Messages in Signal Desktop database ARE NOT ENCRYPTED AT REST

[kyanha]

Every conversation in Signal Desktop is essentially plain-text exported. You have at-rest encryption for a mobile device, but not for your Desktop product (which doesn't even have the security model of mobile phones to rely on)?

How do I break the association between my Signal Desktop installation and the Signal servers? I no longer have confidence that malware has not stolen the database and keys to receive my messages through the Signal central service. (Yes. I have more faith in my phone's OS than my desktop OS.)

[liliakai]

You can unlink a device from your phone by tapping it under Settings > Devices. In the future, for support questions, please email [email protected].

[cirosantilli]

Related forum discussions:

• https://whispersystems.discoursehosting.net/t/improve-security-of-desktop-apps-encryption-of-data-at-rest/26494
• https://community.signalusers.org/t/why-cant-we-lock-the-desktop-app-with-a-password/1383