Update iOS to Protect Yourself from Notification Spying

Reading Time: 2 minutes.

iOS 26.4.2 and iPadOS26.4.2 Released April 22, 2026 Notification Services Available for: iPhone 11 and later, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 8th generation and later, and iPad mini 5th generation and later Impact: Notifications marked for deletion could be unexpectedly retained on the device

Recently, the FBI was able to gather a portion of two different users’ Signal message histories thanks to two separate flaws in Apple’s operating systems. In the first case, the FBI engaged in a raid of a journalist’s home, forcing her to unlock her MacBook with her fingerprint, allowing them access to her Signal chats. If macOS allowed her to better fine-tune the lockout period for biometrics, or gave her a quick way of disabling biometrics, as iOS has, then she could have protected her privacy from the search. More recently, someone’s phone was accessed and a hidden notification database on iOS gave investigators previous received notifications, which included Signal message previews.

While Apple still doesn’t have a better security option for biometrics on macOS, they do have an update out that will fix the notification issue. No more will old notifications live forever on your devices. But you’re going to have to update to get those benefits.

Update iOS Now

In iOS 26.4.2, Apple finally updated their on-board notification database to delete messages that have already been deleted. This should have been the default behavior, but, somehow, Apple has left this bug in for long enough for law enforcement to figure out how to exploit it. Signal has seemingly confirmed that the update was made to address the backdoor law enforcement found.

Bluesky posts. Three of them, all from the official Signal account. Text reads: We are very happy that today Apple issued a patch and a security advisory. This comes following 404 Media reporting that the FBI accessed Signal message notification content via iOS despite the app being deleted. Note that no action is needed for this fix to protect Signal users on iOS. Once you install the patch, all inadvertently-preserved notifications will be deleted and no forthcoming notifications will be preserved for deleted applications. We’re grateful to Apple for the quick action here, and for understanding and acting on the stakes of this kind of issue. It takes an ecosystem to preserve the fundamental human right to private communication.

Screenshot via Signal on Bluesky

You’ll want to update both your iPhone and your iPad, if you have both. iPadOS and iOS share the same base, and therefore have many of the same bugs. You can do this in Settings -> General -> Software Update, though you may have also already received a notification asking you to update.

Apple’s carelessness has introduced issues in iOS over the years, but issues that force us to compromise on our privacy have become ones that could put us in danger. Today’s political climate, where we have dangerous government agents in our streets, where belief and identity are policed by vicious thugs and bigots, privacy is more important than ever. Be sure to do everything you can to protect yours. You never know when something you believe or what group or identity you are will suddenly become illegal.