Tag: encryption

Mac Time Machine Backup: My Complete Setup and Restore Guide

Set up a reliable Mac Time Machine backup in about ten minutes: connect a drive, pick the right destination, and restore any file or your entire system.

I lost six months of photos once because I trusted a single external drive that quietly died. A Mac Time Machine backup would have saved every one of them, and it takes about ten minutes to set up. This is the guide I wish I’d read first, and it pairs well with my steps for setting up a new Mac.

The crux is that Time Machine only protects you if it’s actually running on a schedule, not just plugged in once and forgotten. I check mine every few months, and that habit turned a failed logic board last year into a repair bill instead of a lost photo library.

Quick Answer

Time Machine is macOS’s built-in backup tool. Connect an external drive or network volume, open System Settings, choose General, then Time Machine, add the disk, and toggle it on. macOS then backs up hourly, daily, and weekly automatically, letting you restore any file or your entire system if a drive fails or you need an earlier version.

What Is Time Machine and How Does It Work?

Time Machine is the backup app Apple builds into every Mac. Once you point it at a drive, it copies changed files every hour, keeps daily backups for the past month, and weekly backups for everything older. You never click a button again after setup.

What makes it different from dragging files to a drive is versioning. I can open the Time Machine interface and scroll back to see how a document looked last Tuesday, not just the most recent copy. That saved me once when I overwrote a spreadsheet formula by accident. Apple documents the full mechanics in its own Time Machine support guide.

Time Machine works silently in the background, keeping layered snapshots instead of one flat copy of your files.

What Do You Need Before You Start?

A Dedicated Backup Drive

You need a drive used for nothing else. I use a 2TB external SSD dedicated entirely to backups, since Time Machine erases and formats whatever disk you point it at.

Enough Free Space

Apple recommends a drive at least as large as your Mac’s internal storage, ideally larger, since Time Machine keeps old snapshots until space runs low. My rule of thumb is two to three times my used storage.

A backup drive with too little room fills up fast and starts deleting your oldest safety net first.

How Do You Set Up Time Machine Backup on Mac?

Step 1: Connect Your Backup Drive

Plug the external drive into your Mac. If it isn’t already formatted for Mac, macOS offers to format it as APFS or Mac OS Extended, which erases anything currently on it.

Step 2: Open Time Machine Settings

Click the Apple menu, choose System Settings, then General, then Time Machine. On older macOS versions this lives under System Preferences instead.

Step 3: Add Your Backup Disk

Click Add Backup Disk, select your connected drive, and confirm. macOS asks if you want to encrypt the backup, which I recommend for any drive that leaves your house — see encrypting backups on any device for why.

Step 4: Let the First Backup Run

The initial backup can take hours since it copies everything. Mine took roughly three hours for 400GB over USB-C the first time.

Pro tip: Run the first backup overnight. It uses real CPU and drive bandwidth, so your Mac feels sluggish if you edit video or export large files at the same time.

Once the initial backup finishes, every backup after that only copies what changed, so it takes minutes instead of hours.

Which Backup Destination Should You Choose?

The right destination depends on how you use your Mac.

Destination Best For Downside
External USB/USB-C drive Fastest backups, lowest cost per gigabyte Only backs up while physically connected
Network-attached storage (NAS) Automatic backups without plugging anything in Slower over Wi-Fi, needs a compatible NAS
Time Capsule (used/legacy) Simple wireless setup, no NAS configuration Apple discontinued it, so used units carry no warranty
iCloud (not Time Machine) Backing up specific folders like Desktop and Documents Doesn’t replace full-system version history

An external drive is the simplest start; network storage trades some speed for backups that happen without you remembering to plug anything in.

How Do You Restore Files From a Time Machine Backup?

Restoring a Single File

Open Time Machine from the menu bar icon, navigate to the folder where the file used to live, and use the timeline on the screen’s edge to scroll back to a date before it went missing. Select it and click Restore.

Restoring an Entire Mac

If you’re setting up a replacement Mac, boot into macOS Recovery by holding the power button at startup, choose Restore from Time Machine Backup, and select your external drive.

Troubleshooting tip: If your backup disk doesn’t appear during recovery, check the cable and try a different USB port before assuming the backup is corrupted. A loose USB-C cable has masqueraded as a failed backup for me twice.

Restoring one file takes under a minute, while restoring a whole Mac can take an hour or more depending on the data involved.

Running Windows machines too? The built-in options differ there — see automatic file backups on Windows 11.

Common Mistakes to Avoid

  • Using the same drive for backups and everyday files. Keep it dedicated to backups only, or it fills faster and mixes working files with your safety net.
  • Never checking that backups are running. Open Time Machine settings and confirm the “Latest Backup” timestamp is recent, not months old.
  • Skipping encryption on a portable drive. If lost or stolen, an unencrypted backup hands over every file on your Mac.
  • Assuming it backs up while disconnected. It only runs while the destination is reachable, so a drive left in a drawer isn’t protecting you.
  • Relying on only one backup drive long-term. Drives fail. I rotate a second drive to a different room every few weeks for exactly this reason.

