Fact-checked by Grok 2 weeks ago

Open Whisper Systems

Open Whisper Systems (OWS) was a software development group founded in early 2013 by security researcher Moxie Marlinspike as an open-source initiative to advance private and secure mobile communications. Emerging from the open-sourcing of TextSecure (an encrypted messaging app) and RedPhone (an encrypted voice calling app) originally developed under Whisper Systems, OWS unified these into the Signal app in 2015, which became a flagship for end-to-end encrypted messaging. The group's core innovation, the Signal Protocol, employs the Double Ratchet Algorithm to provide forward secrecy and deniability, enabling robust protection against interception and has been adopted by services including WhatsApp and Facebook Messenger. OWS operated as a non-profit entity focused on cryptographic and tool development without commercial pressures, receiving support from grants such as those from the to sustain its mission of accessible technology. Key achievements include making high-security user-friendly and open-source, with Signal gaining widespread adoption among advocates, journalists, and activists for its resistance to . In 2018, OWS transitioned into the , co-founded by and (co-founder of ), to ensure long-term sustainability through Acton's substantial funding while maintaining open-source principles; stepped down as president in 2022. The organization's work has influenced broader industry standards for secure messaging, though it has faced scrutiny over U.S. government-linked funding potentially compromising independence, despite its verifiable open-source code and lack of substantiated backdoors.

History

Background and Early Projects (2010–2013)

Whisper Systems was co-founded in 2010 by security researcher and roboticist Stuart Anderson, who relocated from to the to focus on mobile privacy tools amid gaps in secure smartphone communications. The startup developed , an app enabling for SMS and MMS messages using a custom protocol, and RedPhone, which facilitated encrypted voice-over-IP calls between compatible devices via ZRTP-based key agreement. These applications addressed fundamental vulnerabilities in carrier-mediated mobile data transmission, drawing from Marlinspike's prior cryptographic research into protocol weaknesses and evasion techniques. On November 28, 2011, Twitter acquired Whisper Systems to bolster its internal security practices, incorporating the founders' expertise and technology without disclosing financial terms. Post-acquisition, Twitter integrated elements of the software for enterprise use but discontinued public support for TextSecure and RedPhone as consumer products, shifting focus away from standalone mobile encryption apps. In , following Twitter's deprioritization and amid revelations of widespread programs, the source code for and RedPhone was released openly, preserving the foundational encryption implementations for independent advancement. This release stemmed from recognition that proprietary control hindered broader adoption and scrutiny of privacy-enhancing tools, enabling community verification of their security claims against real-world threats like intercepted mobile traffic.

Formation and Expansion (2013–2018)

Open Whisper Systems (OWS) was founded in early 2013 by after his departure from , establishing it as a nonprofit entity to sustain and advance open-source projects previously developed under Whisper Systems, free from corporate acquisition constraints. Initial efforts focused on refining for end-to-end encrypted and RedPhone for calls over IP, alongside beginning development of the with Trevor Perrin to enable more robust, double-ratchet mechanisms. On July 29, 2014, OWS launched , providing users with a dedicated application for free, worldwide encrypted phone calls, marking an expansion of secure voice communication to the platform. This release prioritized ease of use, allowing seamless initiation of encrypted calls without complex setup, thereby broadening accessibility beyond users who had access to and RedPhone. To streamline functionality and enhance user experience, OWS merged and RedPhone into a single integrated application named Signal for on November 2, 2015, combining encrypted messaging and voice calling while preserving the underlying protocols. The unified app emphasized intuitive design alongside cryptographic rigor, facilitating adoption by non-technical users. OWS's technical advancements gained external validation through WhatsApp's integration of the , culminating in the complete rollout of across all platforms on April 5, 2016, which secured communications for over a billion users and empirically demonstrated the protocol's capacity for scalable, reliable deployment in high-volume messaging systems. This adoption underscored OWS's causal influence in propagating privacy-preserving standards, as the protocol's and deniability features proved effective against real-world surveillance pressures without compromising performance.

Transition and Evolution (2018–present)

In February 2018, Open Whisper Systems initiated a transition by establishing the Signal Foundation as a 501(c)(3) nonprofit organization, supported by a $50 million donation from WhatsApp co-founder Brian Acton. This restructuring transferred operational responsibility for the Signal application from the original project entity to the foundation, enabling sustained development free from commercial pressures and emphasizing long-term independence. Acton assumed the role of executive chairman, while Moxie Marlinspike continued as CEO, marking a pivotal shift toward nonprofit governance to bolster privacy-focused engineering amid growing user adoption. Leadership evolved further in January 2022 when stepped down as CEO after leading Signal's development for over a decade, remaining involved as a board member to guide technical direction. Brian Acton served briefly as interim CEO before , a privacy advocate and former researcher with prior open-source collaboration on Signal-related projects, was appointed president in September 2022. Under Whittaker, the organization prioritized incremental enhancements to user privacy, such as the February 2024 rollout of usernames, which enable connections via unique identifiers rather than phone numbers, thereby reducing leakage without altering core mechanisms. Signal's relevance persisted into 2025, with U.S. downloads surging 45% in March following "SignalGate"—a where administration officials inadvertently leaked sensitive war planning details via a group chat, underscoring the app's role in high-stakes communications despite non-classified use warnings from . These events, including broader scrutiny of executive branch messaging practices, drove adoption amid public concerns over and . The Signal Protocol's security has been corroborated by independent cryptographic reviews, including a 2016 audit and subsequent expert analyses affirming and resistance to key compromise, with its open-source implementation facilitating ongoing verification by security researchers.

