Yep, Signal SQLite database is encrypted, but there's a catch: On the desktop app, due to the lack of containerization, it is trivial to extract all messages and media since the db password is stored in a plain text file. The python script called signal-export by carderne on GitHub allows to dump everything with a single command.
Correction:
20:05 - Signal does encrypt data at-rest.
Yep, Signal SQLite database is encrypted, but there's a catch:
On the desktop app, due to the lack of containerization, it is trivial to extract all messages and media since the db password is stored in a plain text file.
The python script called signal-export by carderne on GitHub allows to dump everything with a single command.