Post

Signal Encrypted Messaging Guide

Using Signal for end-to-end encrypted messaging

Signal Encrypted Messaging Guide

Signal is an end-to-end encrypted messaging application, designed to offer good privacy by default. Every message, call and file is protected by the Signal protocol, recognized as one of the most robust messaging protocols. It is reused by many other applications, including WathsApp, Facebook Messenger, Skype and Google Messages for RCS communications.

Signal was launched in 2014 by Moxie Marlinspike (pseudonym) and developed since 2018 by the Signal Foundation, a non-profit organization created with the support of Brian Acton (co-founder of WhatsApp).

Image

Compared with WhatsApp, Signal stands out for its transparency: the application’s code, both client- and server-side, is entirely open source. This allows anyone to audit it, and in particular to check that encryption is applied as advertised.

However, Signal relies on the use of a telephone number, which is its main weakness when it comes to anonymity compared with other solutions. Despite this, the application is, in my opinion, one of the most reliable in terms of security and privacy, thanks to its entirely open architecture and a widely adopted encryption protocol, and therefore tested and audited, unlike other more marginal applications.

ApplicationE2EE 1:1E2EE groupsAnonymous registrationOpen-source client licenseOpen-source server licenseDecentralized serverYear of creation
WhatsApp2009
WeChat2011
Facebook Messenger🟡 (optional)2011
Telegram🟡 (optional)🟡2013
LINE2011
Signal2014
Threema2012
Element (Matrix)🟡 (federated)2016
Delta ChatN/A🟡 (via email)2017
Conversations (XMPP)🟡 (federated)2014
Session2020
SimpleX2021
Olvid🟡(no directory)2019
KeetN/A2022
JamiN/A2005
BriarN/A2018
ToxN/A2013

E2EE = End-to-end encryption

Install the Signal application

Signal is available on all platforms. You can download the application directly from your phone’s application store:

On Android, it is also possible to install via APK.

In this tutorial, we’ll concentrate on the mobile version, but please note that desktop versions are also available (MacOS, Linux and Windows). You’ll need to set up the mobile application first, however, before you can synchronize your account with the desktop version.

Create an account on Signal

When you launch the application for the first time, click on the “Continue” button.

Image

Enter your phone number, then click on “Next”.

Image

A verification code will be sent to you by SMS. Enter this code in the Signal application.

Image

Choose a PIN code to secure your Signal account. This code encrypts your data, and can be used to restore access to your account if your device is lost. So it’s important to choose a robust PIN code that’s as long and random as possible, and to keep a reliable record of it.

Image

Confirm this PIN code a second time.

Image

You can now personalize your user profile. Choose a photo, enter your name or a nickname. At this stage, you can also define who can find you on Signal via your number. Select “Everyone” if you want to be visible, or “Nobody” to remain untraceable via the phone number (you can then only be added with your “Username”). Once you’ve made your selections, click on “Next”.

Image

You’re now connected to Signal and ready to exchange messages.

Image

Setting up your Signal account

Click on your profile photo in the top left-hand corner to access the application settings.

Image

The “Account” menu lets you manage your profile settings. I advise you to keep the default settings. You can also activate the “Registration Lock” option, which protects your account against certain types of attack. This menu also contains the options you need to transfer your account to a new device.

Image

Clicking again on your profile picture in the settings will take you to the options for personalizing your profile. I recommend that you set a “Username”: this will enable you to get in touch with other people without exposing your phone number.

Image

By selecting “QR code or link”, you’ll get the information you need to share with someone who wants to add you to Signal.

Image

The “Privacy” menu is particularly important. Here you’ll find options for controlling the visibility of your number, the management of your messages with your contacts, as well as various authorizations granted on the application.

Image

And feel free to explore the “Appearance”, “Chats” and “Notifications” menus to tailor Interface and the application’s operation to your personal needs.

Connect desktop application

To connect the desktop application, start by installing the software on your computer (see the first part of this tutorial). Then, on your phone, go to Settings and open the “Linked devices” section.

Image

Click on the “Link a new device” button.

Image

On your computer, launch the software, then scan the QR code displayed on the screen using your phone. If you wish to import your conversations, select the “Transfer message history” option.

Image

Your devices are now fully synchronized.

Image

Sending messages with Signal

To communicate with someone on Signal, you first need to add them as a contact. There are several options: you can add them via their phone number (if the person has activated the option to be found by this means), or use their Signal ID.

Click on the pencil icon in the bottom right-hand corner of the Interface.

Image

In my case, I want to add the person by username. So I click on “Find by username”.

Image

You can then either paste in its login or scan its QR code.

Image

Send him a message to establish contact.

Image

The conversation will then appear on the home page. If the person accepts your contact request, you’ll see their name and profile photo.

Image

Congratulations, you’re now up to speed on using Signal messaging!

This post is licensed under CC BY 4.0 by the author.