{
"$type": "site.standard.document",
"contributors": [
{
"did": "did:plc:jdrw76zcbtriweixutdr5enn",
"displayName": "nyan"
}
],
"description": "Electron's safeStorage uses DPAPI on Windows, which means any process running as your user can decrypt Signal's database. on macOS, Keychain actually isolates per-app.",
"path": "/posts/2026-03-19-signal-desktop-dpapi/",
"publishedAt": "2026-03-19T23:00:00.000000Z",
"site": "at://did:plc:6guvlunah45ryrpsaf2mfr4l/site.standard.publication/self",
"tags": [
"security",
"til"
],
"title": "signal desktop's encryption is per-user, not per-app (on Windows)"
}