Signal vs WhatsApp for Journalists
Published March 2026 · Last updated March 2026
Use Signal for source communication. Both apps use the Signal protocol for encryption, but WhatsApp sends extensive metadata to Meta including contacts, timing, and IP addresses. In January 2025, Paragon spyware targeted roughly 90 journalists through WhatsApp.
| Signal | ||
|---|---|---|
| E2E Encryption | Yes, always on | Yes, Signal protocol |
| Metadata Collection | Minimal (phone number only) | Extensive (contacts, IP, timing, device info) |
| Open Source | Yes, full client and server | No |
| Owner | Signal Foundation (nonprofit) | Meta Platforms |
| Data Jurisdiction | United States | United States (Meta) |
| Free Option | Yes, completely free | Yes, ad-supported ecosystem |
| Security Rating | Strong | Caution |
| Best For | Source communication, sensitive conversations | Reaching sources who only use WhatsApp |
When to use Signal
Signal is the default recommendation for any conversation involving confidential sources, sensitive story leads, or internal newsroom coordination on investigations. The app collects only your phone number. Messages, contacts, group memberships, and profile information are not accessible to Signal's servers. Disappearing messages add a second layer of protection if a device is seized or compromised.
When to use WhatsApp
WhatsApp has over 2 billion users. In many countries, it is the only messaging platform sources use. If a source cannot or will not install Signal, WhatsApp with disappearing messages enabled is better than unencrypted alternatives like SMS or regular phone calls. Enable disappearing messages, avoid cloud backups, and move to Signal for follow-up conversations when possible.
The verdict
Signal wins on every security dimension that matters for journalism. The encryption is equivalent, but metadata is the real vulnerability. Meta's data collection can reveal who you talk to, when, and from where. The January 2025 Paragon spyware incident showed WhatsApp remains an active target for surveillance of journalists. Use Signal as your default. Use WhatsApp only when the source has no alternative.
Frequently asked questions
Is WhatsApp safe for journalists to use with sources?
WhatsApp uses the Signal protocol for message encryption, but Meta collects extensive metadata including who you contact, when, how often, and your IP address. In January 2025, WhatsApp was used as the vector for Paragon spyware targeting approximately 90 journalists. Signal is the stronger choice for source communication.
Does WhatsApp collect metadata even with end-to-end encryption?
Yes. WhatsApp encrypts message content but Meta collects contact lists, usage frequency, timing of messages, device information, IP addresses, and location data. This metadata alone can identify sources and map reporter networks.
Why do some newsrooms still use WhatsApp?
WhatsApp has over 2 billion users globally, making it the default messaging app in many countries. Sources in regions like Latin America, South Asia, and Africa may only have WhatsApp. In those cases, use disappearing messages and move sensitive conversations to Signal when possible.
Is Signal really free?
Yes. Signal is free, open-source, and funded by the Signal Foundation, a 501(c)(3) nonprofit. There are no ads, no tracking, and no paid tier. The entire codebase is publicly auditable on GitHub.
Assessment by Mike Schneider at Fieldwork. Read our methodology or browse all tool ratings.