What end-to-end encryption really means
End-to-end encryption, sometimes shortened to E2EE, means messages are locked on your device and only unlocked on the device of the person you sent them to. The server that carries the message never sees the plain text. It carries a sealed envelope and hands it off unopened. If the server is seized, subpoenaed, or hacked, the messages inside are still unreadable to whoever has the box.
That word "end" matters. Encryption that runs from your phone to a company server and back is transport encryption. It protects the wire, but the company can still read your message. E2EE removes the company from the loop. Signal is one of a small number of consumer chat apps that does this by default for every message, every call, and every group.
Signal vs WhatsApp vs Telegram
Signal, WhatsApp, and Telegram often get grouped together. They are not the same thing.
| App | E2EE default? | Server sees who you talk to? | Open source? |
|---|---|---|---|
| Signal | Yes | Almost nothing (sealed sender) | Yes, client and server |
| Yes (Signal protocol) | Yes (metadata) | Client no, protocol yes | |
| Telegram | Only in "secret chats" | Yes (all chats server-side) | Client yes, server no |
The practical takeaway: Signal collects the least. WhatsApp encrypts message content well but keeps rich metadata about who talks to whom. Telegram's default cloud chats are not end-to-end encrypted at all. If you need to be sure a chat cannot be read by anyone but the two of you, Signal is the safe default.
Setting up Signal carefully
Signal registration is tied to a phone number. For many activists and journalists that is fine. For some it is a real problem — the number is a name tag. If that is your case, use a dedicated number that is not tied to your main identity: a low-cost prepaid SIM used only for Signal, or a number from a phone-number service that lets you receive SMS without linking to your main line.
- Set a Signal PIN so nobody can re-register your account without it.
- Turn on registration lock. This is a separate switch and it is worth it.
- Use a strong device lock screen. Signal only protects what is on the device.
- Keep the app updated. Security patches ship regularly.
Signal is one of many open-source tools that exist in part because of grants from the Open Technology Fund, and its openness is why security researchers can and do check it. If you are trying to pick between Signal and other privacy-first choices, our VPN vs Tor vs Psiphon comparison covers the network-level cousins.
Disappearing messages and safety numbers
Two features are worth learning as soon as you install Signal. Disappearing messages sets a timer on a chat — five minutes, one hour, one week — after which every message is auto-deleted on both ends. It does not stop screenshots, but it means an old phone in the wrong hands does not spill a year of history.
Safety numbers are the fingerprint of each conversation. When you tap into a contact's Signal profile and read the safety number, you are checking that no attacker has replaced your friend with a fake account. In high-stakes chats, compare the safety number in person or over a separate channel like a call over Tor or a written note.
Signal as part of a threat model
A threat model is a plain-English answer to two questions: what do I need to protect, and who might try to break it? Signal is a strong answer to some threats — a network attacker reading your messages, a data breach exposing your history, a company handing your chats to a subpoena. It is not an answer to other threats — someone with physical access to your unlocked phone, a targeted spyware infection, or an insider at the other end of the chat. Signal is the encrypted layer of a good threat model, not the whole thing. Used with a locked device, an anonymous number if you need one, and careful choices about who you talk to, it is one of the best tools activists and journalists have. That is what Signal is for.