{"id":18807,"date":"2026-09-19T10:25:01","date_gmt":"2026-09-19T17:25:01","guid":{"rendered":"https:\/\/jasonsblog.ddns.net\/?p=18807"},"modified":"2026-09-19T10:25:01","modified_gmt":"2026-09-19T17:25:01","slug":"signal-beta-lets-android-users-create-accounts-without-phone-numbers","status":"publish","type":"post","link":"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/09\/19\/signal-beta-lets-android-users-create-accounts-without-phone-numbers\/","title":{"rendered":"Signal Beta Lets Android Users Create Accounts Without Phone Numbers"},"content":{"rendered":"\n

(Headline article below) Signal always bothered me because of them identifying you by phone number. Throw in the US Government using the platform which screams they trust the platform because they’re running it. And even through the communications are encrypted and supposedly secure, all the server side metadata is available for the government to link users, and the government has gone on record saying they kill people based on metadata. Consequently, if you’re still not bothered, watch interviews<\/a> of their CEO Meridith Whittaker who screams spook to me. And it’s hilarious that people in the privacy space promote using Signal, as it says their research is inadequate. Which reminds me of the OPSEC Bible on the darknet, who calls out some of these groups on their wall of shame. So now you don’t need a phone number to identify yourself, but you have to make a payment using Google Pay to identify yourself…<\/p>\n\n\n\n

http:\/\/opbible7nans45sg33cbyeiwqmlp5fu7lklu6jd6f3mivrjeqadco5yd.onion\/\/opsec\/index.html<\/a><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

https:\/\/reclaimthenet.org\/signal-login-no-phone-number-android-beta<\/a><\/p>\n\n\n

<\/div><\/div><\/div>\n\n\n
Signal is finally cutting the cord between private messaging and the phone company.<\/h5>\n\n\n\n
\"\"\/<\/figure>\n\n\n\n

By Rick Findlay<\/p>\n\n\n\n

Signal is rolling out Signal Login in its Android 8.28 beta, a feature that for the first time allows users to register for the app without a phone number<\/a>.<\/p>\n\n\n\n

On the one hand, this is a major development because it removes the biggest roadblock to wider adoption of the privacy-minded messenger, and that is its very own core dependency on phone numbers. On the other, there are several caveats<\/a>.<\/p>\n\n\n\n

The phone number has always been Signal\u2019s weakest link, privacy-wise, because it is the link to a real-world identity, that of a telecom subscriber, and also to a physical SIM card that can be swapped by an attacker. But now Signal says that the Account ID and Recovery key replace the phone number.<\/p>\n\n\n\n

This is how Signal describes Signal Login: \u201can optional registration method that allows users to create a Signal account without providing a phone number.\u201d<\/p>\n\n\n\n

And this is how the nonprofit explains the payment: \u201cThe price at launch is $2.99 \/ \u20ac3.49 (EUR price includes VAT), although this may vary by region and currency.\u201d The payment is a one-time payment, and Signal promises that it uses \u201cthe same zero-knowledge proofs as Signal\u2019s donation system, meaning there is no direct link between your payment and your Signal account.\u201d<\/p>\n\n\n\n

The Account ID and Recovery key are the only two pieces of information that can be used to access the account, Signal said, adding, \u201cWhen you purchase a Signal Login, you\u2019ll be given an Account ID and a Recovery key. This is also the Recovery key used for on-device backups and Signal Secure Backups<\/a>, even if you enable backups at a later time.\u201d<\/p>\n\n\n\n

The key is sensitive information, and Signal advises users to \u201csave your Account ID and Recovery key in a password manager.\u201d<\/p>\n\n\n\n

If both are lost, the account is gone \u2013 it cannot be recovered. This is different from the current system, where a phone number can be used to recover an account. Two-factor authentication is available for accounts created with Signal Login, as TOTP-based 2FA.<\/p>\n\n\n\n

The optional username, which was rolled out recently<\/a>, can also be used with this type of account, and without it, nobody can start a chat with you \u2013 you can either start the chat, or join a group using a group link. Devices linked to an account created with Signal Login work the same as those linked to a phone-number account.<\/p>\n\n\n\n

For now, Signal Login is available only to those creating new accounts, and only on Android, with iOS to follow later. It also requires Play Services on Android because the only payment method currently accepted is Play Store\u2019s in-app payment. As AboutSignal, which reported the rollout, put it, \u201cIt\u2019s currently not yet possible to buy a Signal Login account on a device that has no Play Services.\u201d<\/p>\n\n\n\n

Signal, the site noted, says \u201cthey have plans to add more payment methods, but currently only offer Play Store in-app payments, which requires Play Services.\u201d<\/p>\n\n\n\n

\u201cSignal Login currently only works for new accounts,\u201d the nonprofit said.<\/p>\n\n\n\n

It is unclear at this time whether de-Googled devices that have Play Services sandboxed, such as those running GrapheneOS, or those using the microG implementation of Google\u2019s API that doesn\u2019t require Play Services, can be used to buy Signal Login.<\/p>\n\n\n\n

The ability to remove a phone number from an existing account may come later.<\/p>\n","protected":false},"excerpt":{"rendered":"

(Headline article below) Signal always bothered me because of them identifying you by phone number. Throw in the US Government using the platform which screams they trust the platform because they’re running it. And even through the communications are encrypted and supposedly secure, all the server side metadata is available for the government to link […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,7],"tags":[],"class_list":["post-18807","post","type-post","status-publish","format-standard","hentry","category-tech","category-world"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"featured_image_src":null,"author_info":{"display_name":"Jason","author_link":"https:\/\/jasonsblog.ddns.net\/index.php\/author\/jturning\/"},"_links":{"self":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/comments?post=18807"}],"version-history":[{"count":1,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18807\/revisions"}],"predecessor-version":[{"id":18809,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18807\/revisions\/18809"}],"wp:attachment":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/media?parent=18807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/categories?post=18807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/tags?post=18807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}