How to Lock Down Your Messaging Apps
Encryption protects your messages in transit, but this week showed how police read Signal, WhatsApp, and Telegram anyway, without cracking it. They linked their own computer to the account as a second device, so messages synced to them in plain text. Setting that up takes brief access to your unlocked phone, or intercepting the code that approves a new device. Here's how to close that gap.
1. Turn on disappearing messages
The messages you don't keep can't be read later. In each app, set messages to auto-delete (Signal: chat settings > Disappearing Messages; WhatsApp: chat > Disappearing Messages; Telegram: use the auto-delete timer). Pick a window that works for you.
2. Check your linked devices
The most common "trick" is quietly linking another device that mirrors your chats. Check the list and remove anything you don't recognize. Signal: Settings > Linked Devices. WhatsApp: Settings > Linked Devices. Telegram: Settings > Devices.
3. Kill the unencrypted backup
A cloud backup can undo your encryption. On WhatsApp, turn on end-to-end encrypted backup (Settings > Chats > Chat Backup > End-to-end Encrypted Backup), or turn backups off. On Telegram, remember normal chats are stored on Telegram's servers, use Secret Chats for anything sensitive. Signal keeps messages on your device, not the cloud.
4. Lock the app and the phone
If someone holds your unlocked phone, encryption doesn't matter. Set a strong phone passcode (6+ digits, not Face/fingerprint alone at a border), and turn on the app lock: Signal > Settings > Privacy > Screen Lock; WhatsApp > Settings > Privacy > App Lock.
5. Set a registration lock (Signal)
Stops someone from re-registering your number after a SIM swap (when an attacker hijacks your phone number). Signal > Settings > Account > Registration Lock, on. Also set a port-out PIN with your carrier, Registration Lock blocks re-registration, not the swap itself. Store the PIN safely; there's no recovery.
Quick tip
Do #2 first. Open Linked Devices in each app right now, if there's a device you don't recognize, remove it. That's the exact gap this week's story exploited.
Up next · Monday
The week's most important privacy story, in plain English: what happened, why it matters, and what to do about it.