Leadership and Governance

Key Founders and Personnel

, born Matthew Rosenfeld, founded Open Whisper Systems in early 2013 as a nonprofit entity dedicated to advancing open-source encrypted communication tools following his departure from . His cryptographic expertise stemmed from prior projects, including the development of sslsniff, a tool for conducting man-in-the-middle attacks on SSL connections to highlight implementation flaws in certificate authorities and protocols, as demonstrated in his 2009 presentation on defeating SSL in practice. This work underscored a core principle of designing systems resistant to centralized points of failure, prioritizing that enable peer-verified security over institutional trust models prone to compromise. Marlinspike's foundational contributions to OWS built on his co-founding of in 2010 with Stuart Anderson, a roboticist, where they created for encrypted messaging and RedPhone for calls—applications later open-sourced after Twitter's acquisition of the startup in December 2011. Anderson, who collaborated on the initial services, represented an early partner whose involvement bridged robotics-informed with security-focused , though his primary role remained tied to the predecessor entity. Under OWS, Marlinspike's leadership drove the evolution of these tools into the , emphasizing verifiable backed by empirical testing against interception techniques rather than unexamined assumptions about network intermediaries. Later key personnel included , who joined the Signal ecosystem—emerging from OWS's projects—as president of the in 2022, bringing a focus on practical resistance to informed by her prior experience critiquing data-driven corporate practices at . Whittaker's contributions emphasized deploying to counter state-level collection, aligning with OWS's origins in tools proven effective against real-world vectors, though her tenure postdated the core OWS phase. These individuals' efforts collectively advanced through audited for causal robustness, with Marlinspike's track record of exposing protocol weaknesses providing a empirical foundation for OWS's security claims.

Organizational Changes and Board Composition

In February 2018, Open Whisper Systems transitioned from an informal open-source collaborative to the , a 501(c)(3) dedicated to advancing privacy-preserving technologies, accompanied by the formation of Signal Messenger LLC as its operational subsidiary to manage and deployment. This structural shift, initiated by co-founders and , aimed to provide long-term stability for Signal's protocol and applications by separating governance from day-to-day operations, while maintaining open-source commitments. The Signal Foundation's board of directors initially comprised Acton as chairman and , with joining as president following Marlinspike's departure as Signal Messenger CEO in 2022. In June 2023, the board expanded to five members, adding as chair—previously CEO of the —and Amba Kak, a policy researcher focused on ; this refresh occurred amid Whittaker's continued leadership and Acton's ongoing role. Maher's appointment, leveraging her experience in tech governance and , has prompted questions about ideological influences on the foundation's direction, given her prior affiliations with organizations like the and , which critics argue may prioritize progressive agendas over neutral privacy advocacy. Such board compositions underscore tensions between nonprofit and external ties to policy-driven entities, potentially affecting strategic decisions on adoption and global outreach.

Funding Model

Initial Government and Grant Funding

Open Whisper Systems (OWS) received its initial major funding through grants from the (OTF), a nonprofit entity primarily financed by the U.S. Agency for Global Media (USAGM), which allocates congressional appropriations for initiatives tied to U.S. foreign policy objectives such as countering in adversarial regimes. In 2013, OTF awarded $455,000 to OWS founder and the organization for developing encrypted communication tools. This was followed by $900,000 grants in both fiscal years 2014 and 2015 to support Signal's expansion, with an additional $700,000 in 2016, totaling over $2.9 million from OTF between 2013 and 2016. These grants played a pivotal role in bootstrapping OWS's operations as a nonprofit, enabling the scaling of open-source circumvention tools like and RedPhone, which evolved into the , without reliance on or models. OTF's mandate focused on technologies for secure communication in censored environments, aligning empirically with OWS's goals of but embedding the projects within U.S.-funded efforts to promote information access abroad, such as in and . While OTF operates with procedural independence from direct oversight, the funding's origins in USAGM appropriations—derived from funds via entities like —have prompted scrutiny over potential alignments with U.S. geopolitical interests, contrasting with OWS's later emphasis on donation-based sustainability to mitigate such dependencies. Critics, including security analysts, have highlighted risks of implicit on or priorities, though no verified of backdoors or policy concessions emerged from these . This early reliance underscores a causal pathway where government-linked seed capital facilitated OWS's technical advancements, yet introduced questions about long-term in .

Shift to Donations and Long-Term Sustainability

In February 2018, Open Whisper Systems transitioned into the independent nonprofit Signal Technology Foundation, enabled by a $50 million from co-founder , who became its executive chairman. This funding pivot aimed to sever reliance on prior grant sources, such as those from the , thereby minimizing perceived governmental influence over development priorities and enhancing operational autonomy. Acton's contribution, structured initially as a with subsequent loans totaling over $100 million by 2023, provided a multi-year runway for sustainability without strings attached to state or institutional agendas. The foundation's ongoing model emphasizes voluntary user donations, solicited via in-app prompts without ads or data monetization, positioning accountability to end-users over external funders. In 2023, total revenues reached approximately $35.8 million, matching expenses of $35.8 million, with alone costing $14 million annually for , servers, and minimal data retention due to protocols that preclude long-term message storage. Projections indicate operational costs approaching $50 million per year by mid-decade, driven by user growth exceeding 40 million monthly active users and the demands of scalable, privacy-preserving servers. Empirical data reveals challenges in broad-based donor participation, with fewer than 1% of users contributing regularly, though small recurring donations of $5 or more—now comprising about 25% of inflows—supplement larger philanthropic support. This low conversion rate underscores the tension between the nonprofit's minimal-data model, which limits revenue levers like targeted , and the high fixed costs of global service delivery. Sustainability critiques highlight risks from over-dependence on individual philanthropists like Acton, whose dominates despite diversification efforts, potentially exposing the organization to donor priorities or future withdrawal absent decentralized alternatives like community-governed protocols. Proponents counter that user-centric donations foster alignment with needs, yet the model's viability hinges on micro-contributions amid rising expenses, with reports affirming no compromise on core tenets.

Technical Foundations

Development of the Signal Protocol

The Signal Protocol emerged from efforts at Open Whisper Systems beginning in 2013, when founders and Trevor Perrin initiated its design to enable end-to-end encrypted messaging with robust . The protocol's core innovation, the developed that year, integrates a symmetric ratchet for deriving message keys from a chain of hash functions with asynchronous Diffie-Hellman ratchets to update root keys, ensuring that compromise of one does not expose prior or subsequent messages. This mechanism empirically outperforms earlier approaches like Off-the-Record (OTR) messaging by incorporating post-compromise security, where new Diffie-Hellman exchanges allow recovery from key exposure without resetting the entire session. Complementing the , the —formalized by 2016—facilitates initial derivation for asynchronous users via triple Diffie-Hellman handshakes involving identity keys, signed prekeys, and ephemeral one-time prekeys, yielding 256 bits of while enabling deniability through unsigned prekey contributions. By blending these elements, the protocol mitigates causal risks in hybrid cryptosystems, such as replay attacks or passive on outdated keys, without relying on unproven assumptions of perpetual long-term key integrity. Formal verification in 2016 by Cohn-Gordon, Cremers, Dolev, Guttman, and Schlesinger modeled the protocol using ProVerif, proving authentication, forward secrecy, and post-compromise security under standard Diffie-Hellman assumptions, with no exploitable vulnerabilities identified despite exhaustive state-space analysis. Subsequent open-source audits through the 2020s, including implementations in libsignal, have upheld resistance to known quantum threats via hybrid constructions and confirmed scalability for high-volume messaging. The protocol's verifiable design has driven adoption in diverse systems, such as WhatsApp's integration starting November 2014 for Android-to-Android calls, extending to over a billion users.