Frequently Asked Questions

How often does Time Machine back up my Mac?

It backs up every hour automatically as long as the drive is connected, with no settings to touch after initial setup.

Can I use the same external drive for Time Machine and regular file storage?

Technically yes, but I don’t recommend it. Sharing a drive for both let Time Machine’s snapshots eat into space I needed for video files.

What happens when my Time Machine drive gets full?

macOS deletes the oldest backups to make room. My earliest snapshots from over a year ago disappeared once my 2TB drive filled up.

Does Time Machine back up to iCloud?

No, it requires a physical external drive or a NAS. iCloud Drive backs up specific folders separately and isn’t a replacement.

Can I use Time Machine on multiple Macs with one drive?

Yes. I run mine and my partner’s laptop on a single 4TB drive with room to spare.

Conclusion

A Mac Time Machine backup takes about ten minutes to set up and removes the single biggest risk to every photo and document you own. Plug in a drive today, turn it on in System Settings, and check the timestamp once a month.

Disappearing Messages in Signal and WhatsApp: How to Set Up Auto-Delete Timers

Set up disappearing messages in WhatsApp and Signal: pick the right timer length, avoid common mistakes, and know what it won’t delete.

I used to leave months of old chats sitting in Signal and WhatsApp, until a friend asked why I still had a screenshot she sent me two years ago. Disappearing messages fix that by deleting messages automatically after a set time, so you stop building a permanent record of every conversation.

The crux: disappearing messages only protect you going forward from the moment you turn the setting on — they don’t touch anything already sent, so timing matters as much as the setting itself.

Quick Answer

In WhatsApp, open a chat, tap the contact name, then Disappearing Messages, and pick a duration. In Signal, tap the chat name, then Disappearing Messages, and choose a timer. Both apps delete messages for everyone in the chat once the timer expires, but only for messages sent after you enable it.

Why Do Disappearing Messages Matter?

Chat apps store years of messages by default, including photos, addresses, and private details you forgot you shared. A disappearing timer limits how long that data sits on both devices, which shrinks what’s exposed if a phone is lost, stolen, or backed up somewhere insecure.

Disappearing messages reduce your long-term data footprint without changing how you chat day to day.

How Do I Turn On Disappearing Messages in WhatsApp?

Step 1: Open the Chat

Open WhatsApp and tap into the individual or group chat where you want the timer active.

Step 2: Open Disappearing Messages

Tap the contact or group name at the top of the screen to open the chat info screen, then tap Disappearing Messages.

Step 3: Pick a Duration

Choose 24 hours, 7 days, or 90 days. I keep 7 days on most one-on-one chats and 24 hours on group chats that get noisy fast, since that’s the window where I actually go back and reread something.

Step 4: Set It as Default for New Chats (Optional)

Go to Settings, then Privacy, then Default Message Timer, to apply a timer automatically to every new chat you start. This doesn’t change chats you already have open.

WhatsApp gives you three fixed timer lengths and a way to make new chats disappear by default.

How Do I Turn On Disappearing Messages in Signal?

Step 1: Open the Conversation

Open Signal and go to the chat you want to change.

Step 2: Access the Timer Setting

Tap the chat name at the top, then tap Disappearing Messages.

Step 3: Choose a Custom Time

Signal lets you pick from preset options like 30 seconds, 5 minutes, 1 hour, 1 day, or 1 week, or tap the custom option to set an exact duration down to the second. I use 4 weeks for personal chats and 1 day for anything work-related that only matters for a single day.

Step 4: Confirm the Timer Applied

Signal posts a system message in the chat confirming the new timer, visible to everyone in the conversation, so both sides know it changed.

Signal’s custom timer is more granular than WhatsApp’s, down to seconds instead of fixed day counts.

Pro Tip: Set the Timer Before You Send Anything Sensitive

Turn the timer on before you share a password, ID photo, or address, not after. Enabling it retroactively does nothing for messages already sent — those stay in the chat until you delete them manually.

Troubleshooting: Messages Aren’t Disappearing on Schedule

If a message doesn’t disappear on time, check that both apps are updated to the latest version — an outdated app can delay the deletion sync. Also confirm the phone wasn’t offline past the timer window, since both apps need to run briefly in the background to process the deletion.

What’s the Difference Between WhatsApp and Signal’s Disappearing Timers?

Feature WhatsApp Signal
Shortest timer 24 hours 30 seconds
Longest timer 90 days 4 weeks
Custom duration No Yes, down to the second
Default timer for new chats Yes, in Settings No, set per chat
System message on change Yes Yes

Signal offers finer control over timer length, while WhatsApp offers a global default for new chats.

Does Disappearing Messages Protect Media and Backups?

No, not fully. If someone screenshots a message before it disappears, or if a chat backup was made before the timer deleted the message, that copy can survive outside the app entirely. On WhatsApp, disabled or older iCloud and Google Drive backups made before a message expired can still contain it.

Disappearing timers only control the live chat, not screenshots or prior backups.

Common Mistakes to Avoid

1. Assuming It Deletes Old Messages Too

Turning the timer on doesn’t retroactively remove anything sent earlier. Fix: manually delete old sensitive messages if you need them gone immediately.

