Signal introduces encrypted local backups for iOS and desktop

Signal has implemented an encrypted local backup system for iOS and desktop, allowing users to transfer message history between Android and iOS devices. The new feature was released with version 8.30 of Signal for iOS, completing an update cycle that began in September 2025.

Quick Answer

What changes with Signal's new backups?

  • Encrypted local backups on iOS and desktop
  • Transfer of history between Android and iOS
  • Optimized storage with reduced space
  • Advanced protection with recovery key and TEE
  • Paid option for extended media backups

The new feature is based on Signal Secure Backups, an optional end-to-end encrypted backup service introduced in September 2025. Developers have been working on improvements for a year, based on user feedback.

Local and cloud backups

Signal Desktop and Signal for iOS can now create backups directly on devices. The Android version has been rearchitected to use the same format. The new structure organizes media in a separate folder, reducing space occupied by duplicates and facilitating periodic synchronization.

The cloud backup service offers free storage for text messages and the last 45 days of media. Users can opt for a paid plan to save up to 100GB of multimedia content. Connected devices can recover missing files directly from the main device via encrypted sharing.

Advanced backup protection

Cloud backups are protected by a user recovery key and a second key that rotates daily, stored in a trusted execution environment (TEE). This secondary key cannot decrypt a backup alone, but it provides an additional layer of security.

Local backups can be stored on any external drive or service, but they cannot benefit from TEE protection. Their recovery key decrypts all past backups, and users are warned not to share it with anyone.

Management of ephemeral messages

Ephemeral messages scheduled to disappear within 24 hours are excluded from both types of backups. During backup restoration, expired messages are automatically skipped, but Signal recommends setting shorter expiration timers for ephemeral messages in local backups.

iPhone-to-iPhone transfer

The iOS update also includes an improvement in iPhone-to-iPhone transfer via a locally encrypted Wi-Fi Aware connection. This feature offers an additional option for secure data management between Apple devices.

Signal concluded that these improvements represent the first phase of the backup project, with further updates already in development. Users can now better manage their data, choosing between different encrypted backup options to keep conversations secure.

Implications for business security

These innovations raise relevant questions for cyber insurance and incident response. The ability to transfer encrypted backups across different platforms offers companies an additional option for business continuity in case of device compromise.

Compliance considerations

The new feature is particularly relevant for companies that need to comply with the NIS2 Directive and the DORA Regulation. The ability to maintain encrypted backups locally or in the cloud offers flexible options for Data Loss Prevention and protection of sensitive data.

For more details on Managed Security Operations Center and Managed Detection and Response services, consult our guide to SOC as a Service. To explore legal implications, visit the section dedicated to NIS2 compliance.

Signal has published an official announcement on its blog, providing further technical details and user instructions. For a complete overview of identity access management solutions, consult our section dedicated to digital identity management.

Impact on the secure communications market

The introduction of encrypted backups on iOS and desktop represents a turning point for Signal in the secure communications market. According to data from Help Net Security, this feature positions Signal as one of the few messaging services capable of offering cross-platform transfers with end-to-end encryption. The ability to maintain conversation history between Android and iOS without compromising security is a significant competitive advantage over competitors like Telegram and WhatsApp, which offer less robust backup options.

Evolution of storage strategies

Signal's new backup architecture introduces an innovative approach to storage management. Separating media into a dedicated folder reduces backup space by 70% compared to the previous Android solution. This improvement is particularly relevant for enterprise users managing large volumes of multimedia data, offering a more efficient option than traditional Data Loss Prevention (DLP) systems.

Challenges for business adoption

Despite the improvements, business adoption of this feature may face obstacles. The need to manage recovery keys and understand the differences between local and cloud backups requires a learning curve. For organizations that must comply with the NIS2 Directive, it may be necessary to invest in specific employee training or evaluate integration with Managed Security Operations Center (SOC as a Service) solutions for optimized management.

Implications for risk management

The ability to transfer encrypted backups between different devices offers new opportunities for business risk management. In case of device compromise, organizations can quickly restore encrypted conversations on a new device, reducing breach remediation times. However, this approach requires careful planning to avoid violations of DORA compliance, especially for financial institutions handling sensitive data.

Future prospects for mobile security

Signal's announcement comes at a time of growing attention to mobile security. According to Gartner data, the global market for Managed Detection and Response (MDR) solutions is expected to grow by 20% annually until 2028. Signal's new backup features could integrate MDR services, offering an additional layer of protection for business communications. To explore the synergies between these technologies, consult our guide to MDR services.

Tax considerations for businesses

The adoption of paid backups for extended multimedia content raises tax questions for companies. In Italy, costs associated with these features might be deductible as digital asset management expenses, but it is advisable to consult a crypto accountant to evaluate the specific implications of crypto taxation in Italy. For more details, visit our section dedicated to crypto taxation.

Integration with business continuity solutions

Signal's new backup features could integrate business continuity strategies for organizations. The ability to quickly restore encrypted conversations on different devices offers an additional option for protection against operational disruptions. However, it is essential to evaluate integration with disaster recovery as a service (DRaaS) solutions to ensure comprehensive risk management. To explore DRaaS solutions, consult our guide to DRaaS services.

Future prospects for communication security

Signal has announced that this is only the first phase of the backup project, with further improvements in development. Among possible future evolutions, integration with zero trust architecture solutions is expected for even more robust protection of business communications. To stay updated on these innovations, consult our section dedicated to zero trust architecture.

Frequently Asked Questions

How much does the paid plan for extended media backups cost?

The paid plan offers up to 100GB of storage for multimedia content, but the specific cost has not yet been made public. It is advisable to consult Signal's official website for further details.

Are local backups as secure as cloud backups?

Local backups offer a high level of security thanks to end-to-end encryption, but they do not benefit from the additional protection of the Trusted Execution Environment (TEE) available for cloud backups.

How can I transfer my backups from Android to iOS?

The update to version 8.30 of Signal for iOS allows you to easily transfer backups between Android and iOS devices using the new encrypted backup feature.

Editorial Note and Disclaimer

The guides and content published on GoYou are the result of independent research and analysis activities, for informational, educational, and in-depth purposes.

GoYou does not constitute a journalistic publication or an editorial product pursuant to Law No. 62/2001 and does not engage in real-time information activities.

The GoYou project does not provide professional, technical, legal, or financial advice and disclaims any liability for the improper use of the information published.

In the Crypto sector, every investment involves risks: readers are invited to always inform themselves independently before making any decision.