Associated Software Projects

Open Whisper Systems initially developed , an application for end-to-end encrypted and messaging, and RedPhone, a companion app for encrypted voice calls over data networks. In November 2015, OWS merged these into the unified Signal application for , which integrated secure messaging, voice, and later video calling capabilities into a single cross-platform interface, simplifying while maintaining . This evolution extended to , with Signal for incorporating TextSecure-like features by March 2015 and fully aligning post-merger. Signal's client software is released under free and open-source licenses, including GPLv3 for protocol libraries and mobile clients, facilitating community review and iterative improvements through public code repositories. Ancillary projects include Signal Desktop, launched in beta form on December 2, 2015, for Windows, macOS, and , enabling linked-device functionality that synchronizes messages across platforms without compromising encryption. OWS further provided libsignal, a platform-agnostic library implementing the , which third-party developers have integrated; for instance, adopted it in 2016 to enable for its billions of users, demonstrating the protocol's broader applicability beyond OWS's own apps. These projects evolved interdependently, with updates to core libraries propagating security enhancements across applications and external implementations.

Privacy and Security Claims

Encryption and Protocol Mechanics

The , developed by Open Whisper Systems, employs to secure communications, ensuring that only the communicating parties can access message contents. Central to this is the X3DH (Extended Triple Diffie-Hellman) , which establishes a between parties using a combination of identity keys, signed prekeys, and one-time prekeys. This asynchronous setup allows initial key exchange without requiring both parties to be online simultaneously, incorporating multiple Diffie-Hellman exchanges to provide and resistance to man-in-the-middle attacks when users verify safety numbers or QR codes. Following key establishment, the maintains session security through symmetric-key ratcheting for message encryption and Diffie-Hellman ratcheting for periodic key renewal. This dual mechanism achieves by discarding old keys after use and post-compromise security by enabling recovery from key exposure via fresh Diffie-Hellman exchanges, limiting damage to subsequent messages only. The protocol's design thus prevents long-term decryption of past sessions even if long-term keys are compromised, as each message derives unique ephemeral keys. Cryptographic deniability is integrated via unauthenticated Diffie-Hellman exchanges and the absence of persistent signatures on messages, allowing parties to plausibly deny participation in a session without providing verifiable proof to third parties. This contrasts with protocols requiring signatures for authentication, as X3DH and the avoid generating forgeable transcripts that could authenticate senders retroactively. However, deniability holds under offline assumptions and may weaken against active adversaries with access to real-time proofs. As an open-source , its implementation is publicly auditable, with the codebase hosted on enabling independent verification by cryptographers and researchers. While formal audits, such as independent cryptographic reviews, have identified no critical vulnerabilities in core mechanics, ultimately depends on endpoint integrity, as compromises there could bypass protections. reliance on phone numbers for user registration and discovery introduces causal vulnerabilities to network-level analysis, distinguishing it from decentralized alternatives that avoid centralized for peer matching.

Metadata and Data Retention Policies

Open Whisper Systems, through its Signal service, maintains a policy of not storing message content or call data, as ensures such information remains inaccessible to the organization or third parties. The service is engineered to retain only minimal necessary for basic functionality, such as the of account creation and the date of the user's last authenticated connection to Signal servers. This data is not indefinitely preserved; undelivered encrypted payloads are automatically purged after a set period, and operational is minimized to limit what can be disclosed in legal requests. Transparency reports and subpoena responses demonstrate partial compliance with these minimization claims. For instance, in response to a 2016 federal subpoena from the Eastern District of targeting two users, Open Whisper Systems provided solely the account creation timestamps and last connection dates, reflecting the limited data retained at the time prior to infrastructure migrations that further reduced storage of elements like registration IP addresses. Subsequent responses to similar legal demands, such as a 2021 subpoena from the Central District of California, reiterated that no user addresses, correspondence records, or other substantive were available, underscoring the absence of long-term retention for such information. However, the reliance on phone numbers for user registration and contact discovery introduces inherent metadata exposure that undermines absolute minimization. Phone numbers serve as persistent identifiers tied to real-world identities, enabling the reconstruction of social graphs through contact syncing—where users upload hashed phone numbers to servers to discover Signal-enabled contacts—potentially allowing correlation of relationships via traffic patterns or external data linkage, even if full contact lists are not centrally stored. Central server architecture for message routing necessitates transient knowledge of sender-recipient pairs (obfuscated via features like Sealed Sender for incoming messages but not fully eliminated), creating opportunities for timing-based or aggregate analysis attacks that reveal communication patterns without accessing content. These usability trade-offs, while enabling broad adoption, contradict media narratives portraying Signal as eliminating metadata entirely, as functional necessities like push notification delivery via phone-linked tokens preserve traceable elements absent in fully decentralized alternatives.

Controversies

Scrutiny Over Funding Sources

Open Whisper Systems received approximately $3 million in grants from the (OTF), a U.S. government-funded entity under the U.S. Agency for Global Media (USAGM), between and 2016 to support the development and deployment of Signal's technologies. Specific allocations included $455,000 in for 18 months of work, $900,000 in 2014, $900,000 in 2015, and $700,000 in 2016, totaling $2.955 million documented by OTF, with the balance covering extended efforts through 2018. These funds aligned with OTF's mandate to promote "internet freedom" tools, often targeting in nations adversarial to U.S. interests, such as and , by enabling for activists and dissidents. Critics have raised concerns that reliance on U.S. funding introduces potential conflicts of interest, arguing it could incentivize alignment with American objectives over absolute neutrality in tools, particularly given USAGM's role in and broadcasting. For instance, early dependency on such grants—amid OWS's limited staff of fewer than seven employees—might foster vulnerabilities to pressures, including subdued resistance to domestic U.S. demands, despite Signal's open-source code showing no verified backdoors. Proponents counter that the demonstrably advanced verifiable innovations, like the adopted by billions via integrations in and other apps, with no empirical evidence of influence compromising core mechanics. Following 2018, OWS transitioned to the nonprofit , seeded with a $50 million donation from co-founder , shifting toward donation-based sustainability and reducing government ties. This diversification addressed prior dependencies but did not retroactively eliminate scrutiny over initial funding's geopolitical framing, as OTF grants explicitly prioritized tools countering state abroad while operating under U.S. oversight.