2. Forgetting It’s a Per-Chat Setting in Signal

Signal doesn’t have one master switch for every conversation. Fix: set a default timer under Signal’s privacy settings so new chats inherit it automatically.

3. Picking a Timer Too Short to Actually Reread Messages

A 30-second Signal timer on a busy group chat means you’ll miss half the conversation. Fix: match the timer to how often you actually revisit that chat.

4. Not Telling the Other Person

Both apps post a notice when you change the timer, but people scroll past it. Fix: mention it directly if the timing matters for something time-sensitive like a shared code or address.

5. Relying on It as Your Only Privacy Measure

Disappearing messages don’t stop screenshots or a synced backup elsewhere. Fix: pair it with WhatsApp’s other privacy settings for a fuller approach.

Frequently Asked Questions

Does turning on disappearing messages delete messages for the other person too?

Yes, once the timer runs out, the message disappears on both devices in the chat. I tested this with a friend on a 5-minute Signal timer, and her copy vanished within a few seconds of mine.

Can I turn off disappearing messages after enabling them?

Yes, go back to the same Disappearing Messages menu and select Off. Messages already sent under the timer still expire on schedule; only new messages stop disappearing.

Do disappearing messages work in group chats?

Yes, in both apps, though in WhatsApp only group admins can change the timer setting for everyone in the group.

Will disappearing messages remove media I saved to my camera roll?

No. If you or the other person saved a photo or video outside the chat before it expired, that saved copy stays on the device regardless of the timer.

Is there a way to see how much time is left before a message disappears?

Signal shows a small countdown icon next to sent messages once the timer starts running. WhatsApp doesn’t show a per-message countdown, only the overall timer setting in the chat info screen.

Conclusion

Disappearing messages won’t fix a habit of sharing sensitive details, but they cap how long that data sits exposed in your chat history. Turn on a timer in the Signal app or WhatsApp chat you use most today, before the next sensitive message goes out. If you’re deciding which app to lean on for private conversations overall, see how WhatsApp, Signal, and Telegram compare on privacy, and check the EFF’s guidance on secure messaging for broader practices.

What Is End-to-End Encryption and How Does It Actually Protect You

What is end-to-end encryption? See how the keys work, which apps use it by default, and what it still doesn’t protect.

I used to nod along whenever an app told me “messages are now protected with end-to-end encryption” without actually knowing what that badge meant. I just trusted the lock icon and moved on.

End-to-end encryption means only you and the person you’re talking to hold the keys that unlock the message — not the app maker, not your carrier, and not anyone who intercepts it along the way. Once you see how that works, you can tell a genuinely private app from one that just says it is.

Quick Answer

End-to-end encryption scrambles your message on your device and only unscrambles it on the recipient’s device, using keys that never leave those two devices. Not even the app maker, your ISP, or a hacker on the network can read the content in between, only sender and receiver hold the keys.

What Is End-to-End Encryption, Exactly?

End-to-end encryption, often shortened to E2EE, scrambles data so only the sender and intended recipient can read it. Everyone in between — the app’s servers, your internet provider, and anyone snooping on the network — sees nothing but noise.

The Two Keys Behind Every Message

Every device in an E2EE conversation generates a pair of keys: a public key it shares openly and a private key it never shares. Your phone uses the recipient’s public key to lock a message, and only their private key can unlock it.

Why “Encrypted in Transit” Isn’t the Same Thing

A lot of services encrypt data only while it travels to their server, then decrypt it to store or scan it. That stops eavesdroppers on the wire, but the company itself can still read your messages. E2EE closes that gap by keeping the content unreadable even on the company’s own servers.

End-to-end encryption uses a public-private key pair so that only the two people talking can ever unlock the conversation, unlike server-side encryption that a company can still unlock on its own.

How Does End-to-End Encryption Actually Work?

You don’t have to handle any key generation or math yourself — the app does it silently the moment you install it.

Step 1: Your App Generates a Key Pair

When you first set up an app like Signal, it creates your key pair on your device and registers the public key with the app’s server.

Step 2: The Sender Locks the Message

When I send a message, my app fetches the recipient’s public key and uses it to encrypt the text before it ever leaves my phone. What travels across the internet is unreadable ciphertext, not plain text. Signal publishes the exact cryptographic steps behind this in its public protocol documentation, which is worth a skim if you want the math behind the magic.

Step 3: Only the Recipient’s Device Can Unlock It

The recipient’s app uses their private key, stored only on their device, to decrypt the message the instant it arrives. I’ve seen this confirmed on Signal’s safety-number verification screen, where two devices match keys before any chat history is exposed.

Not every app you use every day handles this the same way, and the differences matter more than the marketing suggests:

App End-to-End Encrypted by Default What’s Exposed to the Provider
Signal Yes, always Almost no metadata
WhatsApp Yes, always Contact list, group metadata
iMessage (blue bubbles) Yes, device to device iCloud backups unless Advanced Data Protection is on
Telegram (regular chats) No, cloud chats only Full message content on Telegram’s servers
Standard SMS/text No Full content visible to carriers

Encryption is applied on your device before sending and removed only on the recipient’s device, and popular apps differ sharply in whether that protection is on by default.

