Signal macOS Desktop App Doesn't Actually Delete Messages When it Should
Privacy Guides Community [Unofficial]
May 29, 2026
Isn’t this a non-issue if you restart the Signal app or use it often though?
Restrictions
------------
This vulnerability is mitigated by several factors:
1. The database is encrypted. To extract any deleted messages, the attacker will
have to defeat the encryption. This requires capabilities and expertise.
2. Active Signal use will reach the Write-Ahead log page limit fast, leading to
merging of log fairly regularly.
3. Signal app restart will commit the Write-Ahead Log, deleting the messages.
While it’s not nice from Signal to not answer I know this is something a lot of big open source projects have been struggling with since people spam them with AI generated content.
But then again I don’t see this impacting 99% of all Signal users on macOS. Still an interesting find though.
Discussion in the ATmosphere