Get the latest tech news

After Criticism, Signal Agrees to Secure Plain-Text Encryption Keys for Users' Message Databases

"Signal is finally tightening its desktop client's security," reports BleepingComputer — by changing the way it stores plain text encryption keys for the SQLite database where users' messages are stored: When BleepingComputer contacted Signal about the flaw in 2018, we never received a respo...

While the solution would provide additional security for all Signal desktop users, the request lay dormant until last week's X drama. Two days ago, a Signal developer finally replied that they implemented support for Electron's safeStorage, which would be available soon in an upcoming Beta version. "To be fair to Signal, encrypting local databases without a user-supplied password is a problem for all applications..." the article acknowledges.

Get the Android app