Legal Challenges and Subpoenas

In early 2016, Open Whisper Systems (OWS) received its first federal grand jury subpoena from the U.S. District Court for the Central District of California, requesting subscriber information associated with two specific phone numbers as part of a criminal investigation. OWS complied by providing limited metadata for one of the numbers—the date and time of the user's last connection to its servers and the IP address associated with that connection—while noting that the second number had never registered with Signal. No message content, user names, addresses, contacts, or other identifying details were available or disclosed, as OWS retains no such records due to its minimal data collection practices. The subpoena included a nondisclosure order (gag order) prohibiting OWS from informing anyone, including the targeted users, about the request for one year, which OWS challenged in court with assistance from the American Civil Liberties Union (ACLU). The government partially rescinded the gag order in October 2016, allowing redacted documents to be unsealed and publicly released. This incident established an empirical precedent for OWS's response to legal compelled disclosures, highlighting the Signal protocol's resilience against content interception while underscoring the phone number as a potential vector, since registration requires one and links it to minimal connection logs. advocates, including the ACLU, praised the outcome as evidence of effective design against overbroad government requests, noting that the subpoena sought extensive non-existent like and call , and that OWS's reinforced user trust by demonstrating negligible exposure. Critics, however, argued that even limited compliance—such as IP logs tied to phone numbers—erodes claims of absolute , as such metadata can facilitate further investigation or with external , potentially incentivizing authorities to target phone-based identifiers in future probes. OWS's official transparency reports, which include this and subsequent similar requests, confirm a pattern of providing only and IP when available, with no instances of content handover.

Ideological and Political Critiques

Critiques of Open Whisper Systems (OWS) and its primary product, Signal, have extended to ideological and political dimensions, particularly regarding the organization's structural choices and governance. , OWS founder and former Signal CEO until January 10, 2022, argued against federated or decentralized architectures, asserting in analyses of early messaging ecosystems that such models fail to achieve broad and robust due to coordination challenges and proliferation across instances. Critics from advocacy circles contend this rationale prioritizes centralized control—facilitating potential regulatory compliance or shutdowns—over distributed resilience, creating chokepoints amenable to state pressure rather than inherent technical necessities. Signal Foundation board composition has drawn scrutiny for perceived ideological imbalances. , appointed chair in 2022 and CEO from March 2024, brings a background in oversight and roles, where she expressed views aligning with progressive priorities, such as dismissing "truth" as an "elitist" concept in a 2021 and advocating 's left-leaning systemic biases as reflective of broader societal shifts. Right-leaning commentators argue her involvement compromises Signal's neutrality, potentially embedding institutional preferences for U.S.-aligned or accommodations, especially amid 's documented left-wing tilts in coverage. In contrast, board member , Signal president since 2022, maintains a staunch anti- posture, framing as antithetical to power and vowing operational cessation over backdoor mandates. Yet this juxtaposition invites questions on cohesion, with detractors positing Whittaker's activism may mask underlying centralization that aligns with selective for Western users. From conservative vantage points, Signal's funding history— including over $3 million from the U.S. government-affiliated between 2013 and 2016—positions it as an instrument advancing American interests, such as countering adversarial regimes, rather than pure universal . Telegram founder echoed this in May 2024, alleging Signal's ties to U.S. intelligence via such grants undermine its claims. Empirical alternatives like Session, launched in 2018 by the Oxen Project, eschew central servers entirely through onion-routed, blockchain-incentivized , avoiding funding dependencies and single-entity failure modes to better embody ideological commitments to user sovereignty over state-proximate models. These perspectives highlight causal risks in OWS's trajectory, where centralized architecture and board influences may inadvertently—or deliberately—prioritize geopolitical utility over uncompromised ideals.

Reception and Broader Impact

Achievements in Adoption and Security Standards

Signal's user base expanded rapidly following privacy concerns with competing apps, reaching over 40 million monthly by late 2021. By 2025, the app had grown to approximately 70 million monthly worldwide, with downloads exceeding 220 million. This surge included spikes during global events emphasizing , such as political upheavals and scandals. The , originally developed by Open Whisper Systems, achieved broad integration into major messaging platforms, extending its reach to billions of users. completed its rollout of the protocol for across all clients by April 2016, enabling for its over 3 billion monthly active users. adopted the protocol for its "Secret Conversations" feature starting in July 2016, providing optional end-to-end encrypted chats within its ecosystem. These implementations preserved core elements like the for , amplifying the protocol's influence beyond standalone apps. Elements of the Signal Protocol have informed international standards for secure messaging. The Internet Engineering Task Force (IETF) standardized the Messaging Layer Security (MLS) protocol in 2023 (RFC 9420), which incorporates asynchronous group key establishment concepts akin to Signal's ratcheting mechanisms, facilitating scalable end-to-end encryption in group communications. Independent security audits, including those in 2023 by external researchers, have verified the protocol's robustness against known attacks, affirming its status as a benchmark for end-to-end encryption with properties like forward secrecy and post-compromise security. By providing accessible, open-source strong cryptography, the protocol has empowered dissidents, journalists, and activists in repressive regimes to communicate securely, as evidenced by its widespread adoption during uprisings and by whistleblowers globally. Usage data from events like protests and political scandals show Signal's role in enabling encrypted coordination without centralized vulnerabilities. This democratization of privacy tools has set a precedent for verifiable, user-controlled encryption in mass-market applications.

