SethP's site - encryption with Signal

Messenger and chat encryption with Signal

signal.jpgAfter having described email encryption (in Windows) on the previous page, I really want to urge everyone reading this to install Signal. Primarily on your smartphone, but Signal is also available for, for example, Windows and Mac.

So what exactly is Signal? Essentially, it’s a messaging, chat, and SMS app for your phone. But why should you use Signal instead of something else? Well, first of all, because communication is encrypted with everyone who also uses Signal. And second, because the app works just as well even if the person you’re communicating with doesn’t use it. So, it’s an excellent replacement for all the other apps, such as WhatsApp and Messenger.* In fact, you can very well replace your old SMS app with Signal.

*) The problem with, for example, WhatsApp and Messenger is that they are owned and managed by Facebook. This means that even if the communication is protected (encrypted) externally, so to speak, it isn’t protected from Facebook itself. And that company is, frankly, not exactly known for handling its users’ data with much care. If you write about diapers there, then sure enough, ads for diapers will pop up pretty much everywhere—especially when you’re on Facebook.

So what do you actually need to do for communication to be secure?
Well, nothing really… other than installing the app. The encryption happens end-to-end (as it’s called) without you having to think about it. The only caveat is that it isn’t protected unless the recipient is also using Signal.

Other advantages of Signal then?
Well. First of all, it’s available for Android, iPhone, Windows, Mac, and Debian-based Linux. Desktop download here. If you want to install the app on your phone, I recommend using the stores on Google Play (for Android) or the App Store (for iPhone and iPad). This means, of course, that everyone should be using Signal… But further: precisely because it’s also available for desktop (Windows and Mac, for example), it becomes much easier to write longer messages. At least I think so. It’s easier to type on a regular keyboard than on a phone. And finally, it’s easy to send messages to yourself. Say, for example, you register somewhere with your phone and want to send the details (like a password) to your PC… You really shouldn’t do that with regular email, for instance. That’s not smart. But with Signal installed, I don’t see any problem with it at all.

Signal can also be used for talking, sending files, and making video calls—all encrypted and protected. And you can chat in groups, meaning with more than two participants. An instructional video (in this case for Android) from the British InfoSec Bytes is available on YouTube.

But finally then? Why?
Well, simply because you can, you should… and you must.  :-)

On YouTube there’s also a very good video, likewise from the British InfoSec Bytes, which is a well-regarded organization dealing with security aspects mainly for journalists. I highly recommend that video if you want to know a bit more.


PS: If you’d like to read more about my reasoning for encryption, you’ll find that on my previous page, which mainly deals with email encryption using Gpg4win. DS