PrivacyTools.io
Reviewed by Gabriel Bachmann
Signal logo

Signal

signal.org
4.4 (22)

Similar look and feel of WhatsApp and other commonly used messaging apps, makes switching easy. Signal requires your phone number as an personal identifier.

Threat level
Covered

A covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels

Screenshot of the Signal website
Share
Our take

The phone number requirement is the real friction, and there is no getting around it without a burner. Accept that and Signal is the easiest secure messenger to actually get your non-technical friends onto, which matters more than any feature, because the most private app is useless if nobody you know will install it. The desktop apps are good and the protocol is the one everyone else copies.

AGPL-3.0
Stars
29,575
+26 this week
Forks
6,933
875 watching
Last commit
4d ago
healthy
Latest release
v8.33.2
8d ago, 100+ total
Star history
Issues
96% closed
472
open
11,360
closed
+41 / -29
opened / closed, last 4 weeks
Opened vs closed, last 12 weeks
Commits, last 26 weeks
1,934 commits, active 26 of 26 weeks
358 contributors since Dec 2011
Languages
  • Kotlin 75.1%
  • Java 24.7%
  • Handlebars 0.1%
Updated daily from the GitHub API. Star tracking since Jun 10, 2026.
Website at a glance
signal.org
D score 35
Weak website security headers
Graded by Mozilla HTTP Observatory, tested 1d ago

Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.

Signal alternatives

Signal license, in plain English
AGPL-3.0
Strong copyleft · network

Free to use, even commercially. Changes must be published under the same license, and running a modified version as a network service counts as distributing it.

Permits

  • Commercial use
  • Modification
  • Distribution
  • Patent use
  • Private use

Requires

  • Disclose source
  • Network use is distribution
  • Same license
  • State changes
  • License and copyright notice

Does not provide

  • Liability cover
  • Warranty

Why it matters: The network clause is the point. Anyone who runs a modified version as a hosted service has to publish those changes, so the code handling your data stays inspectable. This is why privacy-first projects reach for AGPL.

Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.