Where Does End-to-End Encryption Show Up in Apps You Already Use?

I set up Signal for private messaging specifically because it turns E2EE on for every chat, call, and group with no toggle to find. If you’re weighing your options, I laid out the real differences in WhatsApp vs Signal vs Telegram. Most reputable password managers use the same idea for your vault, so even the company storing your data can’t read your saved passwords.

End-to-end encryption isn’t limited to chat apps — it also protects password vaults and select cloud backups the same way.

What Doesn’t End-to-End Encryption Protect You From?

E2EE is powerful, but I’ve seen people treat it as a blanket shield when it only covers the message content itself.

Metadata Still Leaks

Who you messaged, when, and how often is usually still visible to the provider, even when the content isn’t. That metadata alone can reveal a lot about your habits.

Endpoint Security Is Still Your Job

If someone has physical access to your unlocked phone, or your device has spyware on it, encryption doesn’t matter because the message is already readable on-screen. Pair E2EE with a lock screen PIN and two-factor authentication on your key accounts for real protection.

Pro tip: Check for a “safety number” or “verify contact” option and compare it with the other person over a separate channel — it confirms nobody intercepted your key exchange.

Troubleshooting tip: If a contact’s safety number suddenly changes without a new phone or reinstall, treat it as a red flag and re-verify before trusting the chat.

End-to-end encryption protects message content, not metadata or a compromised device, so pair it with device security habits.

Common Mistakes to Avoid

Assuming Every “Secure” App Is End-to-End Encrypted

Fix: check the app’s documentation for the specific term “end-to-end encrypted,” not just “secure,” since that word gets used loosely in marketing.

Leaving Cloud Backups Unencrypted

Fix: turn on advanced backup encryption, such as Signal’s backup passphrase or iCloud’s Advanced Data Protection, since a plain backup can undo E2EE’s protection.

Ignoring Group Chat Settings

Fix: confirm a group chat shows the same end-to-end indicator as a one-on-one chat, since some apps handle group encryption differently.

Never Verifying Safety Numbers

Fix: verify at least your most sensitive contacts once, especially before sharing financial details over chat.

Frequently Asked Questions

Can the police or government read end-to-end encrypted messages?
Not directly from the content, since the provider genuinely can’t decrypt it. Investigators instead request metadata or pull data from an unlocked device, which is why device security still matters.

Does end-to-end encryption slow down my messages?
No, encryption and decryption happen almost instantly on modern phones. I’ve never noticed a delay in Signal or WhatsApp I could attribute to it.

Is email end-to-end encrypted by default?
Regular Gmail or Outlook email is encrypted in transit only, not end-to-end. You’d need a service like ProtonMail or a PGP setup for true end-to-end protection.

Can I add end-to-end encryption to a video call?
Yes, Signal and WhatsApp both support end-to-end encrypted video and voice calls. I use Signal calls for that reason whenever the topic is sensitive.

What happens to encryption if I lose my phone?
Your messages stay unreadable without your device’s passcode, since the private key lives only there. That’s why I always pair E2EE apps with a strong lock screen.

Conclusion

End-to-end encryption comes down to one guarantee: only you and the other person hold the keys. Check which apps actually turn it on by default, and verify a safety number with one important contact today.

Signal App for Private Messaging: Complete Setup Guide for Beginners

Set up Signal for private messaging in under five minutes — encrypted by default, completely free. Enable Registration Lock and start messaging securely today.

Privacy-first messaging sounds complicated until you try the Signal app. I set up my first account in about five minutes — no subscription, no hidden settings to configure. The most important thing to understand about Signal’s private messaging: every conversation is end-to-end encrypted by default, meaning even Signal itself cannot read your messages.

What caught my attention was what Signal does not collect. There is no message history stored on a server, no contact graph shared with advertisers, no behavioral profile built from your chats. If you have been searching for a genuinely private alternative to mainstream messaging apps, Signal is where I would point you first.

Quick Answer

Download Signal for free on Android or iPhone, register with your phone number, and create a PIN when prompted. Every message and call is encrypted automatically — nothing to configure. For extra account security, enable Registration Lock under Settings > Account and Screen Lock under Settings > Privacy. The whole setup takes under five minutes.

Signal encrypts every conversation end-to-end by default — no paid plan or privacy settings to toggle.

What Makes Signal Different From Other Messaging Apps?

Signal is maintained by the Signal Foundation, a nonprofit with no advertising revenue. Its encryption protocol — the Signal Protocol — is open-source and publicly audited. WhatsApp uses the same protocol for message text, but still collects contact graphs, usage metadata, and links your account to a Meta advertising profile. Signal collects almost none of that.

In my own use, the practical difference shows up when I check what Signal retains on its servers: almost nothing. Message content, call history, and contact names stay on your device. That is a meaningful distinction when you care about who can see your data.

Signal’s nonprofit model, open-source protocol, and minimal metadata collection make it meaningfully different from ad-supported messaging apps.

How Do I Download and Install Signal?

