Feature Request: Option to auto-save received images/video to camera roll

[eharris]

Nearly all other chat apps allow some form of auto-save to camera roll/image gallery of received images and videos. Matching this functionality in Signal would be great option, preferably on a per-conversation/per-contact basis.

[GPMueller]

I absolutely agree that this should be available, but I suggest that in contrast to other apps, this should be opt-in (i.e. off by default).

[NiklasBr]

I also wish Signal could auto-save my sms history, (only to the encrypted iTunes backup if possible).

[p0ll3]

That feature is essential, at least if you try to get whatsapp users to join signal. Most of my Friends beef about that.

[NiklasBr]

@p0ll3 please add your voice to #2542

[ksnell88]

Old feature request but I wanted to put another vote in for being able to auto save all media to camera roll (iOS) on a chat-by-chat basis. There are some chats where I know I will want to save all media, and I have to go through the tedious process of saving them each (and being sure not to duplicate).

[Berghopper]

I also agree that this should be an option (maybe also make it configurable during first use?). Especially in the case where, let's say your screen is broken, recovery of media can be much more difficult.

[Meteor0id]

automated saving to camera roll would go against the idea that users should never be given an option to compromise their own security without continuous consent for every time such compromise is made. I my view Signal is setting an example for real secure messaging. Giving people the option to export images outside the encrypted app is fine, but doing it on every image without keeping the user aware is bad security practice and that options shouldn't be offered to the user because the app should alos keep the user safe from his own mistakes.

[GPMueller]

Then how about some sort of button, which would appear below each received image (or set of images)? It would make exporting much easier compared to now, as one would not have to navigate any menus. It could in principle also indicate if an export has previously taken place.

[Meteor0id]

I have no opinion about how it should look and where such button would be shown, but what you propose does resolve the privacy concern of decrypting without keeping the user aware.

Seeing the image or group of images before you activly decide if you want to save them to the camera roll is the way to go.

[Berghopper]

@GPMueller @Meteor0id Why not a global option that is off by default? Make it per chat (type) too. I do agree automatically saving to camera roll could potentially be a privacy risk, but a lot of people are just used to the idea of having it there, which would make transition into Signal easier.

I think it should be selectable at setup time of the app as well, to highlight this option is off by default.

[eharris]

I agree this option should be off by default, but I cannot comprehend why some people think it is right to not even allow people to enable this if they want. It seems to me to be the height of arrogance to think your security preferences should be the only way that is allowed. If you don't want to do it, don't enable it, but don't disallow me from doing what I wish with my own device and my own media.

I am using Signal only for private communication, not for private storage. I do not believe that media sent to me is any more secure just because it's supposedly only accessible inside an app rather than in my camera roll, it is just a lot more inconvenient (and uselessly so) for me to use that content how I want without any security gain. Once media is sent to me, I should have the right to do with it what I want without having to jump through manual hoops every time.

[Meteor0id]

What the original post suggested was a single switch to send all inconing messages to the canera roll without further user actions. This shouldn't be allowed because it compronises security of the user, and it does so without confronting him about it.

When media are send to you in Signal, they are stored on your device as encrypted data. Even if some law enforcement (say the Chinese customs when you enter their country) were to look into your device, if they can't unlock Signal they can't see those media. If a mallicious app is installed on your phone which scans or uploads some of your media, it can't do that to media you receive on Signal because those are encrypted. An encrypted Signal media item can be deleted permanently eithout fear that it still lingers on your storage and a forenstic tool could recover it.

Signal should offer a button to export media, but that should remain a contious action of the user on a per item or per group of sekected items. By limiting this functionality to a manual action, the user is forced to consider the security risk, and to stay aware of the existance of some risks.

You not believing that your media are more secure if bot exported is just an example of how humans are not good at assesing risk ahead of time. The decision to export media should be taken when you know what this media is, not ahead of time.

Is it arrogant of anyone to not always permit you to do what you want with Signal? I don't think so. Signal is an app about secure and private messaging. Its scope is limited to secure messaging. If you want to opt for insecure, than you do have that freedom, by choosing another app.

I am not member of Signals developing team, I'm just another user, so maybe you'll get lucky and they agree with you. But my opinion is that security by design can sometimes also require that the user can't shoot himself in the foot even if he would like to.

[ksnell88]

Opt-in autosave makes perfect sense (with the ability to tweak chat-by-chat) so the default is more privacy yet a useful feature can be added.