Criticisms Regarding Centralization and Usability

Critics have argued that Signal's centralized architecture, reliant on servers operated by Open Whisper Systems, introduces single points of failure and potential vulnerabilities not present in decentralized alternatives. Unlike federated protocols such as , which distribute control across multiple independent servers to mitigate risks from any one entity's compromise, Signal's design concentrates message routing and on its infrastructure, making it susceptible to targeted attacks or shutdowns by . This centralization has drawn rebuke from advocates who contend it undermines long-term , as evidenced by comparisons highlighting Matrix's ability to operate without dependence on a central . The requirement for users to register with a phone number exacerbates these concerns, as it ties pseudonymous communication to a real-world identifier often linked to through telecom records. Analyses point out that this facilitates metadata leakage, where adversaries could correlate phone numbers with communication patterns despite of content, a flaw less pronounced in apps allowing username-based . commentators, emphasizing principles of distributed trust, have critiqued Signal's founder for prioritizing mass adoption over purist , arguing that such compromises erode the foundational of user in encrypted systems. On usability, Signal's account recovery mechanisms have been faulted for complexity that alienates non-technical users, with frequent reports of data loss during device transfers due to reliance on memorable PINs and encrypted backups that fail silently if not configured precisely. A 2016 study on secure mobile messaging found that most participants struggled with key verification processes essential for security, highlighting how Signal's interface demands technical savvy that deters broader adoption among average users. Experimental features like the payments integration, introduced in beta in April 2021 and expanded globally by 2023, have been criticized as feature bloat that complicates the core messaging experience without delivering sustained value, ultimately burdening users with setup hurdles and regulatory risks. These additions, later de-emphasized amid low uptake, illustrate a pattern of pursuing ambitious extensions that strain for privacy-focused audiences, contrasting with rivals' streamlined threat models that evolve more nimbly without such distractions.

