Signal CEO: "We'd Rather Shut Down Than Build a Backdoor"
Disclosure: This article contains affiliate links. We may earn a commission at no extra cost to you.
In a striking interview with Dutch television program VPRO Tegenlicht, Signal president Meredith Whittaker made the company's position crystal clear: if forced to choose between building a government backdoor or shutting down entirely, Signal would shut down.
"We're not going to betray people whose lives depend on us," Whittaker stated. It's a bold stance that highlights the growing tension between governments demanding access to encrypted communications and tech companies committed to user privacy.
This comes just days after Ireland announced new legislation to give police spyware capabilities and access to "all communications, encrypted or not." The battle lines are being drawn, and Signal is making clear which side it's on.
"Governments Have Never Known More About Their Citizens"
Whittaker's interview paints a sobering picture of how dramatically privacy norms have shifted in just three decades:
From the interview:
"We've had privacy rights for centuries. That was the norm. But in the last 30 years or so, we seem to have entered a world where every movement is tracked, every inclination or purchase, every relationship you have, every message, every thought you type and then delete. By a handful of companies. That's now considered normal."
The result, according to Whittaker, is an unprecedented inversion: what was normal for centuries - privacy - is now treated as suspicious. And governments, far from protecting this right, are demanding even more access.
"Government bureaucracy thrives on collecting additional information. Databases affect almost every American," she noted. "The core of the matter: A system that doesn't respect the right to privacy doesn't respect its citizens either."
Why Signal Will Never Build a Backdoor
When asked about the EU's proposed Chat Control legislation - which would require messaging apps to scan private messages - Whittaker was unequivocal:
Whittaker's stance:
"If Europe goes the authoritarian route and orders us to build a backdoor based on chat surveillance legislation, we wouldn't comply. With proxy servers, we'd keep Signal running even if it's blocked. Like in Iran and Russia. But if it ultimately comes down to a choice between a backdoor or stopping, then we stop. Because we're not going to betray people whose lives depend on us."
This isn't hypothetical posturing. Signal already operates in countries where it's officially blocked, using proxy servers to circumvent government restrictions. The infrastructure for resistance already exists.
The Backdoor Fallacy
Governments often present backdoors as a reasonable compromise: "We only want access to catch criminals and terrorists." But Whittaker dismantles this logic with a simple truth:
"A backdoor knows no good and evil."
Once a vulnerability exists in an encryption system - even one designed for "authorized access" - it becomes a target for everyone:
- Hackers will find and exploit it
- Hostile nations will use it for espionage
- Criminals will leverage it for blackmail and theft
- Future governments may abuse it - today's democracy isn't guaranteed tomorrow
There's no technical way to create a backdoor that only works for "the good guys." Cryptography doesn't understand intentions.
What is EU Chat Control?
The EU's proposed Chat Control regulation (officially called "CSAM regulation" or "CSA regulation") would require messaging services to detect and report illegal content - specifically child sexual abuse material (CSAM) - in private messages.
The problem: doing this on end-to-end encrypted platforms requires either:
- Breaking encryption entirely - making all messages readable
- Client-side scanning - scanning messages on your device before encryption
Both approaches fundamentally undermine the privacy that encryption provides. Client-side scanning is particularly insidious because it technically preserves "encryption" while completely defeating its purpose - your device itself becomes the spy.
Technical Reality: Whittaker calls Chat Control "technically unworkable" - not because the scanning can't be built, but because it would immediately be exploited. The same system designed to detect illegal content could be repurposed to detect political dissent, journalistic sources, or any content a government dislikes.
Signal vs WhatsApp: The Metadata Difference
Both Signal and WhatsApp use the Signal Protocol for end-to-end encryption. Your message content is protected on both platforms. So why do privacy advocates overwhelmingly recommend Signal?
The answer is metadata.
| Data Type | Signal | |
|---|---|---|
| Message content | Encrypted | Encrypted |
| Who you message | Not stored | Collected |
| When you message | Not stored | Collected |
| How often | Not stored | Collected |
| Your contacts | Not uploaded | Uploaded |
| Profile info | Encrypted | Collected |
| Group memberships | Encrypted | Collected |
| Owner | Non-profit foundation | Meta (Facebook) |
| Source code | Open source | Proprietary |
Metadata reveals patterns. Even without reading your messages, knowing who you talk to, when, and how often can reveal:
- Your social network and relationships
- Your daily routines and locations
- Your political affiliations
- Medical conditions (if you message doctors or support groups)
- Financial situations
- Romantic relationships
When governments subpoena WhatsApp, Meta hands over this metadata. When they subpoena Signal, there's almost nothing to hand over - because Signal genuinely doesn't have it.
