Signal Username vs Phone Number: The Privacy Guide

A Signal username hides your phone number from other people, but it does not remove the number from your account. Signal still requires a working phone number to register, and that did not change when usernames launched in 2024. So the goal is not "skip the number." The goal is to register with a number that isn't your personal line, then use usernames and the discovery settings to keep the registration number invisible to everyone who doesn't already hold it.

This guide is written for people who take that distinction seriously: journalists, researchers, anyone who needs a defensible mental model of what Signal actually conceals. A lot of advice online treats usernames as a way to run Signal with no number at all. That's wrong. And believing it can leave you exposed in exactly the situations where you were counting on privacy. Below is the honest version, built on Signal's own documented behavior and defaults.

Why Signal Still Asks for a Number

Signal's encryption gets the headlines. The phone number does a different job entirely.

Encryption is the part Signal never compromises on: the service does not see the content of your messages, full stop. The number lives at a separate layer. It is Signal's identity and contact-discovery mechanism, the thing that lets the app tell your contacts "this person is reachable on Signal" and lets you find people you already know, without Signal keeping a copy of your social graph on its servers.

Signal has been explicit that the requirement survived the username era. From the official documentation:

"You will still need a phone number to sign up for Signal, even if you want to use a username."

No hedging there, and no announced plan to drop the requirement either. Signal's stated reasons are contact discovery and limiting spam: a phone number is a modest cost that makes mass automated account creation harder, which protects the whole network.

It helps to be precise about what the number does not do, because critics and defenders of Signal both blur this. The number is not part of your message security. It never appears inside your encrypted conversations, and Signal cannot read those conversations whether you registered with your personal line or a separate one. The number is about who can discover you and how the account is addressed. Content and discovery are different problems, and Signal's architecture treats them differently.

Now the part where most confusion starts. When people say "I want Signal without a phone number," they usually mean one of two things. Either they don't want their personal number tied to the account, or they don't want other people to see their number. Different problems, different fixes. Signal solves the second one well with usernames and discovery settings. It does not solve the first one by itself; that depends entirely on which number you hand over at registration. Keep those two goals separate in your head and every decision below gets easier.

What the Username Update Actually Changed

Picture handing a source a way to reach you that reveals nothing but a handle you invented last week. That is the real gift of usernames, and it arrived in February 2024 alongside a set of phone-number privacy controls, available from Signal 7.0 onward.

What changed: before usernames, starting a conversation on Signal effectively required knowing someone's phone number. After usernames, you can be contactable by a handle alone, shared as text or as a QR link. What did not change: the number is still the account's underlying identity, still required at registration, and still visible to anyone who already has it saved.

The username rules themselves are specific, and worth knowing before you pick one:

• A username is 3 to 32 characters, and Signal appends a short numeric discriminator of at least two digits, so many people can share the same base name without collisions.
• Usernames are changeable at any time. Changing yours invalidates the old one immediately.
• A released username sits in limbo for roughly one week before anyone else can claim it.
• They are deliberately disposable. Hand out a handle for one project, retire it later, and the rest of your account is untouched.

For a journalist, that rotation ability is quietly powerful. Print one handle on a tip line page, give a second to a specific source, keep a third for colleagues. If one context turns sour, you retire one username and the other two keep working. Nothing about your account, your number, or your other contacts changes.

Here's the mental model that keeps you out of trouble. The username is a door people can knock on. The phone number is the deed to the house. You can change the door, or hide which street the house is on, but none of that changes who holds the deed. That framing matters most in the next section, because the defaults do not do what many people assume.

Two Settings Decide Who Sees Your Number

So where does the number actually show up? Signal exposes two discovery settings, found under Settings → Privacy → Phone Number, and together they decide how visible and how usable your number is to others. Their official defaults are not the strictest configuration available, so leaving them untouched is a decision, not a neutral state.

Read the asymmetry carefully. By default Signal already hides your number from new people you message. Good. But by default, anyone who has your number can still look you up on Signal with it. To close that second door, switch "who can find me by my number" to Nobody. Signal enforces a dependency here: find-me can only be Nobody if see-me is also Nobody. At the strict end it's all-or-nothing, which is sensible. There is little value in blocking discovery while still showing the digits.

With both set to Nobody, the only way a stranger reaches you is your exact username. The number becomes an internal registration detail instead of a public contact address. That is the configuration this whole guide is building toward.

One limit survives every toggle, and it surprises people constantly. If someone already has your number saved in their phone contacts, they will keep seeing that you're on Signal under that number. The discovery settings govern strangers and new contacts, not people who already hold your digits. No setting pulls that information back after the fact. If your threat model includes specific individuals who already know your number, the only real fix sits upstream: don't register with a number those people can associate with you. Which brings us to the order of operations.

