# After Criticism, Signal Agrees to Secure Plain-Text Encryption Keys for Users' Message Databases

**URL:** <https://onehack.st/t/after-criticism-signal-agrees-to-secure-plain-text-encryption-keys-for-users-message-databases/286891>\
**Category:** News & Articles\
**Created:** [July 14, 2024, 10:43am UTC](https://onehack.st/t/after-criticism-signal-agrees-to-secure-plain-text-encryption-keys-for-users-message-databases/286891 "2024-07-14T10:43:52Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [July 14, 2024, 10:43am UTC](https://onehack.st/t/after-criticism-signal-agrees-to-secure-plain-text-encryption-keys-for-users-message-databases/286891/1 "2024-07-14T10:43:53Z")

</div>

**Summary:**

1. **Security Improvement** : Signal is enhancing the security of its desktop client by encrypting the plain-text encryption keys used for its SQLite message database, addressing long-standing criticism.

2. **New Implementation** : The update will utilize Electron’s SafeStorage API to store encryption keys securely in operating systems’ cryptography systems, such as DPAPI on Windows and Keychain on macOS.

3. **Response to Criticism** : This change follows recent criticism from security researchers and a dormant merge request that prompted Signal to implement the new feature, which will be available soon in a Beta version.

[Read more on BleepingComputer](https://bleepingcomputer.com)
