Signal Just Killed the Phone Number. Here's What Replaces It

For over a decade, Signal had one rule that never bent: no phone number, no account. You could hide your number from other users, you could talk to people by username instead, but underneath it all, your account was still a phone number. That changed in September, and by mid-October it had rolled out to every Android user on Signal 8.31.2.

The feature is called Signal Login. It lets you create a Signal account without giving Signal a phone number at all. It costs $2.99, one time. And the thing that replaces your number is not another identifier you can look up. It is two strings of characters that only you hold.

I build a small encrypted messenger of my own, and its identity has always been a key pair rather than a phone number, so this change hits close to home. It is the biggest identity decision Signal has made since launch, and the interesting part is not that the number is gone. It is what Signal had to give up, and what it asks you to take on, to make that possible.

What actually happens when you sign up

On a fresh install of the Android app, the registration screen now has a second option at the bottom: register without a number. Tap it and Signal asks for a one-time in-app purchase, $2.99 in the US and €3.49 in Europe, prices varying by country. Once the payment clears, Signal generates two keys for you:

• An Account ID, 32 characters long. This identifies your account.
• A Recovery Key, 64 characters long. This restores your message history and media from a backup.

That is your account now. There is no phone number fallback. Signal is blunt about this in its own support docs: if you lose both keys, there is no way to recover the account. Support cannot look it up for you, because Signal does not store a record linking your identity to the account. The app pushes you to save both keys in a password manager during setup, and you should listen to it.

A username is optional on top of this. If you skip it, your account is completely unreachable. Nobody can find you or message you first. The only conversations you can have are the ones you start yourself. That sounds like a limitation, and it is, but it is also the point: an account that nobody can discover is an account nobody can target.

A few limits worth knowing up front. Signal Login only works for new accounts. If you already have a Signal account, you cannot drop the number from it yet, though Signal has said that may come later. It is Android only for now, with iOS to follow. And it still carries a beta label, which means the details can still move.

Why it costs three dollars

The fee is the part people argue about, and it is worth understanding instead of just reacting to it.

A phone number was never just an identifier for Signal. It was the spam filter. Getting a phone number costs something, it is tied to a real-world subscriber, and a carrier will cut you off if you abuse it. That friction is what kept Signal from drowning in bulk fake accounts. Remove the number and you remove the friction, so Signal had to replace it with a different kind of friction. Three dollars is that replacement.

It is a small amount on purpose. It is cheap enough that a real person barely notices it, and expensive enough that spinning up ten thousand fake accounts stops being free. It is the same logic behind proof-of-work puzzles and CAPTCHAs, just expressed in money instead of compute.

The payment itself is handled with the same zero-knowledge proofs Signal already uses for donations. The server can verify that somebody paid without learning which payment belongs to which account. That matters, because the obvious objection writes itself: you are paying to stay anonymous, so does the payment identify you? Signal's answer is that the cryptography separates the two. You should still know the practical side, though. On Android, the only way to pay right now is through Google Play billing, which needs Play Services and a Google account with a payment method on file. You can skip handing Signal your number, but you cannot yet skip Google's checkout. Signal has said more payment methods are planned, without naming them or giving a timeline. If you run a de-Googled phone, this door is closed to you for now.

What the number was protecting you from, and what it was exposing you to

People treat the phone number as a privacy problem, and it was. A phone number points at a telecom subscriber, a billing address, a SIM card that can be swapped by an attacker who talks a carrier employee into it. SIM swap attacks were one of the most practical ways to take over a Signal account, because the number was the account. Removing it closes that whole class of attack. Nobody can social-engineer a carrier into handing them your Account ID, because there is no carrier involved.

But the number was also doing real work for you, and losing it has a cost that is easy to miss.

A phone number is recoverable. Lose your phone, walk into a shop, get a new SIM, and your number comes back. Your Signal account came back with it. An Account ID and a Recovery Key are not recoverable. They are self-custody in the fullest sense: you are your own carrier now, your own customer support desk, your own backup system. Most people have never held an identity that works like that. A password manager helps, a piece of paper in a drawer helps, but the habit itself is new, and the failure mode is total. One lost string is an inconvenience. Both lost strings is an account that never existed as far as anyone can prove.

This is the trade at the heart of Signal Login, and I think it is the honest way to describe it. You are trading a recoverable identity owned by a telecom company for an unrecoverable identity owned by you. That is a better deal for privacy and a worse deal for convenience, and which side of that you land on depends on what you are actually worried about.

What it does not change

It is worth being clear about what Signal Login is not.

It does not change how messages are encrypted. The Signal Protocol is untouched. It does not change sealed sender, which already hid who sent a message from Signal's servers. It does not verify that the person behind an account is who they claim to be in real life. An Account ID proves that someone holds a key, not that they are a particular human.

And it does not remove the need for key verification. If anything, it makes the tools Signal shipped for that job more important. Signal's Automatic Key Verification, which arrived in August, checks a contact's key against an append-only public ledger instead of asking you to compare safety numbers in person. My own messenger took the older route: a safety number computed from both parties' identity keys, shown as 60 digits and a QR code, with a warning when a key changes. The mechanism differs. The problem is the same: when identity is a key, you need a way to know the key in front of you is the right one. Signal Login moves that problem to the front of the experience instead of the back.

The view from someone building a messenger

Here is the part that interests me most as a builder. For years, the standard answer to "how do I identify users" in messaging was a phone number, because it was the only identifier that was globally unique, hard to fake at scale, and something users already had. Every messenger inherited that answer, and with it inherited the telecom system: SIM registration laws, number recycling, carrier databases, all of it.

Signal just showed that the answer can be different. Identity can be a key pair you generate on the device, with a small payment standing in for the anti-spam job the number used to do. That is a real design shift, and I expect other messengers to study it closely, because it unbundles identity from telecom. A messenger no longer needs a country's phone system to know who its users are.

But it also shows why the phone number survived so long. The number was doing three jobs at once: identity, spam prevention, and recovery. Signal Login splits those three jobs apart and hands one of them, recovery, entirely to the user. That is a brave design choice and a demanding one. Whether ordinary users accept it will decide whether this stays a niche option or becomes the default way to join Signal.

My guess is that it stays optional for a long time, and that is fine. Most people will keep the number, because it is free and it recovers itself. The people who pay three dollars are the ones for whom a phone number is not just inconvenient but dangerous: people whose number identifies them to someone they need to stay hidden from, people in countries where a SIM is registered to a national ID, people who simply do not want a telecom company standing between them and their conversations.

For them, three dollars is not a price. It is the first time the door was open at all.

Should you use it?

If you are creating a fresh Signal account and your phone number is something you cannot safely attach to your messaging, yes. Save both keys in a password manager before you do anything else, add a username only if you want to be findable, and understand that losing those keys means losing the account.

If you already have a Signal account that works, there is nothing to do right now. You cannot migrate yet, and your number is already hidden from other users by default.

And if you are building a messenger yourself, pay attention to the shape of this decision. The interesting question is no longer whether identity needs a phone number. Signal just answered that. The interesting question is what you do with the recovery job once the number is gone, because that is the part nobody has solved well yet, and whoever solves it will decide what the next decade of private messaging looks like.

---

Sources: Signal Support, "Phone Numberless Registration for Android beta"; Signal Community forum, Greyson Parrelli on the 8.28 beta (16 September 2026); AboutSignal, "Signal registration without a phone number now available on Android" (17 October 2026); Gizmodo, "Signal Finally Lets You Skip the Phone Number, but Now Google Is Involved" (24 September 2026).