In a surprising revelation during Tuesday's Senate Intelligence Committee hearing, CIA Director John Ratcliffe disclosed that the encrypted messaging app Signal comes pre-installed on CIA computers and is approved for official communication within the agency.
"One of the first things that happened when I was confirmed as CIA director was Signal was loaded onto my computer at the CIA, as it is for most CIA officers," Ratcliffe stated during his testimony. He noted this practice began during the Biden administration with approval from CIA records management officials.
The disclosure comes amid controversy over a Signal group chat involving high-level Trump administration officials discussing military operations in Yemen. The Atlantic reported that sensitive operational details were shared in the chat, which inadvertently included a journalist.
Signal, launched in 2014, provides end-to-end encrypted messaging that prevents third parties from accessing conversation content. The app has grown from 12 million users in 2020 to 70 million worldwide in 2024.
The Pentagon's internal watchdog previously criticized government officials' use of Signal, noting in a 2021 report that it was "not approved by the DoD as an authorized electronic messaging application." However, Ratcliffe maintained that Signal use is permitted for CIA work purposes "provided that any decisions are also recorded through formal channels."
Security experts note that while Signal offers strong encryption during message transmission, it cannot protect against compromised devices or human error, such as adding unintended participants to sensitive discussions.
The revelation highlights an apparent shift in the government's stance on encrypted messaging apps, which law enforcement agencies like the FBI had previously characterized as tools enabling criminals to "go dark" and evade surveillance.
Democratic senators criticized the use of Signal for sensitive military planning, with Sen. Jon Ossoff calling it "an embarrassment" and "utterly unprofessional." The incident has sparked broader debate about security protocols and communication practices at the highest levels of government.