The Platform Move

This is short.

You have security agreements. You have a champion. Now make sure you’re actually living on the infrastructure you agreed to — not just visiting it.


This is the collective version of what you did alone back in Level 1, when you set up Signal and encrypted your devices. It’s harder now because you need everyone to move. It’s easier because you’re not alone.

If your group isn’t fully on secure channels yet — if some conversations still happen over text, or in a Facebook group, or in a group chat on a platform that logs everything — this chapter is about finishing the migration. If you’re already on Signal, skip ahead to the audit section. Either way, this should take one meeting.


Every major platform migration in recent memory has followed the same pattern. When Elon Musk acquired Twitter in 2022, millions of users signed up for Mastodon. Within months, most had drifted back. When WhatsApp updated its privacy policy in January 2021, Signal saw 7.5 million downloads in five days. Weeks later, usage patterns showed most people had returned to WhatsApp. When Reddit’s API changes drove users toward Lemmy in 2023, the same thing happened.

The pattern is this: initial enthusiasm, parallel running — where both old and new platforms stay active — and then collapse back to the original. The research is consistent on why. Voluntary individual migration fails because the value of a communication platform depends on who else is on it. If half the group stays on the old channel, the old channel is where the conversation happens. The new one feels empty. People check it less. Eventually it dies.

In The Matrix, the Nebuchadnezzar crew doesn’t split its communication across multiple systems. Everyone uses the same operator, the same hardline protocol, the same extraction procedure. Not because the technology is perfect — it isn’t — but because one person on a different channel is a vulnerability the Agents can exploit. When Cypher makes his deal with Agent Smith, it works precisely because he operates outside the group’s agreed communication structure. The betrayal isn’t just personal. It’s infrastructural. He opts out of the shared system, and the shared system can’t protect what it can’t see.

Your group is the same. The old platform isn’t just inconvenient — it’s a channel the group’s security agreements don’t cover. Every conversation that happens there is outside the structure you built together.

The structural fix has two parts: coordinated group migration and a sunset date.


If you’re migrating:

Your security champion sets up the Signal group. Ideally, do this in person — the same “setup party” model from Chapter 19. Walk everyone through configuration together:

Disappearing messages on, set to one week. Notification previews off. Link previews disabled in Signal’s privacy settings — these can leak information about what you’re sharing. Registration lock enabled. Screen lock on the app itself if the device is shared with anyone.

Verify Safety Numbers with each person. In person, scanning the QR code. This takes thirty seconds per person and confirms no one’s messages are being intercepted.

Then set a sunset date. Pick a day — one week out is reasonable — when the old channel gets deleted. Not archived. Deleted. This is the forcing function. Without it, the old channel stays alive as a fallback, parallel running sets in, and the migration fails.

On the sunset date, the champion deletes the old group. It’s done.

If you’re already on Signal:

Run an audit at your next meeting. Walk through each setting together:

Disappearing messages: on, one week. Notification previews: off. Link previews: disabled. Registration lock: on. Screen lock: on. Devices locked with alphanumeric passcodes — not four digits, not a pattern.

Verify Safety Numbers with each person. Even if you did this before, do it again. Safety Numbers change when someone reinstalls Signal or gets a new phone.


One conversation that often surfaces during migration: someone will resist leaving the old platform. They have other contacts there. It’s convenient. They don’t see the point. This is normal. Don’t argue about it — come back to the principle from Chapter 19. The group agreed on a communication platform as part of its security floor. This is that agreement in action. If someone needs help with the setup, the champion helps. If someone has a legitimate concern the group didn’t anticipate, add it to the agenda for the next meeting.

The goal isn’t to eliminate every insecure channel in everyone’s life. It’s to ensure that the group’s conversations happen on the infrastructure the group agreed to. What people do on their own time with other contacts is their business. What happens in the group happens on secure channels.


Write in your field journal after: Did everyone move? Was there resistance? How did it resolve?

This is probably the simplest challenge in Level 2. Good. You’ve earned one.


Summary

Platform migrations fail when individuals move alone. They succeed when the group moves together with a hard deadline. Either migrate your group to Signal with a sunset date for the old channel, or audit your existing Signal configuration as a group. One meeting, one move, done.

Action Items

  • If migrating: Security champion sets up Signal group. Hold an in-person setup party — walk through configuration together. Set a sunset date (one week out) for deleting the old channel. On that date, delete it.
  • If already on Signal: Run a group audit at your next meeting. Walk through every setting together: disappearing messages (one week), notification previews (off), link previews (disabled), registration lock (on), screen lock (on), alphanumeric passcodes.
  • Verify Safety Numbers with each person via QR code, in person. Do this even if you’ve done it before.
  • Field journal prompt: Did everyone move? Was there resistance? How did it resolve?

Case Studies & Citations

  • Twitter → Mastodon migration (2022) — Millions signed up for Mastodon after Musk’s Twitter acquisition. Most returned within months. Pattern: initial enthusiasm, parallel running, collapse to original platform.
  • WhatsApp → Signal migration (January 2021) — Signal saw approximately 7.5 million downloads globally between January 6–10 after WhatsApp’s privacy policy update. Sensor Tower data; corroborated by CNBC (2021-01-12). Most users eventually returned to WhatsApp. Signal noted that third-party analytics “severely under report numbers from Signal because we don’t have any trackers or analytics” — real numbers likely higher.
  • Reddit → Lemmy migration (2023) — API pricing changes drove users to Lemmy and other alternatives. Same pattern: initial surge, parallel use, gradual return.
  • EFF Security Education Companion — “setup party” model — Walking through security tool configuration as a group rather than asking individuals to set up alone. Reduces setup friction and ensures consistent configuration across all members.

Templates, Tools & Artifacts

  • Signal group configuration checklist — Disappearing messages: on, one week. Notification previews: off. Link previews: disabled. Registration lock: on. Screen lock: on. Device passcode: alphanumeric, not four-digit or pattern.
  • Migration timeline — Day 1: Champion sets up Signal group, in-person setup party. Days 1–7: Parallel running period (keep old channel but move all new conversations to Signal). Day 7: Sunset — champion deletes old group. No archive, no fallback.
  • Safety Number verification — In person, scan QR codes in Signal. Takes 30 seconds per person. Confirms no interception. Re-verify whenever someone reinstalls Signal or gets a new device.

Key Terms

  • Parallel running — The period when both old and new communication platforms are active simultaneously. Research consistently shows this leads to collapse back to the original platform, because the old channel retains more participants and therefore more activity.
  • Sunset date — A hard deadline for deleting the old communication channel. The forcing function that prevents parallel running from becoming permanent. Not an archive date — a deletion date.