Signal adds encypted local backup support to iOS, desktop apps

Signal’s latest update brings a major boost to user security and convenience, rolling out encrypted local backup support to all supported platforms. This significant feature expansion marks a crucial milestone in Signal’s ongoing quest for end-to-end encryption (E2EE) dominance.

The secure messaging app has been gradually introducing its backup system across various operating systems since last year, starting with Android. The main idea behind this initiative is to give users peace of mind by safeguarding their chats and media against data loss or device compromise. With the latest update, both iOS and desktop users can now enjoy the benefits of local backups.

To understand how Signal’s backup system works, it’s essential to know that there are two primary options available: hosted backups and on-device backups. Hosted backups store encrypted data in the cloud for free users (with 45 days of media and 128 KB per message) or up to 100 GB in paid plans. On the other hand, local backups allow users to create an encrypted archive directly on their device, with no size restrictions.

One key aspect of Signal’s backup system is its use of recovery keys, which are required to decrypt both hosted and local backups. According to Signal, these keys have significant value, and threat actors have taken notice – incorporating them into their targeting scope shortly after the feature was introduced. This serves as a reminder that even seemingly secure features can be vulnerable to exploitation.

The latest update brings several improvements to the backup system, including faster and more reliable syncing across devices. When linking a new device from the primary one, it will now retrieve older attachments missing from the chat. Additionally, media is stored separately from the backup archive, reducing duplication and minimizing excessive backing up and syncing.

For paying users, there’s a new option to purge old media from local storage while keeping only thumbnails, which are automatically retrieved in full from hosted backups. Furthermore, disappearing messages set to vanish within 24 hours will be ignored by both backup methods, preventing them from being included in the archive.

Signal’s engineers have also introduced an innovative feature for direct iPhone-to-iPhone transfer using a local end-to-end encrypted Wi-Fi Aware link, which they claim improves speed and reliability. This rollout completes the first phase of Signal’s backups project, with the next focus area being non-backup systems.

For users who take both hosted and on-device backups, it’s essential to note that the former does not wipe the latter – meaning that local backups remain intact even after a user deletes their hosted backup data. During restoration, expired disappearing messages from local backups will be skipped, preventing potential issues.

As Signal continues to push the boundaries of secure communication, its users can rest assured that their data is being protected by robust encryption and innovative features. With this latest update, Signal has solidified its position as a leading provider of secure messaging solutions – one that’s committed to safeguarding user data in an increasingly complex threat landscape.

To take advantage of these new features and ensure your own security posture remains strong, we recommend regularly backing up your chats and media using both hosted and on-device methods. This will provide you with peace of mind and a robust defense against potential data loss or device compromise.


Source: Bleeping Computer — 2026-09-29