External Publication
Visit Post

Signal macOS Desktop App Doesn't Actually Delete Messages When it Should

Privacy Guides Community [Unofficial] May 29, 2026
Source
Isn’t this a non-issue if you restart the Signal app or use it often though? Restrictions ------------ This vulnerability is mitigated by several factors: 1. The database is encrypted. To extract any deleted messages, the attacker will have to defeat the encryption. This requires capabilities and expertise. 2. Active Signal use will reach the Write-Ahead log page limit fast, leading to merging of log fairly regularly. 3. Signal app restart will commit the Write-Ahead Log, deleting the messages. While it’s not nice from Signal to not answer I know this is something a lot of big open source projects have been struggling with since people spam them with AI generated content. But then again I don’t see this impacting 99% of all Signal users on macOS. Still an interesting find though.

Discussion in the ATmosphere

Loading comments...