{
"$type": "site.standard.document",
"canonicalUrl": "https://justingarrison.com/blog/2021-01-11-getting-started-with-signal",
"coverImage": {
"$type": "blob",
"ref": {
"$link": "bafkreihy6cryegrsl7b5br3uqxotasns5ds7pmfyezwbkircunvdeegpky"
},
"mimeType": "image/png",
"size": 70798
},
"description": "How to take advantage of Signal for secure messages and calls",
"path": "/blog/2021-01-11-getting-started-with-signal",
"publishedAt": "2021-01-11T00:00:00.000Z",
"site": "at://did:plc:p7uix7mresfq4nfzxp3klgfa/site.standard.publication/3mmdn7mg2qm2d",
"textContent": "You’ve discovered that Signal can provide you with secure communication from your phone that is cross platform and free!\n\nFirst of all you may be asking “who makes Signal?” Signal Messenger LLC. is the company that makes the Signal app. They are funded by the Signal Foundation which is a non-profit organization that relies on your donations to make the app free and not have ulterior motives with your data.\n\nThe foundation’s mission is\n\n> To develop open source privacy technology that protects free expression and enables secure global communication.\n\nThe Signal app is all open source on GitHub and their protocols are well documented and available on their website.\n\nBut that’s not why you’re here. Let’s show you some tips to get the most out of your new secure messaging app.\n\nImportant settings\n\nSignal is great, but there are a few things you may want to change depending on how secure or private you want your communications.\n\nNotifications.\n\nYou can disable what is shown in notifications to help with privacy. Turn off whatever you don’t want shown.\n\n!img\n\nYou may also want to disable the notification you get when one of your contacts join Signal. Especially ad the rapid pace people are joining.\n\n!img\n\nPrivacy\n\nYou can set the Signal app to lock when your phone locks under privacy. It may also be a good idea to enable incognito keyboard which will ask your keyboard to remove personalization while typing.\n\n!img\n\nYou can turn off read receipts, typing indicators, and automatic link previews under the communication settings. Link previews only work on sites that use https://\n\n!img\n\nChats and media\n\nIn chats you can change when to auto-download files. Some of these can be quite large so it may be a good idea to only automatically download on Wi-Fi.\n\n!img\n\nAt the very bottom of Chats and media is a message backup option. The backup is encrypted and stored locally on your phone. If you’re using a backup service for your phone they will also be backed up to the cloud which you may or may not want (even if it’s encrypted).\n\n!img\n\nLinked devices\n\nYou can use Signal from another device including tablets and laptops. Install the Signal app on the other device and it will show a QR code. Open the linked devices setting and click the + button at the bottom. Scan the QR code and you’re all set.\n\nIf you tap on an existing linked device you have the option to remove it from being able to send or receive messages. Be aware that any existing messages on the device may still be available and cached on the device. This setting is not a “secure wipe.”\n\nChats and calls\n\nSignal chats work similarly to traditional SMS messaging apps. You can send text, emoji, and stickers, or attach pictures, gifs (searched from giphy), files, contacts, or locations. You can record voice messages by holding the microphone.\n\n!img\n\nYou can also make audio or video calls when you select a contact and click the icons in the top banner. All calls are encrypted and can optionally go through a relay server so you do not expose your IP address to the recipient. You can enable the relay server in settings -> privacy -> communication.\n\nA relay is a server that Signal controls that your call will go through. Similar to a VPN in the way it would expose the server IP to the recipient without exposing your IP. If you’re interested in the Signal server architecture you can check out this post.\n\n!img\n\nA single hallow check box next to a message you sent means your message was sent. Two check marks means the message was delivered. Once the recipient reads the message the check marks will fill in.\n\n!img\n\nIf you see a little person icon next to the person’s name in chat it means that person is in your contacts. If you want their name to automatically be filled out you can go into your phone’s contacts and add the number to a contact.\n\n!img\n\nIf you open a chat you can look in settings and enable disappearing messages. This is super helpful to prevent messages persisting.\n\n!img\n\nYou can—and should—verify a contact to make sure you’re really talking to them. This verifies the encryption keys used at both ends of the conversation. You can do that manually or automatically by scanning their QR code.\n\nIdeally you will do this verification out-of-band from Signal either in person or through some other video/image sharing service. Facetime, zoom, etc. are great options if you can’t meet in person.\n\nOnce you verify a contact you’ll see “Verified” text under their name. If you manually mark the contact as verified it will show a message in the chat that you marked them verified.\n\nGroup messages\n\nYou can create a group message from the main screen clicking the pencil and then “New group.”\n\n!img\n\nAdd contacts to the group and you’re ready to go.\n\nYou have similar settings to 1:1 chats. You can have a group video call with up to 8 people and a group chat with up to 150 people—RIP notifications! If you want to have a group call without video you need to start a video call and disable your camera before you join.\n\nYou can change who can invite people to the group or make a group link easier for someone to share if they’re not in your contacts.\n\nThe links are public but an admin needs to approve members joining the group by default.\n\n!img\n\nGroup video calls work the same way as 1:1 calls but groups don’t have audio only calls—although you can disable your video in a video call.\n\nOther things to consider\n\nIf you want to use signal without giving out your real phone number you can use a service like twilio that will provide you a forwarding number.\n\nCheck out this great guide on how to set it up.\n\nYour safety number has changed\n\nIf you see this seemingly scary message don’t be alarmed. It likely just means the person on the other end of the conversation got a new phone or re-installed Signal.\n\n!img\n\nYou can still verify the persons safety number to make sure there is no man-in-the-middle attacks. This is distinctly different than how iMessage and Telegram work because in both of those apps they store your private key.\n\nPins\n\nPins are important because they will enable Signal to get rid of phone number requirements.\n\nThe support page says it best\n\n> Your Signal PIN is a code used to support features like non-phone number based identifiers. This means that your PIN can recover your profile, settings, contacts, and who you’ve blocked if you ever lose or switch devices. A PIN can also serve as an optional registration lock to prevent others from registering your number on your behalf.\n\nIt hasn’t rolled out yet but has been in the works for a while.\n\nIf you want to stay up to date on signal news I highly recommend you follow the Signal blog. They have lots of great technical and non-technical information on new features and news.",
"title": "Getting started with signal"
}