Signal's new on-device backups restore across five platforms under one recovery key
Signal finished rolling out on-device encrypted backups for iOS and desktop in iOS version 8.30, restorable on Android, iOS, Linux, macOS and Windows. Teams that require Signal can now keep message history on their own drives, protected by the recovery key alone.
The Watch · Security desk
What happened
- Disappearing messages set to vanish within 24 hours are left out of both hosted and on-device backups.
- The free hosted tier keeps text plus the last 45 days of media, and a monthly fee raises media storage to 100GB.
- The iOS release also reworks iPhone-to-iPhone transfer to run over a local end-to-end encrypted Wi-Fi Aware link.
Why it matters
- Who's exposed exposure Anyone who obtains a user's recovery key and any copy of that user's local archive, including a NAS mirror, can decrypt every snapshot in it, old ones included.
- Who has to decide decision Teams deciding where Signal history lives now weigh hosted backups with a daily-rotating TEE key against local archives they control that have no forward secrecy.
- What it limits constraint A disappearing timer longer than 24 hours no longer guarantees the text is gone from every copy, because Signal skips expired messages when a backup is restored.
- What's now possible capability A team on mixed Android, iPhone and desktop hardware can move users between platforms without sending their history through Signal's hosted service.
Next story · Product · 2d ago
WhatsApp matches FaceTime by letting people without accounts join calls from a browserConfirmed12 publishers
The local archive changes what an attacker has to steal. Hosted backups belong to Signal Secure Backups, the service Signal introduced in September 2025 [7], and they need two keys. One is the user's recovery key. The other rotates daily inside a Trusted Execution Environment. It cannot decrypt a backup by itself, and it gives hosted copies forward secrecy [12]. Signal said TEEs are "currently the best way to protect this supplemental key." [13]
On-device backups can be written to any drive or service, so they cannot use the TEE [3]. Their recovery key decrypts all past backups, and Signal warns users never to share it [3]. A thief who has one user's key and one copy of that user's archive can read every snapshot in that copy, however old [3].
Signal expects those copies to spread. Explaining the rebuilt format, the company said "backup media gets stored in a separate folder so it's easier to periodically sync, and duplicate files are only stored once, which also helps save space if you decide to mirror an on-device backup to an external hard drive or NAS server on your home network." [9] Each mirror opens with the same recovery key [3].
Disappearing messages set to vanish within 24 hours stay out of both backup types [4]. Messages on longer timers go in and are filtered later. Signal wrote: "Expired disappearing messages in an on-device backup are automatically skipped during the transfer process when you restore that backup, but you may want to take additional steps such as setting a shorter expiration timer for disappearing messages in on-device backups." [6] By that description, a message on a timer longer than a day can sit in an archive after it has expired on the phone [6].
For a team that requires Signal on mixed hardware, the pieces for moving history now exist. A backup restores on Android, iOS, Linux, macOS or Windows [5]. Android now writes the same format as iOS and desktop [2]. The iOS release adds an iPhone-to-iPhone transfer over a local end-to-end encrypted Wi-Fi Aware link [14]. The hosted free tier keeps only the last 45 days of media [11]. A newly linked laptop that scrolls past that window can, Signal said, "securely request a copy of any missing files directly from your primary device as an end-to-end encrypted attachment." [8] Help Net Security's report does not mention administrative controls over where archives are stored or who holds the keys.
Signal said the release "wraps up the first phase of the backups project, but we're hard at work on several non-backup improvements too." [10]
What to watch
- Whether a later phase of Signal's backups project gives on-device archives key rotation or forward secrecy comparable to the hosted TEE key.
- Whether Signal changes on-device backups to drop expired disappearing messages when the backup is written, instead of skipping them at restore.
- Any Signal controls aimed at organisations for where backup archives are stored and who holds recovery keys.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence64
- Adoption
- Not scored
- Hype gap+5
- Incentives30
- Confidence72
Perspective Coverage
3 publishers- Builder
- Builder 32%
- Operator
- Operator 63%
- Investor
- Investor 5%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Signal finished rolling out a set of backup updates with Signal for iOS version 8.30, including on-device backups for iOS and desktop.
- [2]
Signal Desktop and Signal for iOS can make on-device backups for the first time; the Android version was rebuilt to use the same format.
- [3]
On-device backups can be stored on any drive or service, so they cannot use the TEE; their recovery key decrypts all past backups, and Signal warns users never to share it with anyone.
- [4]
Disappearing messages set to vanish within 24 hours are excluded from both hosted and on-device backups.
- [5]
Signal backups can be restored on Android, iOS, Linux, macOS and Windows, so users switching between Android and iPhone can take their message history with them.
- [6]
"Expired disappearing messages in an on-device backup are automatically skipped during the transfer process when you restore that backup, but you may want to take additional steps such as setting a shorter expiration timer for disappearing messages in on-device backups," Signal noted.
- [7]
The changes build on Signal Secure Backups, an optional end-to-end encrypted backup service introduced in September 2025.
- [8]
"For instance, if you open a message thread on a newly linked laptop and scroll beyond the 45-day limit, Signal Desktop can now securely request a copy of any missing files directly from your primary device as an end-to-end encrypted attachment."
- [9]
"Now backup media gets stored in a separate folder so it's easier to periodically sync, and duplicate files are only stored once, which also helps save space if you decide to mirror an on-device backup to an external hard drive or NAS server on your home network," Signal said.
- [10]
"This wraps up the first phase of the backups project, but we're hard at work on several non-backup improvements too," Signal concluded.
- [11]
The hosted service backs up text messages for free, along with the last 45 days of media; for a monthly fee, users can back up to 100GB of media.
- [12]
Hosted backups are protected by the user's recovery key and by a second key that rotates daily and is kept in a Trusted Execution Environment; the second key cannot decrypt a backup on its own and adds forward secrecy.
- [13]
Signal said TEEs are "currently the best way to protect this supplemental key."
- [14]
The iOS update includes a reworked iPhone-to-iPhone transfer over a local end-to-end encrypted Wi-Fi Aware link.
Sources
2 independent publishers whose own reporting we read for this story.
- bleepingcomputer.comSignal adds encypted local backup support to iOS, desktop apps
1 article · September 29, 2026
- helpnetsecurity.comSignal brings encrypted local backups to iOS and desktop, adds cross-platform restore
1 article · September 30, 2026
- scworld.comSignal completes rollout of secure chat backups across all platforms
1 article · September 30, 2026
Topics and entities
Topics
- End-to-End Encryption
- Encrypted backups
- Secure and Encrypted Messaging
- Trusted execution environments
Entities
- Trusted execution environment
- Signal
- Signal Secure Backups