anything-stored-in-cloud/14057 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=PIN, cloud storage are showstoppers \|url=https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/ \|archive-url=https://web.archive.org/web/20230615212112/https://old.reddit.com/r/signal/comments/ghsj5b/pin_cloud_storage_are_showstoppers/ \|archive-date=15 Jun 2023}}</ref><ref>{{Cite web \|title=Forced PIN, bite it Signal \|url=https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/ \|archive-url=https://web.archive.org/web/20200711160148/https://old.reddit.com/r/signal/comments/hkle3d/forced_pin_bite_it_signal/ \|archive-date=11 Jul 2020}}</ref><ref>{{Cite web \|title=Welcome to the cloud Signal users! \|url=https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/ \|archive-url=https://web.archive.org/web/20230616073034/https://old.reddit.com/r/signal/comments/hkl914/welcome_to_the_cloud_signal_users/ \|archive-date=16 Jun 2023}}</ref> requesting that Signal instead provide a means to export encrypted backups that could be imported locally, which would eliminate dependence on cloud-based servers. Some users also raised technical concerns about the security of the system and doubted that it could sufficiently protect their data.<ref name=":1">{{Cite web \|title=Proper secure value security: PINs are too easy to brute force, SGX is not reliable enough \|url=https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-url=https://web.archive.org/web/20240301015110/https://community.signalusers.org/t/proper-secure-value-security-pins-are-too-easy-to-brute-force-sgx-is-not-reliable-enough/15096 \|archive-date=1 Mar 2024 \|access-date=6 Mar 2025}}</ref> These concerns were shared by cybersecurity experts,<ref name=":2">{{Cite web \|title=Signal’s New PIN Feature Worries Cybersecurity Experts \|url=https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-url=https://web.archive.org/web/20250117232443/https://www.vice.com/en/article/signal-new-pin-feature-worries-cybersecurity-experts/ \|archive-date=17 Jan 2025 \|access-date=6 Mar 2025}}</ref><ref name=":3">{{Cite web \|title=Signal Going to Cloud? A Discussion with Sean O'Brien \|url=https://www.youtube.com/watch?v=PFi-VI7_T3o \|archive-url=https://web.archive.org/web/20200606204527/https://www.youtube.com/watch?v=PFi-VI7_T3o \|archive-date=6 Jun 2020}}</ref><ref name=":4">{{Cite web \|title=Does Signal’s “secure value recovery” really work? \|url=https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/ \|archive-url=https://web.archive.org/web/20200623171135/https://palant.info/2020/06/16/does-signals-secure-value-recovery-really-work/ \|archive-date=23 Jun 2020}}</ref> and security researchers demonstrated that the system was vulnerable to attacks, which allowed them to access the user data being stored.<ref>{{Cite web \|title=SGX CacheOut SGAxe attack. Signal’s cloud storage and contact discovery vulnerable \|url=https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-url=https://web.archive.org/web/20230519115856/https://community.signalusers.org/t/sgx-cacheout-sgaxe-attack-signals-cloud-storage-and-contact-discovery-vulnerable/14892 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref>{{DisputedInline\|reason="In recent weeks, Signal has introduced more features that make it more user friendly to people who may not have extremely paranoid threat models. For example, it’s now possible to migrate all Signal data, including message history, from one phone to another, using a feature that does not rely on cloud servers and is also encrypted, according to Signal. "\|Cited vice article explains more nuance}}

	Signal began to roll out the cloud-based recovery feature in 2020. without clear communication with the public or app users about the new feature.<ref name=":5">{{Cite web \|title=Can someone explain this new PIN system? \|url=https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/}}</ref><ref>{{Cite web \|title=Mandatory PIN without clear explanation within the app might cause significant number of users to quit using Signal \|url=https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597}}</ref><ref name=":6">{{Cite web \|title=What exactly is Signal protecting with the mandatory PIN? \|url=https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/}}</ref><ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save? \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854}}</ref><ref>{{Cite web \|title=Following user backlash, Signal lowers one of its drastic PIN measures \|url=https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/}}</ref><ref>{{Cite web \|title=What info does Signal store about it's user? \|url=https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-url=https://web.archive.org/web/20211011111619/https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-date=11 Oct 2021 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=About data collection and data delivery \|url=https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/ \|archive-url=https://web.archive.org/web/20250201072439/https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/?ref=readnext \|archive-date=1 Feb 2025 \|access-date=6 Mar 2025}}</ref> Signal users questioned the need for the PIN, and communication from the Signal team responded that it was to ensure messages were not missed or lost.