Open the Google Play Store (Android) or the Apple App Store (iPhone) and search for “Signal — Private Messenger.” Install the app from the developer listed as Signal Messenger LLC. The app is free and around 50 MB. Avoid any third-party download sites — the official app stores are the only safe source.

Always verify the developer name is Signal Messenger LLC before installing to avoid counterfeit apps.

How Do I Set Up Signal on My Phone?

Step 1: Verify Your Phone Number

Open Signal and tap Get Started. Enter your mobile number and tap Next. Signal sends a six-digit SMS verification code — enter it when it arrives. If it does not arrive within 60 seconds, tap “Call me instead” to receive it by automated voice call. This step typically takes under two minutes.

Step 2: Create Your PIN

After verification, Signal prompts you to set a PIN. This protects your account data and is required if you re-register on a new device. Signal offers no PIN recovery option, so choose something you will remember and store it in a password manager right away.

Step 3: Find Contacts and Start Messaging

Tap the compose icon. Signal checks which of your saved contacts are already on the platform and shows them in a list — no manual searching needed. Tap any name to open a chat. For contacts who have not joined Signal yet, you can send an invite link directly from inside the app.

Pro tip: Tap a contact’s name at the top of any conversation and select “Verify Safety Numbers.” If the code matches what your contact sees on their screen, your conversation is confirmed unintercepted. I do this for any conversation involving sensitive information — it takes 30 seconds.

Signal identifies which saved contacts are already on the platform automatically and lets you invite the rest with a single tap.

Which Signal Privacy Settings Should I Change First?

Registration Lock

Go to Settings > Account > Registration Lock and toggle it on. This prevents anyone from taking over your phone number on Signal without your PIN. It is the single most important account protection setting, and enabling it takes about five seconds.

Screen Lock

Go to Settings > Privacy > Screen Lock. This requires your phone’s biometric or passcode before Signal opens, protecting your chats if someone picks up your unlocked phone.

Default Disappearing Messages

Go to Settings > Privacy > Default Timer for New Chats. I set mine to one week for most conversations. Messages delete automatically on both sides when the timer runs out — no manual cleanup needed and no risk of forgetting a sensitive thread.

Troubleshooting tip: If a contact’s messages are not disappearing on your end, they may be running an outdated Signal version. Disappearing messages require Signal 4.0 or later on both sides. Ask them to check for an app update in their device’s app store.

Registration Lock, Screen Lock, and disappearing messages cover the essential hardening for most Signal users and take under a minute to set up.

Which Signal Features Are Worth Using?

Feature Where to Find It What It Does
Note to Self Search your own name in chats Encrypted personal notepad synced across linked devices
Sealed Sender Settings > Privacy > Advanced Hides who sent a message, even from Signal’s servers
Blur Faces Photo editor inside any chat Automatically blurs faces before you send an image
Encrypted Group Calls Group chat > video icon Fully encrypted calls for up to 40 people
Linked Devices Settings > Linked Devices Use Signal on Windows, macOS, or Linux via QR code

Note to Self, Sealed Sender, and face blurring are three built-in Signal features most new users overlook entirely.

What Are the Most Common Signal Setup Mistakes?

  1. Forgetting your PIN. Signal has no recovery option. The fix: write your PIN in a password manager before you need it — not after you have already forgotten it.
  2. Not inviting contacts. Your friends will not receive your Signal messages unless they install the app. Send personalized invite links rather than waiting for people to discover it on their own.
  3. Leaving old linked devices active. Every linked desktop or tablet can see your messages. Check Settings > Linked Devices after any device change and remove anything you no longer use.
  4. Ignoring safety number change alerts. When Signal alerts you that a contact’s safety number changed, it usually means they got a new phone. Confirm with them directly before continuing sensitive conversations — the alert is there for a reason.
  5. Skipping Note to Self. I used to store private notes in a standard notes app. Note to Self in Signal is end-to-end encrypted and syncs across your linked devices — a far safer place for anything you want kept private.

The most avoidable Signal mistake is skipping the PIN setup — store it securely the moment you create it.

Frequently Asked Questions

Does Signal cost anything?
Signal is completely free. The Signal Foundation is funded by donations, not subscriptions or ads. I have used it daily for over a year without encountering any paywall or upsell.

Can anyone else read my Signal messages?
No. End-to-end encryption means only you and your contact hold the decryption keys. Signal’s servers never have access to message content — in practice, this means Signal cannot comply with most law enforcement data requests because the data simply does not exist server-side.

What happens to my messages if I switch phones?
Messages are stored on your device, not Signal’s servers. Changing phones means starting fresh — old history does not transfer. This is an intentional privacy trade-off. Back up anything important before switching, or accept that ephemeral history is part of the design.

Is Signal safer than WhatsApp?
Both use the Signal Protocol for message content, so text is equally encrypted in transit. The difference is metadata: Signal stores far less and shares nothing with an advertising company. If metadata privacy matters to you, Signal is the stronger choice. I compare all three apps in depth in WhatsApp vs Signal vs Telegram: Which Messaging App Is Safest.

