This mandatory connection to your phone quantity (a attribute Sign shares with WhatsApp, KakaoTalk, and others) is criticized for a "major concern" for privateness-mindful buyers who are not cozy with giving out their private amount.

On 9 August 2022, Ismail Sabri Yaakob, the Prime Minister of Malaysia, reported that his Signal account was "hacked" and infiltrated by a third party, sending out messages and impersonating the politician. No specifics have been disclosed regarding the strategy accustomed to achieve use of the account.[215]

The entire supply code on the Sign consumers for Android, iOS and desktop is on the market on GitHub underneath a absolutely free program license.[eleven][ten][12] This enables interested parties to look at the code and assistance the builders validate that anything is behaving as predicted. Furthermore, it permits Superior consumers to compile their own personal copies in the applications and compare them While using the variations which might be distributed by Signal Messenger.

Sign calls for that the person offer a telephone selection for verification,[141] eradicating the need for user names or passwords and facilitating Call discovery (see under).[142] The quantity doesn't have to get the same as to the unit's SIM card; it can also be a VoIP range[141] or possibly a landline so long as the person can obtain the verification code and possess a independent device to put in place the software program.

端到端加密：所有消息、语音、文件传输都经过加密，确保第三方无法读取。

Using phone numbers as identifiers might also produce safety dangers that come up from the potential of an attacker taking over a phone number.[142] A similar vulnerability was used to assault at least a person person in August Signal官网下载 2022, nevertheless the assault was done through the supplier of Signal's SMS services, not any person's service provider.

In July 2016, the online market place Culture published a consumer study that assessed the flexibility of Signal people to detect and deter person-in-the-middle assaults.[25] The review concluded that 21 out of 28 members failed to properly compare community key fingerprints in an effort to validate the identification of other Sign customers, Which Many of these people believed they'd succeeded, though they had essentially unsuccessful.

I finally acquired the prospect to browse all of this a lot more thoroughly, and it seems that all Cellebrite is carrying out is looking at the texts off of the phone they're able to previously entry. To [sic] this has very little to complete with Signal in any way. So: under no circumstances intellect.

In April 2021, Sign declared the addition of a copyright wallet feature that will enable consumers to send out and get payments in MobileCoin.[216] This gained criticism from protection pro Bruce Schneier, who experienced Beforehand praised the program.

Right up until 2023, Android customers could opt into building Sign the default SMS/MMS application, allowing for them to send out and obtain unencrypted SMS messages Along with the conventional conclude-to-finish encrypted Sign messages.

创建安全群组，与朋友、家人和同事保持联系，同时享有所有隐私功能�?高级隐私功能

The group messaging mechanism is built so the servers don't have access to the membership record, team title, or group icon.

TextSecure authorized the consumer to set a passphrase that encrypted the local information database and also the person's encryption keys.[127] This didn't encrypt the user's Call databases or message timestamps.[127] The Sign applications on Android and iOS could be locked Along with the phone's pin, passphrase, or biometric authentication.

The declare that Signal is used to fund terrorist or prison functions would be the justification for Turkey to criminalize the app for the general inhabitants, which Abdullah Bozkurt statements is a way the "government abuses its counterterrorism legislation to punish critics, opponents and dissidents."[243][244]