Signal Reviews One Year of Secure Backups Launch
Signal Backups One Year Later Adds Cross-Platform and Local Archiving
Signal reviews the launch of Secure Backups one year ago and lists the new features added since: local backups, cross-platform support, storage optimization, and attachment retrieval for linked devices.
Secure Backups remains optional. It archives end-to-end encryption, with users holding a 64-bit recovery key, and the server claims it cannot decrypt. The free tier retains all text and media for nearly 45 days; the paid tier costs about $1.99 per month and can back up up to approximately 100 GB of media. Self-destructing messages and messages that disappear within 24 hours are not included in the backup. Local backups first cover desktop and iOS, with Android focusing on storing encrypted copies in user-selected locations. Cross-platform backups can be created and restored between Android, iOS, Linux, macOS, and Windows, allowing users to switch systems without starting from scratch. Attachment retrieval allows newly linked devices to securely request missing files from the main device when they roll past the 45-day window. Recovery must be done using the same number during the initial registration process and cannot be merged with already installed clients. Device-to-device transfer is still limited to the same system and requires both devices to be present.
The paid tier covers the storage cost of encrypted attachments through subscriptions, while the free tier controls billing with a 45-day limit. The local path keeps users who distrust the cloud reliant on folders and a 30-character password. Phishing attempts disguised as customer service claiming backups will be permanently lost are expected to appear in May 2026, aiming to steal recovery keys. Registration locks can prevent others from binding a number to a new device, but without the key, the cloud archive remains inaccessible. Community desktop local backups still have instances of verification failures, indicating confusion when new options run parallel to the old key system.
A year ago, Android testing led the way, promising subsequent support for iOS and desktop with user-selected storage locations. This marks the roadmap's transition into a product that allows device switching. The main device remains the source of truth for attachments, while linked devices serve as caches. Storage optimization did not provide compression ratio figures in the announcement.
Market-wise, this is the first time a privacy application has explicitly written cloud storage for attachments into a monthly fee. Buyers are users who fear losing chat records but do not want to give up encryption; sellers use $1.99 to cover object storage. Funds from subscriptions go towards bandwidth and disk space. Beneficiaries are heavy users who frequently switch devices or systems; those under pressure are users who rely solely on device-to-device transfers, media over 45 days, and attackers who harvest keys through phishing. The feature launch reduces churn from "Signal cannot switch devices" and turns key management into a new single point of failure.
Supplementary data: The help center's comparison table states that only Secure Backups can save users when they lose their phones; local files cannot be restored directly from Android to iPhone. The main device must complete recovery before linking to desktop and tablet.
Source: Public Information
ABAB AI Insight
Signal has transformed the original doctrine of "no backups" into "backups are possible but not given in plaintext to the user" over the course of a year. The 64-bit key is the theological core of the product: the company cannot be God, and users must act as cryptographic administrators. The $1.99 fee is not a profit center but an acknowledgment that media is two orders of magnitude more expensive than text. The 45-day free window keeps light users on the free tier while pushing photo album users towards the paid tier. Cross-platform support is a counter to Apple and Google's account systems: chat records can now legally leave the ecosystem without going through the other cloud. Retrieval acknowledges that linked devices are not complete copies, and the main device remains the vault. Phishing attempts immediately follow, indicating that any recoverable ciphertext will become a new interface for social engineering.
The capital path is extremely lean: a non-profit organization uses small subscriptions to subsidize object storage, avoiding handing backups over to Google or Apple for convenience. Whoever holds the recovery key has a second life for the account. Corporate chats are unlikely to migrate en masse because personal device-switching friction is what retains users. Compared to WhatsApp's Google Cloud backup, Signal extracts the key from the platform account, at the cost of users having to write it down on paper.
Analogous objects are emergency kits for password managers and Bitcoin mnemonic phrases. The difference is that chat attachments are larger, hence the appearance of a monthly fee. The industry phase is that end-to-end applications are moving from "transmission encryption" to "lifecycle encryption." Whoever can maintain history during device switching can fend off the erosion of system-level default chats.
Structural judgment belongs to technical substitution. The mechanism is: platform backups trade identity for convenience, while self-managed backups trade keys for migration rights. Monthly fees turn encrypted attachments from ideals into accountable commodities. Once a key is stolen, archiving is more dangerous than having no backup because it is complete, centralized, and downloadable.
ABAB News · Cognitive Laws
Recoverable ciphertext can also become a new phishing interface.
Cross-platform backups are about reclaiming migration rights from system accounts.
Free 45-day media serves as a gateway to push photo album users towards monthly fees.