<ref>{{Cite web \|title=I don’t understand what the new PIN requirement is for \|url=https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895}}</ref> A more detailed response from Signal following user backlash explains that cloud backups were encrypted in the same way as messages, and were safe.<ref name=":7" />		Signal began to roll out the cloud-based recovery feature in 2020. without clear communication with the public or app users about the new feature.<ref name=":5">{{Cite web \|title=Can someone explain this new PIN system? \|url=https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/ \|archive-url=https://web.archive.org/web/20230615184050/https://old.reddit.com/r/signal/comments/ggty6n/can_someone_explain_this_new_pin_system/ \|archive-date=15 Jun 2023}}</ref><ref>{{Cite web \|title=Mandatory PIN without clear explanation within the app might cause significant number of users to quit using Signal \|url=https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597 \|archive-url=https://web.archive.org/web/20200521073518/https://community.signalusers.org/t/mandatory-pin-without-clear-explanation-within-the-app-might-cause-significant-number-of-users-to-quit-using-signal/11597 \|archive-date=21 May 2020}}</ref><ref name=":6">{{Cite web \|title=What exactly is Signal protecting with the mandatory PIN? \|url=https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/ \|archive-url=https://web.archive.org/web/20230616052149/https://old.reddit.com/r/signal/comments/hymlfd/what_exactly_is_signal_protecting_with_the/ \|archive-date=16 Jun 2023}}</ref><ref>{{Cite web \|title=What contact info does the Signal PIN functionality actually save? \|url=https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854 \|archive-url=https://web.archive.org/web/20250605155719/https://community.signalusers.org/t/what-contact-info-does-the-signal-pin-functionality-actually-save/16854 \|archive-date=5 Jun 2025}}</ref><ref>{{Cite web \|title=Following user backlash, Signal lowers one of its drastic PIN measures \|url=https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/ \|archive-url=https://web.archive.org/web/20200606100450/https://www.androidpolice.com/2020/05/29/many-signal-users-arent-happy-with-new-pin-requirements/ \|archive-date=6 Jun 2020}}</ref><ref>{{Cite web \|title=What info does Signal store about it's user? \|url=https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-url=https://web.archive.org/web/20211011111619/https://old.reddit.com/r/signal/comments/q5tlg1/what_info_does_signal_store_about_its_user/ \|archive-date=11 Oct 2021 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=About data collection and data delivery \|url=https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/ \|archive-url=https://web.archive.org/web/20250201072439/https://old.reddit.com/r/signal/comments/1id3xu8/about_data_collection_and_data_delivery/?ref=readnext \|archive-date=1 Feb 2025 \|access-date=6 Mar 2025}}</ref> Signal users questioned the need for the PIN, and communication from the Signal team responded that it was to ensure messages were not missed or lost.<ref>{{Cite web \|title=I don’t understand what the new PIN requirement is for \|url=https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895 \|archive-url=https://web.archive.org/web/20250601035417/https://community.signalusers.org/t/i-don-t-understand-what-the-new-pin-requirement-is-for/13895 \|archive-date=1 Jun 2025}}</ref> A more detailed response from Signal following user backlash explains that cloud backups were encrypted in the same way as messages, and were safe.<ref name=":7" />

	Several users requested that Signal update their privacy policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref> The Signal privacy policy has not changed since 2018.		Several users requested that Signal update their privacy policy following the change in data collection.<ref>{{Cite web \|title=Can Signal please update its Privacy Policy \|url=https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-url=https://web.archive.org/web/20230519120053/https://community.signalusers.org/t/can-signal-please-update-its-privacy-policy/15323 \|archive-date=19 May 2023 \|access-date=6 Mar 2025}}</ref><ref>{{Cite web \|title=Signal’s Terms of Use and Privacy Policy are not very user friendly \|url=https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-url=https://web.archive.org/web/20250306164621/https://community.signalusers.org/t/signals-terms-of-use-and-privacy-policy-are-not-very-user-friendly/11047 \|archive-date=6 Mar 2025 \|access-date=6 Mar 2025}}</ref> The Signal privacy policy has not changed since 2018.