My friend and I were discussing cell phone security and he said that if someone backdoored your phone that they could read all your signal messages. Is this true? I would think that the only way to view signal messages is to literally open up the app and view them.
You are both sort of right. Signals on device storage is AFAIK only weakly encrypted with your screen-lock password (although you can enable a second weak password in Signal specifically). So if your phone is unlocked and backdoored the attacker can pretty much do what ever they want including reading your Signal messages.
Lynda@lemmy.ml 2 years ago
If a device is compromised, the adversary can do whatever they want: screenshots, keyloggers, fork Signal and install their own client.