FBI Accesses Encrypted Signal Messages Through Push Notifications

Experts warn that push notification vulnerabilities affect all apps, not just Signal

Apr. 11, 2026 at 10:40am

Got story updates? Submit your updates here. ›

A highly detailed, glowing 3D illustration of a smartphone with a neon-lit push notification interface, conceptually representing the vulnerability of encrypted communications to push notification data leaks.Encrypted messages may not be as secure as they seem, as push notification vulnerabilities can expose sensitive data to law enforcement.Charlotte Today

The FBI recently gained access to encrypted Signal messages on a defendant's iPhone by obtaining the contents of those messages through push notifications, even though the Signal app had been removed from the device prior to it being seized. This vulnerability affects all apps that send push notifications, not just Signal, and users can adjust their settings to avoid exposing sensitive information in push notifications.

Why it matters

This incident highlights the potential security risks of push notifications, which can inadvertently expose sensitive information even when an app has been removed from a device. It raises concerns about the privacy and security of communications, especially for individuals and organizations that rely on encrypted messaging apps to protect sensitive data.

The details

The FBI was able to access the encrypted Signal messages because the contents of those messages were included in the phone's push notifications, even after the Signal app had been removed. This vulnerability is not limited to Signal, but affects all apps that send push notifications. Users can adjust their app settings to avoid exposing sensitive information in push notifications, such as changing the notification settings to 'Name Only' or 'No Name or Content'.

  • The FBI recently obtained copies of encrypted Signal messages from a defendant's iPhone.
  • The Signal app had been removed from the device prior to it being seized by the FBI.

The players

FBI

The Federal Bureau of Investigation, the primary federal law enforcement agency in the United States.

Signal

An encrypted messaging app that is designed to protect the privacy and security of user communications.

Got photos? Submit your photos here. ›

What’s next

Users of encrypted messaging apps like Signal should review their notification settings to ensure that sensitive information is not being exposed through push notifications, even if the app has been removed from their device.

The takeaway

This incident highlights the importance of understanding the potential security vulnerabilities of push notifications, which can inadvertently expose sensitive information even when an app has been removed from a device. It underscores the need for users to be vigilant about their app settings and the security of their communications.