Does Signal work on a computer?
Yes. Signal has desktop apps for Windows, macOS, and Linux. Download from signal.org, open Signal on your phone, go to Settings > Linked Devices, and scan the QR code to link them in under a minute.

Can I hide my phone number on Signal?
Partially. Signal introduced usernames in 2024. Go to Settings > Account > Phone Number > Who Can See My Number to restrict visibility so new contacts can find you by username instead of your number.

Signal’s FAQ answers in one line: free, encrypted end-to-end, messages stay on your device, and it runs on desktop too.

Conclusion

Setting up the Signal app for private messaging takes about five minutes, and the protection you get — end-to-end encryption, minimal metadata, no advertising profile — is free for everyone. Download the app, register your number, enable Registration Lock and Screen Lock, and you are done.

To go further with your digital privacy, read how to stay safe on public Wi-Fi so your apps are protected away from home — or explore how to set up Telegram if you want a privacy-focused option with large group and channel features.

WhatsApp vs Signal vs Telegram: The Privacy Differences That Actually Matter

WhatsApp vs Signal vs Telegram: compare encryption strength, metadata collection, and backup security to pick the messaging app that fits how you communicate.

Choosing between WhatsApp vs Signal vs Telegram comes up in my tech conversations constantly. These three apps dominate mobile messaging, yet their security models are very different — and the wrong choice for a sensitive conversation can leave your messages sitting on a server you never consented to.

The crux: all three claim encryption, but only Signal applies end-to-end encryption to every message and call by default, by design.

Quick Answer

Signal is the safest — it encrypts everything by default and retains almost no metadata. WhatsApp uses equally strong encryption but shares usage data with Meta. Telegram’s regular chats are not end-to-end encrypted; only its “Secret Chats” are. For everyday messaging WhatsApp works fine; for anything sensitive, Signal is the clear choice.

How Do WhatsApp, Signal, and Telegram Compare?

Here is a side-by-side on the factors that matter most for security and privacy.

Feature WhatsApp Signal Telegram
Default end-to-end encryption Yes — messages and calls Yes — everything No — Secret Chats only
Metadata collected High (shared with Meta) Minimal (phone number only) Moderate
Encryption protocol Signal Protocol Signal Protocol (fully open-source) MTProto (proprietary)
Cloud backup encryption Optional — must enable Optional — end-to-end None — server-side storage
Maximum group size 1,024 members 1,000 members 200,000 members

The sharpest gap in this comparison: Telegram’s standard chats are stored on its servers unencrypted, which means Telegram can read them — something most users don’t realize.

What Makes Signal the Most Private Option?

Open-Source Code That Gets Audited

Signal’s protocol and apps are fully open-source and have been independently audited multiple times. WhatsApp uses the same Signal Protocol for message encryption, but its app code is proprietary — you have to trust Meta’s implementation. Telegram’s MTProto protocol is partly open but has never received the same level of independent scrutiny.

Near-Zero Metadata Retention

When the U.S. Department of Justice subpoenaed Signal in 2021, Signal handed over only two data points: account creation date and last connection date. Nothing else was stored to share. WhatsApp logs who you message, when, and how often — and that data feeds Meta’s advertising systems.

Pro tip: Set disappearing messages as a default in Signal. I set mine to one week for every new conversation so old chats don’t pile up without manual clean-up.

Signal’s open-source code and near-zero data retention make it the only messaging app independently verified to be as private as it claims.

Is WhatsApp Secure Enough for Most People?

For everyday conversations — family group chats, making plans, sharing photos — WhatsApp’s encryption is solid and trustworthy. The real issue is metadata: WhatsApp knows who you talk to, when, and how often, and that pattern goes to Meta. Your message content is private; your communication habits are not.

One Setting to Fix Before Anything Else

WhatsApp cloud backups are not end-to-end encrypted by default. Messages are protected in transit but sit readable in your Google Drive or iCloud backup unless you act. Go to Settings > Chats > Chat Backup > End-to-end Encrypted Backup and turn it on. Then review your full WhatsApp privacy settings to lock down your profile photo and last-seen time.

WhatsApp’s encryption is real and robust — the two gaps worth closing are metadata exposure and the unencrypted cloud backup default, both fixable in a few minutes.

Where Does Telegram Fall Short on Privacy?

Telegram’s privacy reputation is larger than it deserves for standard use. Regular group chats and channels are stored on Telegram’s servers in plaintext — Telegram has access to them. Secret Chats are end-to-end encrypted, but they are device-to-device only, cannot be used in groups, and disappear if you reinstall the app.

Where Telegram wins is scale: 200,000-member groups, broadcast channels, file transfers up to 4 GB, and a rich bot ecosystem. It’s excellent for public communities and heavy file sharing — just don’t treat a standard Telegram group as private.

Troubleshooting tip: To confirm you’re in a Secret Chat, look for a lock icon next to the contact’s name. No lock means it’s a regular, server-stored conversation.

Telegram’s strength is scale and community features, not private point-to-point encryption.

Which App Should You Actually Use?

Use Signal for anything sensitive

Journalists, healthcare workers, and anyone sharing confidential information should default to Signal. It’s free on every major platform, and the interface has improved significantly over the past two years.