References

  1. [1]
    Meet Moxie Marlinspike, the Anarchist Bringing Encryption to All of Us
    Jul 31, 2016 · Marlinspike quickly picked up where he'd left off. In early 2013 he relaunched his startup as an open source project called Open Whisper Systems ...
  2. [2]
    The story of Signal – Increment: Security
    Out of their mobile security software startup, Whisper Systems, which they cofounded in 2010, they released TextSecure for texting and RedPhone for voice calls ...
  3. [3]
    Open Whisper Systems partners with Google on end-to-end ... - Signal
    May 18, 2016 · At Open Whisper Systems, our goal is to make private communication simple. The foundation of our technology is Signal Protocol, a modern, open ...
  4. [4]
    Signal (Open Whisper Systems) | OTF - Open Technology Fund
    Developed by Open Whisper Systems (OWS), Signal is an easy to use mobile application that provides encrypted text messaging and voice and video calls relied on ...
  5. [5]
    Signal >> Home
    Share text, voice messages, photos, videos, GIFs and files for free. Signal uses your phone's data connection so you can avoid SMS and MMS fees. Speak Freely.Download · Blog · Protocol · Careers
  6. [6]
    Signal encrypted messaging app founder calls it quits - iTnews
    Jan 11, 2022 · ... Open Whisper Systems. Marlinspike and WhatsApp co-founder Brian Acton started the Signal Foundation in 2017. The protocol behind Signal has ...
  7. [7]
    Moxie Marlinspike Has a Plan to Reclaim Our Privacy
    Oct 19, 2020 · In 2010, Marlinspike and Stuart Anderson, a friend and a robotics Ph.D. student at Carnegie Mellon, left Pittsburgh and moved to the Bay ...
  8. [8]
    Moxie Marlinspike: The Cypherpunk Pirate Who Built Signal
    Sep 30, 2025 · With that idea of privacy in mind, back in 2010, Marlinspike and roboticist Stuart Anderson launched a small startup called Whisper Systems .
  9. [9]
    Twitter Acquires Moxie Marlinspike's Encryption Startup Whisper ...
    Whisper Systems announced Monday that it's been acquired by Twitter, though Twitter hasn't confirmed the deal or offered any information ...
  10. [10]
    Twitter Buys Some Middle East Moxie - WIRED
    Nov 28, 2011 · Twitter has acquired Whisper Systems, a small outfit founded by well-known security researcher Moxie Marlinspike that aims to provide enterprise-grade security.
  11. [11]
    Twitter acquires dynamic duo at Whisper Systems, works to beef up ...
    Whisper Systems Is Joining Twitter! Posted November 28th, 2011. We're moving: We started Whisper Systems with the goal of improving security and privacy for ...
  12. [12]
    Here come the encryption apps! – A Few Thoughts on Cryptographic ...
    Mar 9, 2013 · RedPhone/TextSecure. RedPhone and TextSecure are developed by Moxie Marlinspike's Open Whisper Systems. Note that OWS is actually Moxie's ...
  13. [13]
    Encrypt Your Smartphone Communications for Free
    Mar 14, 2013 · Specifically, RedPhone encrypts phone calls between smartphones that both use the software, and TextSecure does the same for text messages.<|separator|>
  14. [14]
    Signal >> Blog >> Free, Worldwide, Encrypted Phone Calls for iPhone
    Free, Worldwide, Encrypted Phone Calls for iPhone. moxie0 on 29 Jul 2014. At Open Whisper Systems ... releasing Signal – free, worldwide ...
  15. [15]
    Your iPhone Can Finally Make Free, Encrypted Calls | WIRED
    Jul 29, 2014 · Open Whisper Systems has announced the release of Signal, the first iOS app designed to enable easy, strongly encrypted voice calls for free.
  16. [16]
    Talk Private To Me: Free, Worldwide, Encrypted Voice Calls With ...
    Jul 29, 2014 · 12:18 PM PDT · July 29, 2014. Rejoice, O lovers ... For Open WhisperSystems has released Signal for iPhone, which gives any and every iPhone ...
  17. [17]
    Signal on X: "We've started rolling out Signal for Android ...
    Nov 2, 2015 · We've started rolling out Signal for Android! TextSecure and RedPhone are now just Signal: Just Signal. From signal.org · 7:09 PM · Nov 2, 2015.Missing: merged into date
  18. [18]
    WhatsApp's Signal Protocol integration is now complete
    Apr 5, 2016 · As of today, the integration is fully complete. Users running the most recent versions of WhatsApp on any platform now get full end-to-end encryption.
  19. [19]
    Open Whisper Systems partners with WhatsApp to provide end-to ...
    Nov 18, 2014 · We're excited to publicly announce a partnership with WhatsApp, the most popular messaging app in the world, to incorporate the TextSecure protocol into their ...
  20. [20]
    Signal Foundation
    Feb 21, 2018 · Today, we are launching the Signal Foundation, an emerging 501(c)(3) nonprofit created and made possible by Brian Acton, the co-founder of ...Missing: Whisper Systems
  21. [21]
    WhatsApp Co-Founder Puts $50M Into Signal To ... - WIRED
    Feb 21, 2018 · WhatsApp co-founder Brian Acton has also joined as the foundation's executive chairman, his first new role since leaving WhatsApp last fall. And ...Missing: transition | Show results with:transition
  22. [22]
    Encrypted app Signal just hired one of Big Tech's sharpest critics
    Sep 6, 2022 · Marlinspike stepped down as CEO in January, after roughly a decade at the helm, and Acton took over in an interim capacity. (Signal's three- ...
  23. [23]
    Keep your phone number private with Signal usernames
    Feb 20, 2024 · Signal on 20 Feb 2024. iPhone showing the creation of a Signal username, axolotl.99, on a lightly. Signal's mission and sole focus is ...
  24. [24]
    Signal Downloads Spike Since Trump Team Scandal — But It's Not ...
    Mar 28, 2025 · In the U.S., downloads were up 45% on Monday, and in Yemen, they were up by 42%. Before the scandal, Signal was ranked No. 50 among social media ...
  25. [25]
    SignalGate Is Driving the Most US Downloads of Signal Ever - WIRED
    Mar 27, 2025 · SignalGate, as it's come to be called, may be the biggest scandal to hit the Trump administration in its first months in power.
  26. [26]
    Signal downloads spike in the US and Yemen amid government ...
    Mar 27, 2025 · In the U.S., downloads were up 45% on Monday, and in Yemen, they were up by 42%. Before the scandal, Signal was ranked No. 50 among social media ...
  27. [27]
    Signal Review 2025: Secure Messenger (Pros and Cons)
    The Signal Messaging Protocol was independently audited in 2016. The service is fully GDPR compliant. Clients for Android, iOS, Mac OS, Windows, Linux. Company ...Signal Pros and Cons · Feature summary · Signal Desktop clients · Support<|control11|><|separator|>
  28. [28]
    Reviewing Signal's Cryptography, Finale - Dhole Moments
    Feb 19, 2025 · As of part 5, I concluded that 1:1 messages are forward-secure, and the only concern left was key impersonation. Part 7 would focus on new code ...
  29. [29]
    moxie0/sslsniff: A tool for automated MITM attacks on SSL ... - GitHub
    sslsniff is given a directory full of certificates, which it uses for targeted MITM attacks against the hosts those certificates are signed for.
  30. [30]
    [PDF] New Tricks For Defeating SSL In Practice - Black Hat
    Still useful as a general MITM tool for SSL. The folks who did the MD5 hash collision stuff used sslsniff to hijack connections once they'd gotten a CA cert.
  31. [31]
    SSL And the Future Of Authenticity - Moxie Marlinspike
    Apr 11, 2011 · All secure protocols need to provide three things: secrecy, integrity, and authenticity. If any of these break, the whole protocol breaks.
  32. [32]
    Twitter Nabs The Two Guys Behind Mobile Security Startup Whisper ...
    Nov 28, 2011 · The team behind security startup Whisper Systems has been acq-hired by Twitter, they have announced on their company blog this gorgeous ...
  33. [33]
    Signal President Meredith Whittaker learned what not to do ... - CNBC
    Mar 31, 2023 · Meredith Whittaker, president of the Signal Foundation, gained a skepticism of profit-motivated companies while working at Google.
