> whatever > [> #> signal](https://infosec.exchange/tags/signal )> 's reasons are for badgering users for a > [> #> PIN](https://infosec.exchange/tags/PIN )> , it's clearly a design choice they made, because other secure messengers don't do this.
The choice is either:<li>Periodically ask people to enter their PIN, or</li><li>Deal with people complaining that they forgot their PIN and are locked out (or, ideally not possible):</li><li>Provide an insecure way of recovering an account after you are locked out.</li>
The PIN entry UI looks nothing like an incoming message.
David Chisnall (*Now with 50% more sarcasm!*)
npub13g…dk50d
2026-04-28 15:03:06 CEST
in reply to nevent1q…ler7
Author Public Key
npub13gcwraghdcw9xzkg3tky24feu0lzkhtlt57wpdn58y4m4tyr9qdsxdk50dSeen on
wss://relay.momostr.pinkPublished at
2026-04-28 15:03:06 CESTEvent JSON
{
"id": "30ef6bcdbfdb1d304236b3b6039b9efa1f5a164aa1d65a1f64f49a136f700608",
"pubkey": "8a30e1f5176e1c530ac88aec455539e3fe2b5d7f5d3ce0b674392bbaac83281b",
"created_at": 1777381386,
"kind": 1,
"tags": [
[
"p",
"1d9daec418418c2da07b242753f373ea8e2ebe4ce89596794ed930866196d85f"
],
[
"t",
"pin"
],
[
"p",
"9c19a6db8fbad3ae71281aba8189b39d8e2f80272042af252ee1045f3c0ff0a3"
],
[
"proxy",
"https://infosec.exchange/@david_chisnall/116482466576356379",
"web"
],
[
"e",
"067110b3ccbdf83daa97331ee23359dca020cc8549d10f419379ad5eed953d18",
"",
"reply",
"9c19a6db8fbad3ae71281aba8189b39d8e2f80272042af252ee1045f3c0ff0a3"
],
[
"p",
"b898268cc7dccc02177537036c66b61a69aa83b851121e05c571de339c47158d"
],
[
"t",
"signal"
],
[
"e",
"ba344b45f88594f44deae012e38598176f98d90a90078ead74cd2bfe91a4674b",
"",
"root",
"b898268cc7dccc02177537036c66b61a69aa83b851121e05c571de339c47158d"
],
[
"p",
"8a30e1f5176e1c530ac88aec455539e3fe2b5d7f5d3ce0b674392bbaac83281b"
],
[
"proxy",
"https://infosec.exchange/users/david_chisnall/statuses/116482466576356379",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/david_chisnall/statuses/116482466576356379",
"pink.momostr"
],
[
"-"
]
],
"content": "\u003e whatever \u003e [\u003e #\u003e signal](https://infosec.exchange/tags/signal )\u003e 's reasons are for badgering users for a \u003e [\u003e #\u003e PIN](https://infosec.exchange/tags/PIN )\u003e , it's clearly a design choice they made, because other secure messengers don't do this.\n\nThe choice is either:\u003cli\u003ePeriodically ask people to enter their PIN, or\u003c/li\u003e\u003cli\u003eDeal with people complaining that they forgot their PIN and are locked out (or, ideally not possible):\u003c/li\u003e\u003cli\u003eProvide an insecure way of recovering an account after you are locked out.\u003c/li\u003e\n\nThe PIN entry UI looks nothing like an incoming message.",
"sig": "d48de8ba31e4d4087b38201d62cc1b86065158a6b7b3f261a941d43b8fb73260f868e8b2ecc9f6c727df665490d9ec896e16a4d29e8a8555edad80f1e6632c8e"
}