The concerns about "shooting yourself in the foot" are unwarranted IMHO considering you can already toggle on "Show Calls in Recents" in the iOS Phone app under the Privacy settings. Signal already interfaces with the Phone app so what is the difference with the Photos app?

[z4ndr3i]

Similar to WhatsApp, there should be an option within each 1:1 or group chat to automatically save received media to the camera roll. I'm not of the opinion that it should be a global switch (like in WhatsApp), but it should be available to be turned ON/OFF on a convo-by-convo basis.

One size does not fit all & I cannot wait to get rid of WhatsApp, but I'm not going to manually save or export each [insert-your-harmless-type] picture I get from fam & friends.

[onnokleen]

I agree - I am not taking many photos myself and rely on my friends :) An opt-in per conversation would be great (for example that with my wife).

[norcon]

Please add this feature. That would be great

[themartorana]

Trying to move my family to Signal away from WhatsApp and Facebook, and this is the single complaint I've gotten from everyone. Opt in makes sense. Even a warning or periodic reminder makes sense (Google Photos started doing this with auto-sharing.)

[ghost]

This feature is what I currently miss the most at Signal. Privacy and security first, but the choice and freedom for users second! :)

[evertvh]

This issue prevents many of my contacts from using Signal.

[Meteor0id]

I personally think that adding a global option to save all incoming media in an unencrypted fashion woukd cause many users to expose their media to other apps on their device, and I think many people do not know or do not believe that there us a real risk that other apps fingerprint or even steal your media, or they don't believe it matters if any app does that.

I think Signal should not offer a global save all media unencrypted option, but should instead start writing articles or videos to explain this thread and make people aware that it really exists and that it's wise to keep media encrypted at all times.

[NiklasBr]

All iOS devices are encrypted since a very long time ago, including Data Vaults.

[eharris]

Also, what's being asked for isn't a "Global save all media" option. I, and probably most others, would be fine with a per contact or per group thread opt-in option.

Part of the problem is the arrogance of the mindset that just because some users' choices aren't your choices, that you are somehow justified in refusing to allow them to use software in the way they want, or that they need to be educated/indoctrinated to adopt your mindset. You are denying users the ability to use Signal's superior "in-transit" security when some people don't want or need super strict (and sometimes very inconvenient) "at-rest" security.

My data is exactly that: MY data. I should be able to do with it what I want, including save it automatically/conveniently.

[onnokleen]

Also, what's being asked for isn't a "Global save all media" option. I, and probably most others, would be fine with a per contact or per group thread opt-in option.

Part of the problem is the arrogance of the mindset that just because some users' choices aren't your choices, that you are somehow justified in refusing to allow them to use software in the way they want, or that they need to be educated/indoctrinated to adopt your mindset. You are denying users the ability to use Signal's superior "in-transit" security when some people don't want or need super strict (and sometimes very inconvenient) "at-rest" security.

My data is exactly that: MY data. I should be able to do with it what I want, including save it automatically/conveniently.

I agree completely. I would be even happier about a per-chat opt-in than about a global option.

[eharris]

I should also note, that for me (and likely others) LOSS of data is a much bigger concern/risk than BREACH of data. Disallowing any form of auto-save practically guarantees that people will forget to save something and thereby lose it, or when something completely innocent (from a security aspect) occurs, like when their phone gets unexpectedly broken and has to be replaced.

[Meteor0id]

The problem of an opt-in to autosaving is that you are opting-out of additional security, and you can then forget it for years to come. You opt-out of encrypted storage in 2021, and in 2026 you have some nalware on your device which fibgerpribts or copies all your media. Yes you should be allowed to take a risk, but you should be kept aware that you're taking risk.

I would also rather call it an opt-out of encrypted storage rather than an opt-in to saveing to unencrypted storage, to reflect thst you are not using some option rather than using an additional option.

[eharris]

Do you really think someone is going to still be using the same phone 5 years later? In any case, fine, make the option have to be reconfirmed once a year if you like, as long as the means of re-confirmation makes absolutely CERTAIN that the auto-save opt-in doesn't get accidentally turned off without the user being aware (and thus risking the unrealized loss of their data).

What you call it probably doesn't matter, as long as the functionality is there and what the option does is made clear.

[evertvh]

Is there a way we can bring more attention to this issue? Or just wait and see and hope it will be picked up at some point?