The Setup Order That Actually Protects You

Sequence matters here. Do the steps out of order and you can briefly expose the very thing you're trying to protect. Done in this order, there is no window where your personal number touches the account and no window where the account sits undefended.

1. Register with a number that isn't your personal line. This solves the problem usernames can't. Sign up using a separate number and your personal line never enters the account at all. Signal's only technical demand is that the number can receive an insecure SMS or a phone call at registration time. If you need a source for a separate number, our Signal number service runs on a pay-per-code model: you pay for the verification code you actually receive, and numbers are not resold for the same app, which suits a register-once workflow. Pricing for other apps lives on the full service list.
2. Set a username. Choose a handle so people can reach you without digits. Share the username or its QR link from now on. Because usernames are cheap to rotate, you can issue one per context and retire it when that context ends.
3. Switch both discovery settings to Nobody. First "who can see my number," then "who can find me by my number" (the app requires that order). After this, your username is the sole path a stranger has to you.
4. Create a Signal PIN and enable registration lock. This is the takeover defense, covered in depth next. Turning it on from day one means the account is protected before anyone has a reason to attack it.

Why this exact order? Step 1 before everything, because a username added after registering with your personal number hides nothing from the people who already have it. Step 3 before you start messaging widely, because the find-me default is Everybody until you change it. Step 4 early, because registration lock defends the number from the moment it matters.

The most common mistake we see described in forums is skipping straight to usernames. It feels like privacy. It hides the number from strangers while leaving your personal line embedded in the account for anyone who already has it saved.

The PIN and Registration Lock, Without the Sugarcoating

People skip this part or misunderstand it, and it is arguably the most consequential setting in the app. So let's be careful.

Your Signal PIN is a code that protects account data and can be required when your number is re-registered on a new device. Pair it with registration lock and re-registering the number requires the PIN. That is the mechanism that stops someone who gets hold of your number, by recycling, loss, or theft, from simply claiming it on Signal.

Two facts are non-negotiable, straight from Signal's documentation. Signal cannot recover your PIN; it isn't stored anywhere Signal can read. And a forgotten PIN with registration lock enabled can lock you out of re-registering your own number for up to seven days.

Then there's the caveat most guides omit. Registration lock expires after seven days of account inactivity. Once it lapses, the number becomes re-registrable with a new PIN, and the protection is quietly gone.

There is one convenience on the upside: Signal supports a device token plus PIN as a re-registration path in some cases, meaning you may not need a fresh SMS to the number when you still control the account. Useful, particularly when your registration number is a separate line you don't carry daily.

Pick a PIN you can remember without writing it somewhere insecure, and don't make it guessable. Since no recovery path exists, the PIN is a genuine single point of failure. Losing it can cost you a week of access to your own number and, permanently, any data the PIN protected. For a privacy-conscious user that trade is usually worth it. But make it a trade you accepted on purpose, not one you discover during a lockout.

When a Number Gets Recycled

Carriers reassign disconnected numbers all the time. So what happens on Signal when a number changes hands, in either direction? This question matters twice over for a separate-number setup: the number you register with may have had a previous life, and the number you register with may one day pass to someone else.

The most reassuring fact first: Signal keeps no server-side message history. Messages live on the devices in a conversation, nowhere else. A new owner of a recycled number inherits nothing of the previous owner's conversations, because there is nothing on the server to inherit. When a new registration lands on a number, it also invalidates the old account's registration tokens, so the previous account loses its claim to that number on Signal.

Two visible safeguards kick in around a takeover, and both work in your favor. Contacts of the previous owner see a safety-number-change alert. And if the previous owner had registration lock enabled, the new owner waits up to seven days before they can register at all. Same lock mechanic as the last section, doing its job against an unwanted takeover.

The lesson cuts both ways for your own setup. Registration lock is what stands between your registered number and a quick takeover by whoever holds it next. And because the lock decays with inactivity, an account you intend to keep secure is an account you keep at least minimally active. Simple habit, real protection.

One Phone, Five Linked Screens

One primary phone per number, up to 5 linked devices, 30 days and 45 days as the two timers to remember. That single line is most of Signal's device model. The details are where people get caught.

One phone holds the primary registration for a number. From it you can link up to five secondary devices: an iPad, the desktop app, and so on. The desktop client cannot register a number on its own. Ever. It only links to an existing phone account, which means there is no phone-free, desktop-only Signal account. The phone stays the root of the whole setup, consistent with everything above about the number being the account's identity.

