How to Set Up Signal Before Chat Control Kills It

signal is still the best encrypted messenger available. but with chat control now law in the EU, the window to set it up properly is shrinking.

this isn't a "signal is great" hype post. this is a practical setup guide based on what i've learned using signal as my primary messenger for the last 4 years, including through periods where my threat model was significantly elevated.

step 1: download and verify

get signal from the official source only: signal.org. not some random APK site, not a link someone sent you in a telegram group. the official site.

on android, consider downloading directly from signal.org instead of google play. the play store version works fine, but the direct APK version doesn't require google play services for push notifications — signal uses its own system.

step 2: registration

use a phone number you control. i know some people use burner numbers, but here's the reality — signal's security model assumes you control your number. if someone else can receive texts on that number, they can take over your account.

pro tip: if you're concerned about your phone number being linked to your identity, consider getting a prepaid SIM from a country that doesn't require ID for registration. some EU countries still allow this.

step 3: configure disappearing messages

this is the step most people skip. don't.

go into each conversation → timer icon → set a disappearing message timer. i use:

• 1 week for general conversations
• 24 hours for sensitive conversations
• 4 weeks for conversations where i need to reference things

important: disappearing messages are not forensic-proof. if the other person screenshots or backs up their phone, the messages persist. it's defense in depth, not a guarantee.

step 4: enable screen security

settings → privacy → screen security. this prevents signal content from appearing in your phone's app switcher and blocks screenshots within the app on android.

step 5: registration lock

settings → privacy → registration lock. this requires your signal PIN to register your number on a new device. without this, someone who gets your SIM can take over your signal account.

step 6: sealed sender

this is on by default, but verify: settings → privacy → sealed sender. this means signal's servers don't know who is sending messages to whom. the metadata protection is real and it's one of signal's most underappreciated features.

the chat control problem

here's the uncomfortable truth: if chat control mandates client-side scanning, signal's response will likely be to leave the EU market rather than compromise their protocol. moxie (and now meredith) have been clear about this.

that means signal might become unavailable through official channels in the EU. having it set up now, with your contacts migrated, means you're ready for that scenario.

i wrote more about encrypted messaging options and what happens when platforms get forced out: Encrypted Messaging After Chat Control

final thoughts

signal isn't magic. it's a tool. the most important thing is that the people you communicate with also use it, and that you both understand what it does and doesn't protect against.

start migrating your important conversations now. don't wait until the app store listings change.