Use WhatsApp for everyday messaging

WhatsApp is already on virtually everyone’s phone. For daily family and friend communication it’s the practical choice — just enable encrypted backup and keep your WhatsApp backups secure.

Use Telegram for large communities and file sharing

For public channels, massive group discussions, or sending large files, Telegram has no peer. Use it knowing that standard chats are server-stored, not private.

Most people end up using WhatsApp daily and Signal for conversations that truly need to stay private — you don’t have to pick just one.

What Mistakes Should You Avoid?

  • Assuming Telegram encrypts everything by default. Standard chats are not end-to-end encrypted. For private one-to-one conversations in Telegram, start a Secret Chat explicitly from the contact’s profile menu.
  • Skipping WhatsApp’s encrypted backup. Messages are encrypted in transit but unprotected in cloud backup by default. Enable End-to-end Encrypted Backup in Settings > Chats > Chat Backup before doing anything else.
  • Sharing your Signal phone number publicly. Signal accounts are tied to your real number. Enable Signal’s username feature under Settings > Privacy > Phone Number so you can share a handle instead.
  • Treating familiarity as privacy. Many privacy-focused communities have migrated to Telegram, which makes the app feel secure. But standard chats are not private — always check what type of conversation you’re in before sharing anything sensitive.

Each of these mistakes is easy to sidestep once you know the default settings your app ships with.

Frequently Asked Questions

Is Signal better than WhatsApp for privacy?

Yes. Both apps use the Signal Protocol for message encryption, but Signal retains almost no metadata while WhatsApp shares usage patterns with Meta. When the DOJ subpoenaed Signal in 2021, the company had only two data points to hand over — that’s what genuine data minimization looks like in practice.

Can Telegram read my messages?

In standard chats and groups, yes. Telegram stores those messages on its servers and can access them. Only Secret Chats are end-to-end encrypted. This surprises many users because privacy-focused communities tend to gather on Telegram, but the app’s default encryption doesn’t match that reputation.

Are WhatsApp, Signal, and Telegram free to use?

Yes, all three are free. Signal is funded by the Signal Foundation, a nonprofit. WhatsApp is owned by Meta and free to users. Telegram has an optional paid Premium tier for extra storage and upload size, but the core app costs nothing.

Which app works best for group chats?

For private groups up to 1,000 people, Signal is the safest. For massive communities or broadcast channels, Telegram’s 200,000-member capacity is unmatched. For most everyday family and friend groups, WhatsApp’s 1,024-member limit is more than enough.

The answers above address the most common points of confusion — most real differences come down to metadata collection and default settings, not message encryption alone.

Conclusion

My practical recommendation: use WhatsApp for daily messaging and install Signal alongside it for anything sensitive. Telegram fills a real niche for large communities and heavy file transfers — just understand that its standard chats are not private. For a broader look at protecting yourself online, the EFF Surveillance Self-Defense guide is the most thorough free resource I’ve found. Start with the app your contacts already use, then add Signal where it truly matters.

Encrypt Your Backups on Any Device: iPhone, Windows, and External Drives

Learn how to encrypt your backups on iPhone, Windows, and external drives in minutes — keep your data unreadable even if a drive is lost or stolen.

Most people set up a backup and assume their data is safe. But I learned that an unencrypted backup is almost as risky as losing the device itself: anyone who gets the external drive or accesses an exposed archive can browse your files without a login or any special software. The backup you created to protect yourself can become the biggest vulnerability in your setup.

Encrypting your backups is a one-time, ten-minute setup on every major platform. Once it is done, a stolen drive gives a thief nothing but scrambled data they cannot use.

Quick Answer

To encrypt your backups: on iPhone, connect to a Mac or PC, open Finder or iTunes, and tick Encrypt local backup before clicking Back Up Now. On Windows, enable BitLocker on your backup drive. Android’s Google backup is encrypted by default. For external drives, use VeraCrypt (free) or your operating system’s built-in encryption tool.

Why Does Encrypting Your Backups Matter?

A backup is a complete copy of your device — contacts, photos, saved passwords, and banking app data. Without encryption, anyone who physically accesses that backup can open your files in minutes using standard software. No hacking, no special skills required.

Encryption converts your files into ciphertext that is only readable with the correct passphrase. I keep my Windows backup on an encrypted external drive, and when it once slipped out of my bag at a coffee shop, I knew the contents were unreadable to whoever picked it up.

Encrypting a backup adds almost zero overhead but turns a stolen drive from a catastrophe into a minor inconvenience.

How Do You Encrypt an iPhone Backup?

Apple’s local iPhone backup is not encrypted by default. You have to turn it on manually. Here’s how, on a Mac or Windows PC:

  1. Connect your iPhone with a USB cable. Open Finder on Mac or iTunes on Windows.
  2. Select your device. In Finder, click the iPhone in the left sidebar. In iTunes, click the device icon near the top left. Navigate to the General tab.
  3. Tick Encrypt local backup in the Backups section. You’ll be prompted to set a password. Save it in a password manager immediately — Apple has no way to recover it for you.
  4. Click Back Up Now. The encrypted backup now includes Health data, saved Wi-Fi passwords, and keychain credentials that Apple excludes from unencrypted copies.