[langbnj]

Please add this as an opt-in feature, yes!

It's important to me to have photos and videos in one place (namely iCloud) so they will be backed up, rather than being locked inside one of five messaging apps.

[wali-khan]

So if am guessing it right... this isn’t considered to get developed cuz of security concern?

[thisisbhavin]

I don't understand how is this a security issue if there is a warning when users opt-in. If they consciously choose to save media then they should be allowed to do so. This is the single feature holding me from recommending my friends and family to use this app.

[thisisbhavin]

If nothing else then give the user the ability to save multiple media at a time. Currently, you have to save single media at a time, and looking at 50 remaining photos to save, I just give up!!

[M4RC02U1F4A4]

I don't understand how is this a security issue if there is a warning when users opt-in. If they consciously choose to save media then they should be allowed to do so. This is the single feature holding me from recommending my friends and family to use this app.

Also it is possible to save the photo when it is received, so this feature would be just an extra convenience Opt-in option for every single chat would be great

[darraghenright]

At the risk of sounding like a +1 comment, I'd like to lend my support to this feature as well.

The number of non-tech savvy friends and relatives (including my seventy-something year old aunt) who have contacted me asking about Signal this week has been astonishing — people are really spooked about WhatsApp's upcoming changes and are seriously looking into alternatives.

Making a speculative leap that this is happening elsewhere, this seems like an incredible opportunity for Signal to convert users, and any features that enable familiarity can only help. I very much appreciate that usability and security can be at odds with each other, but an auto-save feature with explicit opt-in seems reasonable to me, if implemented thoughtfully.

When a user is presented with the question, let's assume for argument's sake that the setting is per chat: "do you want to save images sent to this chat? y/N" they are given an ample opportunity to weigh up their own priorities in this matter, and decide accordingly. Especially if they are provided with useful information outlining the implications of their decision if they accept.

[z4ndr3i]

Signal's website reads:

"Say "hello" to a different messaging experience. An unexpected focus on privacy, combined with all of the features you expect."

I expect the feature of saving media automatically, per 1:1 chat or group basis, to the phone's camera roll. Thank you in advance.

[huian]

We are in the midst of converting a large amount of friends/family groups (messaging platform across countries we live in), from Whatsapp to Signal. Two issues are preventive and standing in our critical path 1.) Auto-save media (voice, images, videos) - we are fine with an explicit opt-in model. And 2.) Web version of using the Signal platform. We consider 1. as absolute essential, and 2. as a second priority (prefer but can be delayed). If Signal wants to capture this golden opportunity there is no better time than NOW to get this feature delivered. Once Feb 8 hits, some users may quickly become complacent to Whatsapp's "renewed" privacy policy, and if you can't get the majority switch over the tipping point, you will not see the major adoption. Download is through the roof, but it's a smoke screen for now - it does NOT equate Migration. Most who downloaded Signal are still running Whatsapp - the next month will be the most important decision period.

[GPMueller]

It was recently tweeted that Signal will be rolling out this feature soon 🎉

Here's a sneak peek at some new Signal features that will start rolling out in a few days: • Chat wallpapers! • About field for your Signal profile • Animated stickers • For iOS: Media auto-download settings and full-screen profile photos (to match Android)

At least that's what I'd expect from "media auto-download settings".

[M4RC02U1F4A4]

It was recently tweeted that Signal will be rolling out this feature soon 🎉

Here's a sneak peek at some new Signal features that will start rolling out in a few days:

• Chat wallpapers!

• About field for your Signal profile

• Animated stickers

• For iOS: Media auto-download settings and full-screen profile photos (to match Android)

At least that's what I'd expect from "media auto-download settings".

auto-download for me indicates that it will be possible, once I receive the photo/video, to download it immediately or wait and do it later

auto-save is another thing

[FinixFighter]

• For iOS: Media auto-download settings and full-screen profile photos (to match Android)

Only for iOS? What about Android? :(

[manideep444]

Please add this feature to Android!

[NiklasBr]

@FinixFighter, the Android repository is at https://github.com/signalapp/Signal-Android you can ask there. Judging by the "...(to match Android)" part of the change log the ability to download images to the chat without having to tap on them should already work on Android

[securitytime]

• For iOS: Media auto-download settings and full-screen profile photos (to match Android)

Only for iOS? What about Android? :(

The ability to auto-download media already exists for Android via Settings > Chats and media > Media auto-download. However, this does not save the images to the image gallery. I suppose now iOS is getting the same feature. That's how I interpret the "to match Android" announcement.