  34. [34]
    Meredith Whittaker: the Signal messenger is not for profit
    Oct 24, 2022 · Meredith Whittaker: Signal was founded in 2014 by Moxie Marlinspike and grew out of his Open Whisper Systems project. Over the years, many ...
  35. [35]
    Signal Foundation
    Maher is a term member of the Council on Foreign Relations, a World Economic Forum Young Global Leader, and a security fellow at the Truman National Security ...Afrikaans · Azərbaycanca · Bosanski · Catal
  36. [36]
    Open Whisper Systems - Computer Hope
    Nov 12, 2023 · The organization grew out of Whisper Systems, a company co-founded in 2010 by Marlinspike and Stuart Anderson, which was acquired by Twitter in ...
  37. [37]
    Signal | Overview, History, & Facts | Britannica
    In 2010 Marlinspike and roboticist Stuart Anderson, founded the security start-up Whisper Systems, which released the private text and call services TextSecure ...
  38. [38]
    Signal's Katherine Maher Problem - City Journal
    May 6, 2024 · Signal's Katherine Maher Problem: Is the integrity of the encrypted-messaging application compromised by its chairman of the board?
  39. [39]
    Who are Signal's co-founders, Moxie Marlinspike and Brian Acton?
    Mar 27, 2025 · The Signal Foundation's co-founders Moxie Marlinspike and Brian Acton both have a background in tech: Acton created WhatsApp before selling it to Mark ...Missing: history | Show results with:history
  40. [40]
    About Our Funding | OTF - Open Technology Fund
    OTF receives the majority of its funding from the US government via the US Agency for Global Media (USAGM).Missing: Whisper Systems
  41. [41]
    US Government Both Supports Encryption and Seeks Limitations
    Apr 14, 2016 · In 2013, OTF gave $455,000 to Marlinspike and Open Whisper Systems; later, in both 2014 and 2015, it funded Open Whisper with $900,000 each ...Missing: grants | Show results with:grants
  42. [42]
    [PDF] 2015 Annual Report - public
    Sep 6, 2018 · The Open Technology Fund's (“OTF”) fourth year of operation will be ... FY2015, $900,000. Open Whisper Systems (OWS) produces Signal ...
  43. [43]
    [PDF] 2016 Annual Report - public
    Sep 6, 2018 · The Open Technology Fund's (“OTF”) fifth year of operation saw a ... Signal. $700,000. Open Whisper Systems​ (OWS) produces Signal, one ...
  44. [44]
    Security experts: U.S. government is sponsoring smartphone ...
    OTF, a federally funded organization, allegedly provided $1.3 million to encryption app maker Open Whisper Systems, which makes Signal, RedPhone and TextSecure ...
  45. [45]
    Signal expands into the Signal Foundation with $50M ... - TechCrunch
    Feb 21, 2018 · $50 million from WhatsApp co-founder Brian Acton should help secure the app's future, through the newly founded Signal Foundation nonprofit.Missing: Open Whisper
  46. [46]
    How Signal Walks the Line Between Anarchism and Pragmatism
    Jul 23, 2023 · Signal is largely funded by a big loan from a WhatsApp founder, and that loan has already grown to $100 million. It has also accepted funding ...
  47. [47]
    Privacy is Priceless, but Signal is Expensive
    Nov 16, 2023 · Current Infrastructure Costs (as of November 2023): Approximately $14 million dollars per year. The Cost of Storing Nothing and Serving Everyone.
  48. [48]
    Signal Technology Foundation - Nonprofit Explorer - ProPublica
    Summary charts: organization finances over time · Revenue. $35.8M (2023) · Expenses. $35.8M (2023) · Total Assets. $37.4M (2023) · Total Liabilities. $34.1M (2023).
  49. [49]
    Running Signal Will Soon Cost $50 Million a Year | WIRED
    Nov 16, 2023 · Updated at 11:45 am, November 20, 2023, to clarify that the Open Technology Fund is funded by the US government but is a separate entity.
  50. [50]
    Signal >> Specifications >> The Double Ratchet Algorithm
    Sep 26, 2025 · Introduction. The Double Ratchet algorithm is used by two parties to exchange encrypted messages based on a shared secret key.KDF chains · Diffie-Hellman ratchet · Double Ratchet · Clearing past epoch stateMissing: date | Show results with:date
  51. [51]
    Specifications >> The X3DH Key Agreement Protocol - Signal
    Nov 4, 2016 · X3DH establishes a shared secret key between two parties who mutually authenticate each other based on public keys.X3DH parameters · Keys · Sending the initial message · Protocol replay
  52. [52]
    [PDF] A Formal Security Analysis of the Signal Messaging Protocol
    Oct 27, 2016 · We conduct a formal security analysis of Signal's initial extended triple Diffie-Hellman (X3DH) key agreement and Double Ratchet protocols as a ...
  53. [53]
    Quantum Resistance and the Signal Protocol
    Sep 19, 2023 · Our new protocol is already supported in the latest versions of Signal's client applications and is in use for chats initiated after both sides ...
  54. [54]
    Just Signal
    Nov 2, 2015 · This is the culmination of our effort to combine TextSecure and RedPhone ... All of our code is free, open source, and available on GitHub. This ...
  55. [55]
    Security made simple: RedPhone and TextSecure rolled into Signal ...
    Nov 3, 2015 · Security made simple: RedPhone and TextSecure rolled into Signal for Android. News. Nov 3, 20154 mins. AndroidData and Information ...
  56. [56]
    Signal >> Blog >> License update
    Jun 13, 2016 · Our Signal Protocol libraries are open source, licensed GPLv3. We like the GPL for the quality control that it provides.Missing: AGPL | Show results with:AGPL
  57. [57]
    Signal App: Open Whisper Systems Debuts Secure Messaging ...
    Dec 2, 2015 · Open Whisper Systems, the ... that developed it, on Wednesday released a beta version of the encrypted chat app for desktop computers.
  58. [58]
    signalapp/libsignal: Home to the Signal Protocol as well as ... - GitHub
    libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library.
  59. [59]
    WhatsApp Adopts the Signal Protocol for Secure Multi-Device ...
    Jul 21, 2021 · This end-to-end encryption protocol is designed to prevent third parties and WhatsApp from having plain-text access to messages or calls.
  60. [60]
    Signal >> Blog >> Simplifying OTR deniability.
    Jul 27, 2013 · One of OTR's primary features is a property called deniability. If someone receives an OTR message from you, they can be absolutely sure you sent it.
  61. [61]
    Signal >> Documentation
    This document describes the Double Ratchet algorithm, which is used by two parties to exchange encrypted messages based on a shared secret key.X3DH Key Agreement · The Double Ratchet Algorithm · The Sesame AlgorithmMissing: audits | Show results with:audits
  62. [62]
    Reviewing the Cryptography Used by Signal - Dhole Moments
    Feb 18, 2025 · Audits are a type of engagement between a vendor and a team of security consultants with specific expertise in the technologies involved.
  63. [63]
    Terms of Service & Privacy Policy - Signal
    Signal Messenger LLC. (“Signal”) utilizes state-of-the-art security and end-to-end encryption to provide private messaging, Internet calling, and other ...
  64. [64]
    Signal >> Government Communication
    We've designed the Signal service to minimize the data we retain about Signal users, so the only information we can produce in response to a request like this ...Search warrants for Signal... · Search warrant for Signal user...<|separator|>
  65. [65]
    Grand jury subpoena for Signal user data, Eastern District of Virginia
    Oct 4, 2016 · The subpoena required us to provide information about two Signal users for a federal grand jury investigation.
  66. [66]
    Grand jury subpoena for Signal user data, Central District of California
    Apr 27, 2021 · The subpoena requested a wide variety of information that fell into this nonexistent category, including the addresses of the users, their correspondence, and ...
  67. [67]
    OTF – USAGM
    OTF funds internet freedom technologies at every stage of the development cycle from proof-of-concept, to on-the-ground deployments, to multi-year efforts.
