This obligatory relationship to some telephone range (a feature Signal shares with WhatsApp, KakaoTalk, and Some others) has been criticized like a "key difficulty" for privacy-aware end users who will be not comfortable with giving out their personal variety.
On the list of things that I was briefed on really early, senator, was with the CIA data administration individuals about using Sign as a permissible function use," Ratcliffe mentioned. ^
The entire supply code on the Sign consumers for Android, iOS and desktop is on the market on GitHub less than a no cost software license.[eleven][ten][twelve] This allows intrigued events to examine the code and aid the developers verify that every thing is behaving as expected. Additionally, it enables Sophisticated users to compile their very own copies from the applications and Look at them Along with the variations which can be distributed by Sign Messenger.
Signal requires which the consumer supply a phone range for verification,[141] reducing the need for person names or passwords and facilitating Speak to discovery (see beneath).[142] The number doesn't have for being the same as to the unit's SIM card; it can also be a VoIP range[141] or possibly a landline so long as the person can obtain the verification code and possess a individual device to build the computer software.
端到端加密：所有消息、语音、文件传输都经过加密，确保第三方无法读取。
[one hundred and five] The specter of this attack can be mitigated by enabling Sign's Registration Lock characteristic, a method of two-variable authentication that needs the consumer to enter a PIN to register the contact number on a completely new system.[146]
On 4 October 2016, the American Civil Liberties Union (ACLU) and Open up Whisper Devices released a series of documents revealing that OWS experienced gained a subpoena necessitating them to provide information and facts connected to two mobile phone numbers to get a federal grand jury investigation in the main 50 percent of 2016.[82][eighty three][eighty four] Only among the two phone figures was registered on Signal, and since of how the support is designed, OWS was only equipped to supply "the time the consumer's account had been made and the last time it experienced connected to the company".
Sign's app icon may be transformed with many different colour themes for personalization and to hide the app. The applying identify may also be tailored.[132] Messages might have effects like spoilers and italics, and people can increase each other by way of QR code.[133]
On 27 September 2019, Natalie Silvanovich, a protection engineer Doing work in Google's vulnerability investigation group at Project Zero, disclosed how a bug in the Android Sign consumer could let an attacker spy with a consumer without having their knowledge.[203] The bug authorized an attacker to mobile phone a goal device, mute the decision, and the call would complete �?holding the audio open but with no proprietor becoming aware about that (even so they would however concentrate on a hoop and / or maybe a vibration through the Preliminary contact).
点按 新增标签，建立新的标签名称与新增成员，或于新增成员中，将朋友加入已设定的标签内。
Signal uses cell telephone quantities to sign-up and manage consumer accounts, although configurable usernames were being extra in March 2024 to allow people to hide their cellular phone figures from other buyers.
In line with John Ratcliffe, as of 2025 Signal is put in by default around the products of most CIA staff and its use is covered by typical onboarding instruction.[111]
[152][153] In July 2017, researchers from RUB observed during One more Assessment of group messengers a purely theoretic attack in opposition to the team protocol of Sign: A user who is aware of The trick team ID of a group (as a result of acquiring been a gaggle member previously or stealing it from a member's product) could become a member of the Signal下载 group. Because the team ID can not be guessed and these types of member modifications are displayed to the remaining associates, this attack is probably going being tricky to execute without becoming detected.[154]
A year later, within the runup to an in the end barely attended sequel to Unite the proper in D.C., organizers appeared to stay off the platform, opting instead to debate logistics over Fb Messenger as well as encrypted texting application Sign. ^