Signal is testing a registration feature called Signal Login that allows users to create accounts without a phone number. This option requires a one-time $3 payment processed through Google Play.
A $3 barrier to stop the spam tide
The introduction of Signal Login aims to decouple the encrypted messenger from the traditional requirement of a mobile number. According to lead Android developer Greyson Parrelli, users who opt for this path pay a one-time $3 fee and receive an Account ID and a recovery key. these credentials function as a username and password; if they are lost, Signal provides no other recovery mechanism, meaning the account is permanently gone.
The decision to charge for this service is a strategic move to prevent network abuse. As Gizmodo reported, Signal believes that offering free, numberless accounts would provide a massive advantage to spammers who could automate the creation of thousands of accounts. The $3 price point is intended as a "spam tax," though Greyson Parrelli noted that Signal may increase the cost if these accounts still become a vector for spam.
The Google Play loophole and timing analysis
While Signal Login removes the need to give a phone number to Signal, it introduces a dependency on the Google Play billing system. On Android, the purchase must go through a Google account with a payment method on file. This creates a privacy paradox: while Signal's servers can verify payment without linking it to the specific account created, Google still maintains a record of which user purchased a Signal Login at a specific time.
This architectural gap leaves a door open for state surveillance. A government agency could potentially request account activity from Signal and purchase records from Google, using timing analysis to correlate the two and identify the user. This trade-off highlights a persistent tension in the privacy app ecosystem: the struggle to achieve true anonymity while relying on centralized app store infrastructure.
Why GrapheneOS users are locked out of numberless signups
The current implementation of Signal Login creates a significant irony for the most privacy-conscious users. People who utilize GrapheneOS—a hardened version of Android designed to eliminate Google tracking—are the most likely to desire a numberless account. However, because the payment is tied to Google Play Services, these users cannot access the feature unless they install a sandobxed workaround.
According to the report, this limitation excludes the very demographic that treats Google accounts as a tracking surface to be avoided. for these users, the requirement to use a Google-powered checkout process nullifies the primary benefit of avoiding a phone number during the Signal registration process.
From MobileCoin's $66 peak to Bitcoin Lightning
The reliance on Google Play has led to discussions about alternative payment rails, such as Bitcoin or Monero,which do not require centralized accounts. Signal has a complicated history with cryptocurrency, having been linked to MobileCoin in 2017. MobileCoin saw a dramatic rise to an all-time high of roughly $66 on April 6, 2021, before crashing 99.91% to its current trading price of approximately $0.07.
Despite the failure of MobileCoin , there is renewed interest in decentralized payments. The report mentions that Cake Wallet recently released a fork of Signal that integrates the Bitcoin Lightning Network. While Greyson Parrelli has indicated that more payment methods are planned, Signal has not yet provided a specific timeline or a list of which cryptocurrencies will be officially integrated into the Signal Login workflow.
Comments 0