More security with Messenger: Use Signal with PIN and registration lock

More security with Messenger
Use Signal with PIN and registration lock

08/16/2022, 7:46 pm

Signal offers many features that greatly increase the level of security for users. But you have to know it and sometimes turn it on in Messenger.

For reasons of convenience and security, it makes sense to activate the so-called PIN for Messenger Signal. This number can only be used to restore contacts and account settings if your device is lost or changed.

Above all, the PIN is also the basis of the registration lock, which prevents strangers from registering with Signal with their own phone number. Signal generally advises users to turn on the PIN and registration lock.

Attack on signal service providers

The messaging service is currently referring to these security features because the service provider that checks phone numbers for Signal was recently attacked. 1,900 Signal registered numbers have been detected, including SMS verification codes.

The attackers could not access your chats, profile information or contact lists because this data is only stored locally on the device or can only be recovered using a PIN (Profile and Contacts).

At most one account has been hacked

However, they were able to re-register phone numbers with the linked SMS verification numbers on other devices and then receive and send messages via the respective account. However, at most one of the 1900 numbers has been re-recorded. Even this alleged account takeover could have been prevented by blocking an active registration.

To be on the safe side, Signal has logged out all 1900 affected accounts from all devices and asked users to sign up again. Those affected must have also received an SMS from Signal.

Whatsapp also protects against third party logging

Through what’s called two-step verification, Whatsapp offers similar PIN protection against unauthorized registration of an individual’s account. However, the PIN can be reset by email if you have forgotten it.

With Signal, the PIN cannot be reset or retrieved. If you forget your PIN and your registration is blocked, your account will be blocked for seven days.