Remote profile

A year ago we launched Signal Secure Backups.

Now, we’re happy to share all of the additions and improvements we’ve made to backups since then: On-device backups, cross-platform support, storage optimization, and attachment backfill for linked devices.

https://signal.org/blog/backup-improvements

Introducing Automatic Key Verification! Complementing the existing safety number system, automatic key verification provides an additional, streamlined way to confirm the privacy of your chats.

Read our announcement here: https://signal.org/blog/automatic-key-verification

Thanks to @cloudflare and @trailofbits for serving as the independent auditors for our system 💙 🙏

New: Link an Android tablet, Android phone, or iPhone as a linked device to your Signal account.

The most important links are with the people who matter to you, but if you want two phones, a tablet, and a laptop linked to your Signal account, we’ve got your back.

https://signal.org/blog/linked-devices-and-android-tablets/

RE: https://mastodon.world/@signalapp/115579168556088309

Polls can now be created in individual chats too. Show a curated list of choices to your indecisive friend or recapture the magic of passing a note to your crush by sending a “Do you like me? Y/N/Maybe” poll.

We just increased the maximum number of pinned chats from 4 to 10, so you can show 6 more people how much you love what they have to say.

Our statement on the UK government’s demand that all content on all devices sold or used in the country be scanned, on the presumption of nudity, using a dystopian combination of age verification and content scanning. This proposal will not safeguard children. It endangers us all.

https://signal.org/blog/pdfs/2026-06-08-uk-surveillance-is-not-safety.pdf

To help protect Signal users from phishing and social engineering attacks, we’ve introduced additional confirmations and educational messaging in the app to help people better detect fraudulent profiles, especially message requests from scammers posing as Signal.

More changes are on the way.

For the time being, please stay vigilant against phishing and account takeover attempts. Remember that no one from Signal Support will ever send you a message request or ask for your registration verification code or Signal PIN. For an added layer of protection, you can enable Registration Lock in your Signal Settings (Account -> Registration Lock). 8/

We understand the trust that people put in Signal, and how devastating this kind of social engineering can be. While it’s true that all messaging platforms are susceptible to scammers and phishing that betrays people’s trust and convinces them to “unlock the front door” where no backdoor exists, we are looking to do everything we can to help people avoid and detect such scams. 7/

As a result, many didn't notice the takeover. The compromised accounts were then weaponized to target the victims' contact lists by posing as the owners of the account. 6/

Because such a change results in de-registering your Signal accounts, attackers prepared people for this by telling them that being de-registered was intended behavior, and that all they would need to do is “re-register,” or, create a new account. When they moved to create a new Signal account — one that was now decoupled from their hijacked account — the victims thought they were logging back in to their primary account. 5/

Because we don’t collect user data, what we know about these attacks comes from the victims of phishing. And from what victims have told us, the attacks followed a broad pattern: after tricking people into revealing their Signal credentials, attackers then used those credentials to take over their account and also frequently changed the associated phone number. 4/

In the coming weeks, you’ll see us rolling out a number of changes to help hinder these kinds of attacks. 3/

However, sophisticated attackers have engaged in a harmful phishing campaign, posing as “Signal Support” by changing their profile display name and using social engineering to trick people into handing over their credentials — information that allowed these attackers to take over some targeted Signal accounts. This is something that plagues any mainstream messaging app once it reaches the scale of Signal, but we know how high the stakes are given the trust people place in us. 2/

A response to recent reporting in Germany, in service of clarity and accountability:

First, it’s important to be precise when it comes to critical infrastructure like Signal. Signal was not “hacked” — in that our encryption, infrastructure, and the integrity of the app’s code was not compromised. 1/

Signal polls are here!

Find the best time for your group chat to hang out, choose a vacation destination, or ask if you should give yourself a haircut at 1 AM. Now in the latest version of Signal for iOS, Android, and Desktop.

https://signal.org/blog/polls/