Senior government officials mistakenly invited editors on the Atlantic Ocean to have a group chat on messaging app signals, where the conversation focused on U.S. air strikes on Yemeni rebel groups. The use of the application using senior national security officials raises a question: How safe is the signal exactly?
On March 11, the Trump administration’s national security adviser accidentally invited Jeffrey Goldberg of the Atlantic to connect to the signal. In the next few days, Goldberg was added to a group chat that talked about “details of the operational approaching strikes in Yemen, including information about the targets, the United States will deploy and attack the sequencing weapon.” His report.
Signal is a free application that cybersecurity experts consider it to be one of the most secure messaging services due to its end-to-end encryption.
In short, text messages or calls are only seen by anyone in your, sender and signal group chat.
The signal website states: “We cannot read your message or listen to your phone, and no one else can.”
If you only use your smartphone’s default messaging app, such as Apple’s iMessage or Google Message, your messages will most likely not be secure. This happens when you are an iPhone user who texts an Android user because you are messaging from different platforms. Messages are encrypted end-to-end only when two people use the same application.
The signal also touts user protection because it does not use AD and does not track user data. it Collect only the minimum user data. For example, your phone number, the date you joined the signal, and the last date you logged in to the app.
Apart from senior government officials, journalists and advocates use the app, but not limited to these populations.
With the signals in the news, experts are weighing whether the average user should regard it as an option for daily communication.
Why do you care about encrypted messages?
Vahid Behzadan, assistant professor of cybersecurity and networking, data and computer science at the University of New Haven, said encrypted messaging “not only protects national secrets; it protects everyday privacy.”
Iskander Sanchez-Rola, director of artificial intelligence and innovation at Norton, said most people unknowingly share sensitive information through text such as personal addresses, passwords for Netflix and other accounts.
Encryption apps ensure that your messages are only seen by the people you intend to contact, not by third parties. It also means that your “internet service provider or any potentially malicious actor on the network cannot see them,” Sanchez-Rola said.
Cybercriminals are following your information.
exist December FBI and Cybersecurity and Infrastructure Security It pointed out that hackers related to the Chinese government, known as Salt Typhoon, launched attacks on commercial telecom companies to steal users’ data and prompted federal authorities to recommend that everyone use only end-to-end encrypted communications.
“Ninety percent “All cyber threats are now derived from scams and social engineering threats, a figure that is almost three times more likely to be a person,” said Sanchez-Rola. “If your information is incorrect, such as the daily activity of forwarding messages or even clicking links and attachments, you can open the door to risk.”
By using messaging applications that ensure end-to-end encryption, you can protect yourself from data breaches and identity theft, company tracking and targeted advertising, and ensure confidentiality in professional or legal communication, from surveillance or unauthorized access, and insurance that could intrude into potential confidentiality rights or government insurance, Behzadan said.
“In short, encryption helps maintain digital dignity and autonomy in an increasingly connected world,” he said.
How outstanding are other messaging apps when it comes to privacy?
By default, all communications (messages, calls, and video chats) are encrypted end-to-end, so you don’t have to do everything you can to make sure it is a feature. ” Behzadan said.
Unlike many platforms, signals do not store metadata about who users communicate with, when and where.
“Its encryption protocol is an open source signaling protocol, widely regarded as the gold standard in secure messaging, and is even used in certain chats by WhatsApp and Facebook Messenger,” he said.
Signal’s nonprofit structure also sets it apart: The organization does not monetize user data, which reduces incentives for surveillance or advertising-driven features.
Sanchez-Rola adds more features to amplify your privacy:
- Screenshot. This prevents malicious apps on your phone from accessing the screenshots, but does not prevent others from taking screenshots of conversations.
- Disappearing message. The email is automatically deleted after a set time and can be deleted from five seconds to four weeks after reading. Therefore, even if a malicious application can access your phone, it is impossible to retrieve deleted messages.
- Single-view media. This allows you to send photo, video, and voice messages that are automatically deleted from the recipient’s device once opened.
- Invisible keyboard. This prevents third-party keyboard applications from potentially collecting data about your typing, providing an additional layer of privacy, especially when sending sensitive information.
- Username and phone number. You can talk to the person who is signaled by using the signal username without knowing their phone number. This provides an additional layer of privacy.
How effective is the signal in protecting your privacy?
Signal Terms of Service Status You are “responsible to keep your device and signal account secure”.
“The effectiveness of encryption depends not only on the technology; it also depends on how the individual is used. Encryption is most effective, and it is part of a larger cybersecurity strategy,” said Sanchez-Rola.
Bezadan shares some important best practices. They include:
- Enable disappearing messages for sensitive chat.
- Verify the security number with trustworthy contacts.
- Set strong pins or enable biometric locks.
- Keep applications and devices updated.
- Avoid storing screenshots or storing sensitive information on unsecured devices.
“Recent incidents involving U.S. officials have highlighted this point: Even the safest technology cannot prevent human errors, such as adding the wrong person to a group chat,” Bezadan said. “When it comes to cybersecurity, the weakest connection is often the human element.”
What are other encrypted messaging applications?
While signals are the best advice among security experts, other applications offer encrypted messaging with different tradeoffs:
- WhatsApp: Use signal protocol, but return to the source owns and collects more metadata.
- Threema: A Swiss-based app that requires no phone number and focuses on privacy, although it has a smaller user base.
- Elements (Matrix Protocol): A decentralized open source option that is popular in a tech-savvy community.
- Wick: Used in corporate and government environments, now owned by Amazon.
The best choice depends on your specific needs, the threat model, and the platform your contacts use, as encryption is only effective if both parties use the same secure platform.
