Signal, the gold standard in end-to-end encrypted messaging, is finalizing the most anticipated architectural evolution in its history: the complete elimination of phone numbers as a mandatory registration requirement.
Since its launch, Signal's reliance on phone numbers served as a simple anti-spam mechanism and address book discovery tool. However, it also represented the protocol’s Achilles' heel. In authoritarian regimes, governments routinely subpoena state-controlled telecom operators for SMS verification codes or cross-reference phone numbers with cell tower location records, compromising dissidents and journalists.
Technical details and code commits published across Signal’s community forums and GitHub repositories have revealed the cryptographic engine that makes phone-free accounts possible: anonymous Zero-Knowledge Proofs (ZKPs).
Under the new architecture, when a user signs up, the client generates a cryptographic keypair locally. To prevent bot swarms from overwhelming the network, the client must present an anonymous, blinded proof of computational work or a zero-knowledge token issued by a decentralized identity relayer. Signal’s servers can verify that the token is valid without learning who the user is or linking it to any previous session.
Furthermore, group memberships, username lookups, and account recovery are handled through private information retrieval (PIR) and blinded ZK-credentials, ensuring that even in the event of a total server breach or government subpoena, Signal cannot produce logs associating an account with a physical human being.
The transition cements Signal’s reputation as an uncompromised bastion of private communications, proving that modern cryptographic primitives can successfully defeat mass surveillance.