Pro tip: After the backup finishes, go to iTunes > Preferences > Devices. A padlock icon next to the backup confirms encryption is active.

If you have not set up iPhone backups yet, my guide on backing up your iPhone to iCloud and your computer covers the two-layer strategy I use every week.

An encrypted iPhone backup also gives you a more complete backup — Apple withholds Health history and keychain data from unencrypted copies, so encryption is an upgrade in both security and completeness.

How Do You Encrypt Windows Backups?

The fastest way to protect a Windows backup drive is BitLocker, which encrypts the entire drive at the operating system level.

  1. Plug in your backup drive. Open File Explorer, right-click the drive, and select Turn on BitLocker. On Windows 11 Home, look for Device Encryption under Settings > Privacy & Security instead.
  2. Choose a password to unlock the drive, then save the recovery key to your Microsoft account or print it and store it somewhere other than the drive itself.
  3. Run your backup normally — via Settings > System > Storage > Backup or a tool like Macrium Reflect Free. Every file written to the drive is encrypted automatically from this point forward.

Troubleshooting tip: If BitLocker asks for the recovery key unexpectedly after a Windows Update, sign in to your Microsoft account and look under Devices > [your PC name] > BitLocker to find the saved key.

BitLocker encrypts at the drive level, so every backup you run — now and in the future — is protected without any extra steps after the initial setup.

Which Tool Should You Use for an External Drive?

If your Windows edition does not include BitLocker, or you back up to drives shared between Windows and Mac, VeraCrypt is the best free cross-platform alternative.

Tool Platforms Free Best For
BitLocker Windows Pro/Enterprise Yes (built-in) Windows whole-drive encryption
VeraCrypt Windows, Mac, Linux Yes Cross-platform or portable drives
macOS FileVault Mac Yes (built-in) Mac whole-drive + Time Machine backups
7-Zip (AES-256) Windows, Mac, Linux Yes One-off encrypted archive files

For ongoing backups, built-in tools are the simplest choice — encryption happens in the background with no extra steps. Use VeraCrypt when you need a portable encrypted container that opens on any operating system.

Start with the tool built into your OS; reach for VeraCrypt only when you need cross-platform access or your Windows edition lacks BitLocker.

Are Cloud Backups Already Encrypted?

Yes and no. Most major cloud services encrypt your data in transit and at rest — but the provider holds the encryption key. That means Google, Apple, or another service can technically read your files if compelled by law or in a security incident.

For sensitive documents like tax returns or medical records, use a zero-knowledge service such as Proton Drive or Backblaze Personal Backup (which lets you set a private key only you hold), or encrypt files locally with Cryptomator (free, open-source) before uploading them to Google Drive or iCloud.

Cloud encryption protects your data in transit; zero-knowledge encryption protects it from the provider itself — a meaningful distinction if you store financial or medical files.

What Mistakes Should You Avoid When Encrypting Backups?

  1. Forgetting the encryption password. Without it, you cannot restore the backup. Fix: save it in a password manager the moment you create it.
  2. Storing the recovery key on the encrypted drive. If you lose access to the drive, the key is gone too. Fix: save it to your Microsoft account or store a printed copy somewhere separate.
  3. Assuming cloud storage equals encrypted backup. Most providers hold the keys. Fix: use a zero-knowledge service or encrypt locally with Cryptomator before uploading.
  4. Never testing a restore. An encrypted backup you cannot successfully restore is useless. Fix: do a test restore to a spare folder every few months to confirm everything works.
  5. Using a weak passphrase. Encryption is only as strong as the password protecting it. Fix: use a random 16-character passphrase generated by a password manager.

Frequently Asked Questions

Does encrypting a backup slow down my computer?

Barely. Modern processors handle AES encryption in hardware. I back up a 300 GB drive with BitLocker enabled regularly, and the speed difference is negligible after the initial encryption pass completes. For example, my backup runs at roughly the same pace — around 120 MB/s — whether BitLocker is on or off.

Can I encrypt a backup I already made?

For iPhone, enabling the setting and running a new backup creates a fresh encrypted copy that replaces the old one. For Windows drives, BitLocker encrypts the whole drive in the background — you do not need to delete existing backup files first.

What happens if I forget my iPhone backup password?

Apple cannot reset it. You would need to factory-reset the device, set it up as new, and start a fresh encrypted backup. There is no recovery path without the original password — I save mine in my password manager the same day I create it.

Is VeraCrypt hard for a beginner?

It has more setup steps than BitLocker, but the documentation is thorough and the community forums are helpful. For most Windows users, BitLocker or Device Encryption is simpler and just as effective. Reach for VeraCrypt only if you genuinely need cross-platform access between Windows and Mac.

Conclusion

Encrypting your backups takes ten minutes and protects you permanently. Start with the two highest-risk items: your iPhone local backup and any external drive you carry outside the house. If either is ever stolen, you’ll be glad encryption was already on.

For the next step in locking down your digital life, read my guide on how to protect your identity after a data breach — it covers what to do when a service you use gets compromised.