Two behaviors follow that catch people out. Registering your number on a new phone knocks the old phone offline; Signal runs one authoritative primary, not two in parallel. And linked devices are not permanent. A linked device drops after roughly 30 days if the primary phone stays offline, or after about 45 days of that linked device sitting unused. If your desktop stops syncing after a long break, an expired link is the usual culprit, and re-linking from the phone fixes it in a minute.

For a privacy setup, the device model reinforces one habit: keep the primary phone under your control and keep it active. The phone anchors the registration and every linked device hanging off it, so its security is the account's security. Let the primary go dormant and you weaken two things at once: the registration lock, which decays after seven days of inactivity, and your linked devices, which start a 30-day countdown the moment the phone goes dark. Active, controlled, singular. That is the shape of a healthy Signal primary.

Getting a Code on a Separate Number

Registration is where a separate-number plan meets reality, so let's be precise about what Signal documents and what it doesn't.

During signup, Signal sends the verification code by SMS first. If it doesn't arrive, a Call me option unlocks after a timer and delivers the code by voice instead. That fallback matters more than it looks, because voice delivery often succeeds where SMS routing to a particular number is unreliable. Rate limits exist but Signal doesn't publish the thresholds; retry too fast and you can be told to wait an hour, then longer. So don't hammer the button. Each failed burst can stretch the next wait. Registration also includes a CAPTCHA, and Signal has documented ongoing proof-of-humanity checks when certain usage thresholds are exceeded, with the triggers unpublished. Routine stuff for a service fighting automated abuse; for one normal registration it rarely surfaces.

Now the virtual-number question, answered without overpromising. Signal's stated requirement is only that the number can receive an insecure SMS or phone call. No official block on virtual numbers is documented anywhere we can point to. Real-world reports are mixed all the same: some virtual numbers get classified as landline or rejected, and the voice-call option is the common way through when SMS delivery is the sticking point. Whether Signal filters by line type server-side is simply not documented, so nobody can honestly promise universal compatibility. The rational stance: confirm at registration, and buy from a source where a dead number costs you nothing.

That is the model behind our Signal number service: pay-per-code billing, an automatic refund inside 10 minutes if no code arrives, 180+ countries, and numbers that aren't resold for the same app, so you're not registering on a line someone else already used for Signal. As of July 2026, prices look like this:

Which country should you pick? For Signal there is no wrong answer on paper, since the app accepts numbers from any country code it supports and your account works globally either way. Practical considerations still apply. A number from a country your contacts would expect draws less attention in the rare cases the number is visible, and the cheaper tiers above leave room to try a second country if the first number and Signal's delivery don't get along.

If you already run this kind of separate-number workflow for other messengers, the pattern will feel familiar. Our WhatsApp virtual number setup guide walks the same idea through a messaging app where the number is likewise mandatory.

One plain word on responsibility, since this audience will appreciate it stated directly: a separate registration number is for protecting your privacy, not for evading rules that apply to you. Follow Signal's terms of service and your local laws. Decoupling your personal line from a sensitive account is a legitimate need, and it deserves to be handled that way.

Where the Privacy Tools Stop

A guide for privacy-conscious readers owes you the boundaries as plainly as the capabilities. Signal's tools are good. They are not magic. Here is the full list of what they cannot do:

• They can't hide your number from people who already have it. Discovery settings and usernames govern strangers and new contacts. Anyone who already saved your digits keeps seeing you under them, and no toggle reverses that. The defense against a specific person who knows your number sits upstream, in which number you registered with.
• They don't change what's encrypted. Signal never sees message content regardless of these settings. The number is about discovery, not content. Hiding it changes who can find you, not how your messages are protected, and conflating the two leads to sloppy reasoning about real exposure.
• Registration lock won't guard a dormant account. Seven days of inactivity and it lapses. It is a defense for an account you use.
• Your PIN is unrecoverable. Losing it is a permanent cost, not an inconvenience support can undo.
• Virtual-number compatibility isn't guaranteed. Server-side behavior on line types is undocumented, so plan for the occasional number that won't take a code, lean on the voice fallback, and use a pay-per-code source so a miss costs nothing.

Hold those limits next to the setup and the full picture is accurate: register with a number that isn't your personal line, set a username, close both discovery settings, lock the account with a PIN you'll keep and an account you'll keep active. For a journalist or researcher, that combination is a defensible posture. Your personal number never touches the account. Strangers reach you only through a handle you control. The number underneath is hardened against takeover.

What remains is maintenance, and not much of it. Keep the primary phone in your hands. Open the app often enough that the lock stays in force. And rotate your username whenever a context you shared it in is no longer one you want to be reachable from.