  68. [68]
    The Signal messaging app was developed and kept afloat ... - Disinfo
    Aug 9, 2024 · Signal has long been promoted as a secure messenger, but critics have warned that it was developed and kept afloat with US intelligence funding.
  69. [69]
    [PDF] Open Technology Fund - U.S. Agency for Global Media
    Direct Funds: OTF provides direct funding to support the research, development, implementation, and sustainability of technologies that enable censorship.<|control11|><|separator|>
  70. [70]
    Government Rescinds Gag on Secret Surveillance Order After ACLU ...
    Oct 4, 2016 · Subpoena Is First Ever Sent to Open Whisper Systems, Maker of Encryption Technology for Facebook, Google, and WhatsApp. October 4, 2016 7:00 ...
  71. [71]
    Feds secretly subpoenaed the encrypted chat app Signal earlier this ...
    Oct 4, 2016 · Earlier this year, Open Whisper Systems was served with a federal subpoena for records on its users, according to documents published today.
  72. [72]
    Subpoena to Encrypted App Provider Highlights Overbroad FBI ...
    Oct 10, 2016 · On Tuesday, Open Whisper Systems and its lawyers at the American Civil Liberties Union successfully challenged a gag order forbidding the ...
  73. [73]
    Feds get sweet FA from Whisper Systems Signal subpoena
    Oct 4, 2016 · In the first half of 2016, the San Francisco upstart was served with the subpoena, demanding the details of two of its users for an ongoing ...
  74. [74]
    Signal: you were the chosen one! :: MCH2022 :: pretalx
    Jul 23, 2022 · In his seminal work "The ecosystem is moving", Moxie Marlinspike laid out clearly the reasons why it's impossible to do what Matrix, or the ...
  75. [75]
    Moxie Marlinspike on Decentralization - マリウス
    Aug 10, 2022 · Moxie Marlinspike, founder and former CEO of Signal Messenger LLC, on the topic of decentralization and why centralized systems are supposedly the way to go.
  76. [76]
    'You cannot do mass surveillance privately, full stop': Signal boss ...
    Jun 19, 2024 · Meredith Whittaker says Signal will not comply with anti-encryption laws and would rather 'cease operations' if there is no other choice.Missing: ties critiques
  77. [77]
    Telegram CEO claims rival Signal has ties to US government
    May 14, 2024 · Telegram CEO Pavel Durov issued a scathing criticism of Signal, alleging the messaging service is not secure and has ties to US intelligence agencies.
  78. [78]
    Signal Revenue & Usage Statistics (2025) - Business of Apps
    Jan 22, 2025 · Signal, formed through a merger of RedPhone and TextSecure, is the flagship app of the Signal Foundation, a non-profit dedicated to open-source ...
  79. [79]
    Signal User Statistics: How Many People Use Signal? - Backlinko
    Jun 23, 2025 · Signal has 70-100 million monthly active users. Signal app downloads reached 193.8 million as of early June 2025. Signal has 50 full-time ...Missing: 2018 | Show results with:2018
  80. [80]
    Signal >> Blog
    At Open Whisper Systems, our goal is to make private communication simple. The foundation of our technology is Signal Protocol, a modern, open source, strong ...Signal Foundation · Facebook Messenger deploys... · Encrypted profiles · Fall 2023
  81. [81]
    Most Popular Messaging Apps (2025) - Exploding Topics
    Oct 14, 2025 · 44 million. Q4 2017. 187 million. 80 million. 60 million. 47 million. Q1 2018 ... bar chart showing the number of messaging app users. Here's a ...
  82. [82]
    Facebook Messenger deploys Signal Protocol for end-to-end ...
    Jul 8, 2016 · Facebook Messenger has started rolling out Secret Conversations, a feature that enables end-to-end encryption for conversations within Messenger.
  83. [83]
    [PDF] Messenger End-to-End Encryption Overview - Engineering at Meta
    Dec 6, 2023 · The Signal Protocol, developed by the Signal Foundation, is the basis for Messenger's end-to-end encryption. This end-to-end encryption protocol ...
  84. [84]
    How secure is Signal? Is it better than the alternatives? - Comparitech
    Mar 9, 2024 · Various security firms and security researchers have audited different components of the Signal app and protocol. ... In 2023, a team of security ...
  85. [85]
    Audit of Signal Protocol Finds it Secure + Trustworthy - Pindrop
    This audit is the first full-scale public investigation of the security of Signal, a protocol that many cryptographers and security experts have praised. The ...
  86. [86]
    How Signal Grew From Privacy App to Tech Powerhouse | TIME
    Sep 28, 2020 · Signal has become a tool for everyone from whistleblowers to Black Lives Matter protesters. As its profile grows, can the app maintain its ...
  87. [87]
    Signal is app of choice for Trump allies and opponents alike | Reuters
    Mar 25, 2025 · Signal, a text-and-voice app that is a little over a decade old, is seen as the gold standard for end-to-end encrypted communications, ...
  88. [88]
    Signal vs Matrix (Element): Which One is Better for Privacy?
    Oct 24, 2024 · One of the biggest differences between Signal and Matrix is the architecture of their systems—centralized vs. decentralized. Characteristic ...
  89. [89]
    Comparison to other platforms - Join Matrix!
    Matrix is decentralized, unlike most platforms, and offers encrypted messages. It's a middle ground between one-to-one and social platforms, and is more ...
  90. [90]
    Why does Signal require a phone number while it pretends ... - Quora
    Feb 22, 2021 · Signal, like many other apps, still uses phone numbers to identify people and requires one when you sign up, which is a privacy concern. There ...<|separator|>
  91. [91]
    Yes, Signal's phone number requirement is bad. But, given that, the ...
    This negligent design makes them vulnerable to coercion or even court orders if any judge realizes they actually -can- decrypt messages and dump metadata.
  92. [92]
    Signal Fails | It's Going Down
    Jun 3, 2019 · Primarily for security reasons, Signal has become the standard communication medium in anarchist circles over the last 4 years, eclipsing ...
  93. [93]
    Backup Restore on Android Fails silently · Issue #13612 - GitHub
    Jul 8, 2024 · I can set up my account, but no messages are restored. I initially tried this on GrapheneOS with the Signal APK from the official website. ...Missing: criticism | Show results with:criticism
  94. [94]
    Unable to restore account from backup : r/signal - Reddit
    Jun 28, 2025 · Your Signal PIN was never properly synced or saved. · Signal's "Registration Lock" timed out / expired. · Or a restore was done on an OS that ...I AM DEVASTATED, LOST ALL HISTORY, PROFILE, DOCS AND ...Issue with Secure Value Recovery via Signal PIN - RedditMore results from www.reddit.com
  95. [95]
    [PDF] When SIGNAL hits the Fan: On the Usability and Security of State-of ...
    Jul 18, 2016 · Our results show that the majority of users failed to correctly compare keys with their conversation partner for verification purposes due to.
  96. [96]
    Help us test payments in Signal
    Apr 6, 2021 · Signal Payments – a new feature that enables you to send and receive privacy focused payments as easily as sending or receiving a message.
  97. [97]
    How Signal is playing with fire | The Verge
    Jan 7, 2022 · Signal's introduction of anonymous cryptocurrency payments could give regulators an excuse to try eliminating end-to-end encryption ...
  98. [98]
    MobileCoin, which powers Signal's anonymous crypto payments ...
    Sep 13, 2023 · The feature has officially come out of the testing phase, allowing any user around the world to instantly send MobileCoin's native Mob token to ...
  99. [99]
    Reviewing the cryptography used by Signal - Hacker News
    Signals threat model is fundamentally flawed. If you distrust Signal infrastructure and need E2E to secure yourself then having a closed client from Google ...