signal desktop keeps database keys in the os keystore via electron safestorage api

on linux that’ll be kwallet or something, on mac it’s the keyring. it’s as secure as your password manager

edit: okay, you’re right, on windows it’s useless lol https://www.electronjs.org/docs/latest/api/safe-storage

> [on Windows] content is protected from other users on the same machine, but not from other apps running in the same userspace.