Does Signal Relay Calls Hide Your IP From the Person You Call?
Always Relay Calls hides your address from the person you call. It does not add encryption, replace a VPN, or erase every metadata trace.
Turning on Always Relay Calls changes one thing well: the person on the other end no longer learns your network address from the call path. It does not make the call more private in every other sense, and it does not do the job a VPN does. Treating those three claims as one is how people end up with a setting that feels protective and a threat model that no longer matches it.
What the Relay Option Actually Changes
Signal can route a call through its own servers instead of letting the two devices exchange addresses directly. With the option enabled, the relay carries the media, so your contact sees the relay rather than your home or mobile address. The cost is latency, and the app warns about call quality when you switch it on.
That is a routing preference inside one application, not a device-wide network change. Nothing about the rest of the phone's traffic changes when you enable it.
| Protection | What it hides | What it does not touch |
|---|---|---|
| End-to-end encryption | Message and call content | Who you contacted, or when |
| Call relaying | Your address from the call peer | Your account identity, or the relay's own view |
| Device VPN | Your address from destinations outside the tunnel | What the app itself tells its own servers |
Myth: The VPN Already Covers the Call Peer
A VPN changes the path that packets take away from your device, which is useful against a local network operator or an internet provider watching the first hop. It does nothing about the address a peer learns when the application arranges a direct connection, because that arrangement happens above the tunnel. The call is not made safer by the tunnel simply because other traffic is. If the goal is to keep your address away from the person you are speaking to, the relay setting is the control that addresses it.
The reverse is also true, and it catches people who assume one control covers both. A relayed call does not push your other applications through a VPN, and it does not change which exit address a browser shows.
Myth: Relaying Makes the Call Anonymous
Relaying hides one observation point from one party. Your contact still knows who they are talking to, because the conversation is with you by definition, and the service still sees that a call happened between two accounts. Neither of those facts changes when the media path changes.
What relaying buys is narrower and worth stating plainly: the peer cannot use the call itself to learn where you are connected from. That is a real gain against a specific threat, and it is not the same as unlinkability.
What Remains Visible After Both
Assume a VPN is active and the relay is on, then ask who observes what. Your provider sees a tunnel to a VPN endpoint and nothing about the call inside it. The VPN operator sees that you connected to the service, though not the content. The service sees the account pair and the timing. The peer sees a relay address and the content, which they are entitled to see because they are a participant.
None of that adds up to anonymity, and it is a much better position than a direct call over an unprotected network. The mistake to avoid is concluding from one hidden address that no metadata exists anywhere.
Check the setting in the build you actually run rather than in a screenshot from an older release, since menu layouts move between versions. Signal's own description of the feature sits at signal.org, and the in-app warning about call quality is the part most people skip.