The Global Privacy Landscape in 2026
Whittaker's interview doesn't exist in a vacuum. It's part of a broader pattern of governments worldwide pushing for expanded surveillance powers:
- Ireland (Jan 2026): New bill for police spyware and IMSI catchers, targeting "all communications, encrypted or not" - Read our full analysis
- UK (2025-2026): Online Safety Act enables age verification and content scanning; age verification causing 1,400% VPN surge
- EU (ongoing): Chat Control proposal requiring message scanning
- Australia (2025): Social media ban for under-16s with mandatory age verification
- US (ongoing): Various proposals for "lawful access" to encrypted communications
The pattern is clear: governments are increasingly uncomfortable with communications they can't access, and they're legislating accordingly.
How Can You Protect Your Privacy?
If you're concerned about surveillance - whether from governments, corporations, or hackers - here's what you can do:
1. Use Signal for Messaging
Signal is free, open-source, and available on iOS, Android, and desktop. It's the gold standard for private messaging, recommended by security experts, journalists, and activists worldwide.
- Download: signal.org/download
- Convince your contacts: Privacy is a network effect - it only works if the people you talk to also use it
2. Use a VPN
A VPN encrypts your internet traffic and hides your IP address. While it won't protect your messages (that's what Signal is for), it prevents your ISP and network observers from seeing which websites you visit and services you use.
We recommend NordVPN for its no-logs policy, fast speeds, and strong track record.
Verify Your VPN: After connecting, visit myip.foo to check your IP is hidden. Use our DNS leak test and WebRTC leak test to ensure complete protection.
3. Minimize Your Digital Footprint
- Review app permissions - Does that flashlight app really need your contacts?
- Use privacy-focused browsers - Firefox, Brave, or Tor for sensitive browsing
- Disable location services when not needed
- Use strong, unique passwords with a password manager
- Enable two-factor authentication everywhere possible
4. Stay Informed
Privacy legislation moves fast. Stay aware of proposals in your jurisdiction. Contact your representatives. Support organizations fighting for digital rights like the EFF, ACLU, and Privacy International.
Common Questions
Is Signal really secure?
Yes. Signal's protocol has been audited by independent security researchers and is considered the gold standard for encrypted messaging. It's so good that WhatsApp, Facebook Messenger, and Google Messages have all adopted it for their encrypted modes. The difference is that Signal also protects your metadata and is run by a non-profit with no advertising business model.
Can governments force Signal to add a backdoor?
They can try through legislation. But as Whittaker made clear, Signal would rather shut down than comply. The organization is structured as a non-profit and doesn't have shareholders demanding profits - they can make principled decisions that a public company couldn't.
What happens to my messages if Signal shuts down?
Signal messages are stored on your device, not Signal's servers. If Signal disappeared tomorrow, you'd lose the ability to send new messages through the app, but your existing conversations would remain on your phone. You could export them or simply switch to another app.
Is using Signal illegal?
No, Signal is legal in virtually every country. Some authoritarian regimes block access to it (Iran, Russia, China), but using it isn't itself illegal. Signal provides guidance on circumventing these blocks through proxy servers.
Why don't more people use Signal?
Network effects. People use what their friends use. WhatsApp has billions of users because it achieved critical mass early. Breaking that cycle requires convincing your contacts one by one. But every person who switches makes it easier for the next.
Conclusion
Meredith Whittaker's message is clear: the privacy we took for granted for centuries is under unprecedented threat, and the only defense is technology designed to resist surveillance - even from governments.
Signal's willingness to shut down rather than compromise shows what genuine commitment to privacy looks like. It's a stark contrast to companies that encrypt messages while harvesting metadata, or that promise privacy while building advertising empires on your data.
The choice for users is simple: use tools built by organizations whose interests align with yours. Signal has no ads, no shareholders, and no business model that benefits from your data. When they say they'll protect your privacy, they actually mean it.
As governments worldwide push for more surveillance powers, tools like Signal become not just convenient, but essential. The question isn't whether you have something to hide - it's whether you believe privacy is a right worth protecting.
Check Your Privacy Setup
Start with the basics: visit myip.foo to see what websites can learn about you. Test for DNS leaks and WebRTC leaks to ensure your VPN is working. Then download Signal and convince one friend to join you.
Related Articles
Ireland Wants Police Access to ALL Encrypted Messages
Ireland proposes spyware and IMSI catchers to intercept communications "encrypted or not."
UK Age Verification: A Privacy Nightmare
UK age verification caused a 1,400% surge in VPN usage. Here's why it threatens everyone.