I wish Signal had the ability to automatically save images to the image gallery, like WhatsApp does. I tried to convert some family members from WhatsApp to Signal and each time this issue arose.

[fre-lax]

We were planning to install Signal on my grandmother's tablet but it doesn't make any sense if she cannot see the pictures in the camera roll...

[N-Prime]

I really hope this is in the works and coming soon. I got my family to migrate from WhatsApp to Signal and one of the main ways we use it is for my sister to send the group photos of her new baby.

I've already told them that they need to manually save each photo if they want to get copies to their camera roll and to be backed up with their other photos, but I don't know if it's sank in yet. I'm worried they're going to have a rude awakening in a few months when they realize what I've said and find they're going to need to go back and manually save each photo going back those months.

To compensate I will probably save all photos so I can easily transfer copies to them if they start making noise about it (my sister could do it too, but I don't want to put her through more trouble, especially since this is supposed to be a way of easily giving copies of photos to people in the family).

The problem is accessibility - yes, it gets the photos to people, but when they're saved by default in Signal's encrypted storage separate from the camera roll, the photos aren't 100% accessible.

[fre-lax]

If Signal cares so much about privacy, just add this function to the feature: If I send a picture to a person who has turned on auto export I get a message "This person has turned on auto export. That means pictures you send will be saved on their phone outside of Signal and can be accessed by other applications." [Send anyways and don't show this message for this person again], [Send anyways and remind me later], [Don't send the picture/ Cancel]

And mabye there even should be an option [Turn off auto export for this picture]

I think that would solve the security issue.

[M4RC02U1F4A4]

If Signal cares so much about privacy, just add this function to the feature: If I send a picture to a person who has turned on auto export I get a message "This person has turned on auto export. That means pictures you send will be saved on their phone outside of Signal and can be accessed by other applications." [Send anyways and don't show this message for this person again], [Send anyways and remind me later], [Don't send the picture/ Cancel]

And mabye there even should be an option [Turn off auto export for this picture]

I think that would solve the security issue.

You should then put the protection from screenshots and apply the same procedure for each photo, since at this moment the photos can be manually saved on the device

This would be just an extra inconvenience, Signal must protect the communication between users, but then it's up to users to trust each other

[fre-lax]

If Signal cares so much about privacy, just add this function to the feature: If I send a picture to a person who has turned on auto export I get a message "This person has turned on auto export. That means pictures you send will be saved on their phone outside of Signal and can be accessed by other applications." [Send anyways and don't show this message for this person again], [Send anyways and remind me later], [Don't send the picture/ Cancel] And mabye there even should be an option [Turn off auto export for this picture] I think that would solve the security issue.

You should then put the protection from screenshots and apply the same procedure for each photo, since at this moment the photos can be manually saved on the device

This would be just an extra inconvenience, Signal must protect the communication between users, but then it's up to users to trust each other

If someone wants to save something he:she will anyways, even unnoticed. But I like the idea of being able to turn off auto export for single pictures. It doesn't say it can't be saved but it won't be exported without action.

[ksnell88]

Perhaps it would make sense that even after the potential auto-save feature is explicitly enabled on device, anything sent while disappearing messages is enabled would not be auto-saved. Best of both worlds.

[ArnaudLM]

Hello,

I too need the same feature... :(

In the meantime, here is the "least worst" workaround I found (on Android, to be checked on iOS) : when in a conversation, you go to settings (the 3 dots on the top right), all media (sorry if it is not the proper text since I am using a localized version), you select one then select all media, and download. I still need to see how it performs over time since I auto backup elsewhere (local NAS) and delete frequently...

[Madd33n]

Essential feature - I couldn't believe that this is not possible at the moment. Hopefully this will implement asap -- because lazyness always eats data security for breakfast - and a lot of people will keep using other messengers - because ALL of them do it.

And for the security addicted guys - that isn't a feature - it's just a solution for unsecure OS's
In iOS everybody can set an individual option to ANY application on accessing the camera roll.

[mdeguzis]

In iOS everybody can set an individual option to ANY application on accessing the camera roll.

...Android has and has had that ability for ages. Permissions can be always set per app to anything the application is seeking to access, but I digress...