Learn / Why does Signal need my phone number?
Explainer · updated for 2026It's the question almost everyone asks the first time they install Signal — a privacy app that opens by demanding the single most identifying number you own. The answer isn't sinister. It's a deliberate engineering tradeoff, and it's worth understanding before you decide whether it's one you're willing to make.
Direct answer: Signal requires a phone number for two practical reasons: it makes mass spam and abuse expensive — numbers cost money and are rate-limited — and it powers contact discovery, letting Signal find your friends from the address book you already have. Usernames (added 2024) hide your number from other people, but you still can't register without one.
Last updated July 2, 2026. Living page — corrections welcome.
Signal's phone-number requirement wasn't an oversight or a data grab. It was a deliberate, defensible design choice — and it's a big part of how Signal reached mainstream scale.
A messenger where accounts are free to create in unlimited quantity is a messenger drowning in spam. Phone numbers change the math: they cost money, they're rate-limited by carriers, and burning through thousands of them is expensive. Requiring one raises the price of running a bot farm from roughly zero to real money — which is why Signal's network has stayed remarkably clean without content scanning.
When you join Signal, it can check (via privacy-preserving hashed lookups of your address book) which of your existing contacts are already there. No usernames to swap, no invitations to send — the people you know simply appear. That instant "your friends are already here" moment removed the biggest adoption barrier a new messenger faces, and it only works because everyone's identifier is a number you already have saved.
In short: the phone number bought Signal a spam-resistant network and effortless onboarding. Those are real benefits, honestly earned — the question is only whether the cost fits your situation.
In early 2024, Signal shipped usernames. They fixed the most common complaint: you no longer have to reveal your phone number to talk to someone. You can share a username (or a QR code) instead, set your number to be invisible to other users, and prevent people from finding you by number at all.
What usernames did not change is registration. Creating a Signal account still requires a working phone number that can receive a verification code. The username is a label layered on top of the account; the number remains its anchor. So the accurate summary is: usernames hide your number from other people — Signal itself still requires and holds one.
A phone number isn't just a routing detail. In most countries it's a government-registered identifier: acquiring one involves ID checks, billing records, or both, and carriers respond to legal process. That means a phone-number-anchored account is, by construction, tied to your legal identity in a way that can be subpoenaed — regardless of how well the messages themselves are encrypted.
Reporting during 2026 on FBI and ICE data requests to technology and telecom companies renewed public attention on exactly this point: what does an identifier anchor expose, even when content doesn't? To be fair and precise about Signal here: Signal's server-side data is famously minimal. Its published responses to legal requests have shown it can produce little beyond an account's registration date and last-connection time — no messages, no contacts, no content. Signal does not leak what you say.
The concern is narrower and it's structural: the account exists as a phone number. If linking the account to a person matters for your threat model — you're a source, an activist, in an abusive situation, or simply someone who wants nothing on file — then the strongest available answer is for no identifier to exist in the first place, rather than for a well-behaved company to hold one and disclose almost nothing about it.
There's a different way to build the identity layer: instead of registering an identifier with a service, your identity is a cryptographic key generated and held on your device. Nobody assigns it, no registry maps it to a legal person, and there's no number or email for anyone to subpoena or leak — because none was ever collected.
Connecting works differently too: rather than being discovered by number, you connect by sharing a link or a QR code with the person you want to talk to. Sendant works this way — no phone number, no email, no account of any kind, in a browser or on Android (iPhone users use the browser). As far as we know, it's the only identifier-free messenger with a persistent, full-featured no-install browser client; others in this space, like SimpleX, Session, Briar, and Threema, require an installed app (or, in Threema's case, a web interface tethered to one). (Sendant is not yet audited; an independent audit is planned.)
The honest tradeoff: no identifier means no automatic contact discovery. Your friends won't just appear — you have to exchange a link or QR code with each person. That small ceremony is the price of having nothing on file, and whether it's worth paying depends entirely on you.
Then this whole question resolves in Signal's favor. If handing over a phone number is acceptable in your situation and the people you talk to are already on Signal, it remains an excellent choice: years of independent audits, a post-quantum protocol upgrade, mature apps, and a nonprofit that has repeatedly demonstrated it stores almost nothing. The phone-number requirement is a tradeoff, not a scandal — the point of this page is simply that you should get to make it knowingly. For a fuller side-by-side, see Sendant vs Signal, or the broader no-phone-number messenger comparison.
No. Usernames (2024) let you hide your number from other people and be found by username instead, but registering an account still requires a working phone number that can receive a verification code. Related: does Signal have a web version?
No. A username hides your phone number from other users — a genuine privacy improvement — but Signal itself still has your number, because you needed one to register. The account remains anchored to that identifier.
SimpleX Chat, Session, Briar, and Threema all register without one. Sendant also needs no phone number — and no email or account of any kind — and runs in a browser with nothing to install, plus an Android app (iPhone via the browser). See the full comparison.
For most people, no. Signal stores famously little server-side data and your messages stay end-to-end encrypted. What the number does is tie your account to your legal identity — phone numbers are registered and subpoenable — which matters for some threat models: sources, activists, or anyone who needs the account itself to be unlinkable to who they are. More in our FAQ.
No phone number, no email, no install. Open the web app and share a link — or compare the options first in the no-phone-number comparison.
Open web appSendant vs Signal