Signal vs WhatsApp Comparison
| Feature | ||
|---|---|---|
| Overview | ||
| Rating | 8.2 | 6.3 |
| Pricing | Not specified | Not specified |
| Free tier | Free tier | Free tier |
| Established | Not specified | Not specified |
| Platforms | ||
| Encryption | ||
| E2EE by default | All chats | All chats |
| Group chat E2EE | All groups | All groups |
| Protocol | Signal protocolShow detailsHide detailsDouble Ratchet with PQXDH, a post-quantum key agreement (September 2023); a Sparse Post-Quantum Ratchet added on top was announced in October 2025 | Signal protocolShow detailsHide detailsThe Signal Protocol, with Sender Keys for group chats; connections between the apps and WhatsApp's servers run through a separate Noise-based encrypted channel. |
| Forward secrecy | Yes | Yes |
| Post-compromise security | Yes | Not specified |
| Identity & metadata | ||
| Sign-up needs | Phone number | Phone number |
| Metadata protection | Sealed senderShow detailsHide detailsSealed sender hides who is sending a message from Signal's servers, which still see the recipient and the connection's IP address. A phone number is still needed to sign up; usernames only hide it from other users. | StandardShow detailsHide detailsWhatsApp collects usage, device and connection information and shares information with the other Meta companies; it states it does not retain messages once they are delivered. |
| Contact discovery | Phone numbers (hashed) | Address book stored on server |
| Jurisdiction | United StatesShow detailsHide detailsOperated by Signal Messenger LLC; the trademarks belong to Signal Technology Foundation, a 501(c)(3) nonprofit. | United StatesShow detailsHide detailsWhatsApp LLC is based in Menlo Park, California; users in the EEA are served by WhatsApp Ireland Limited. |
| Telemetry | No telemetry | Always on |
| Transparency | ||
| Client code | Fully open source | Closed source |
| Server code | Fully open source | Closed source |
| Reproducible builds | Yes | Not specified |
| Independent security audit | None on record | NCC Group 2023Show audit detailsHide audit detailsImplementation review of the Auditable Key Directory library behind WhatsApp's key transparency feature, commissioned by Meta; a separate 2024 NCC Group assessment covered the protocol that stores contacts. Neither covers the apps' messaging code as a whole. |
| Past data breach | Yes | Yes |
| Architecture & features | ||
| Server model | Centralized | Centralized |
| Self-hostable | Not specified | Not specified |
| Multi-device | Needs primary phone | Needs primary phone |
| Backups | Encrypted cloud backup | Encrypted cloud backup |
| Voice & video calls | Yes | Yes |
| Disappearing messages | Not specified | Yes |
| Funding | ||
| Funding | DonationsShow detailsHide detailsGrants and donations, plus an initial loan from Brian Acton. Signal's own November 2023 estimate puts running costs at about $50 million a year by 2025. | Parent companyShow detailsHide detailsFunded by its parent company, Meta. Ads appear only in Status and Channels, separate from personal chats and calls. |