Warrant Canary
The useful part of a warrant canary is the update that does not arrive. An operator signs a short statement on a schedule, every line of it saying that one specific bad thing has not happened yet, and the warning is a late signature or a line that disappeared. On a market that block usually includes the current onion addresses. A transparency report has none. Either way the information is the gap, and a gap has more than one explanation.
What a Warrant Canary Actually Is
A warrant canary is a signed statement, renewed on a schedule, that a named event has not happened as of the date inside the signature. While the sentence is true, the operator can publish it. After a gag order forbids them from saying the event happened, they stop renewing the statement instead of signing a sentence that has turned false.
The name comes from the canary coal miners carried underground. The bird died of bad air before the miners did, so an empty cage meant leave, with nobody announcing the gas. A statement you expected, missing on a date you can point at, works the same way.
A canary in a transparency report watches for secret legal process, usually a National Security Letter or an order under the Foreign Intelligence Surveillance Act, both of which arrive with a gag. A market canary watches the operator. It says the signing key is still in the same hands, the site has not been taken over, and the addresses inside the message are the ones that operator controls. Markets borrowed the schedule and the signature. The event they are watching is a takeover, an exit, or a seizure, which is why the address list and the denials belong in one signed block.
A seizure notice does a different job, and people mix the two up. The notice is a banner somebody else puts on the homepage after they already have it. Plenty of seizures never get one, and an exit scam almost never does. The canary is the operator's own statement failing to renew, which can happen while the homepage still looks the way it did last week.
Why a Canary Works When a Promise Doesn't
A gag order forbids the recipient from saying a secret legal demand arrived. National Security Letters and FISA orders are written that way. A canary uses what comes after the gag: the operator stops renewing a denial they are no longer willing, or no longer free, to sign. A promise on a homepage can be edited by whoever holds the homepage, including the person who just took it. Replace the signed denial and the fingerprint you already trust stops matching.
No court has decided whether a gag can be stretched into an order to keep signing a false canary. The theory operators rely on is that silence and a forced lie are different orders, and that the second one is unavailable. The plain-language version of that theory is the EFF's warrant canary FAQ.
The nearest case went to the Ninth Circuit in March 2023, and it answered a neighboring question. Twitter wanted to print more specific totals of national-security requests in a transparency report. The court let the government keep those figures redacted. Forced silence about a number is what that case decided. Forcing a company to renew a denial that has become false is a different order.
On a market the courtroom often never shows up. A seized site stops signing because the passphrase is with someone who cannot reach a keyboard, or because the people now holding the servers do not hold the key. Any statement they publish is signed by a key whose fingerprint you have never checked.
How to Read a Canary Line by Line
Start with the date inside the signed block. A date in the post above the armored text can be changed by anyone who can edit the post. The date between BEGIN PGP SIGNED MESSAGE and BEGIN PGP SIGNATURE is the one the signature covers.
Read each denial as its own sentence. "We have not been seized" says nothing about a copy of the database leaving. "These are our only mirrors" says nothing about withdrawals. One sentence gone, date still fresh, signature still good, is a sharper signal than a post that is merely late. Somebody chose which sentence to drop.
Addresses count only inside that signed region. An onion address under the signature, or in the next paragraph, is ordinary text.
The result you want is a good signature from a fingerprint you already trust. "Good signature" on its own means the bytes match a key on your keyring, including one a phisher handed you an hour ago. Comparing it with a copy you got earlier, from a second place, is what attaches the statement to an operator. The clicks and the command are in the how to use PGP guide.
The clock in an OpenPGP signature is the signer's clock, so a block dated this morning may have been signed months ago. What pins the date is a fact in the text that a prepared stack could not have contained. IVPN's warrant canary, renewed monthly, is a clean specimen. The statement dated 3 November 2026 says that as of that day no warrant had been served on IVPN or its employees, no search or seizure had touched its assets, it knew of no backdoor, and it had never disclosed user communications. The same block includes Bitcoin block 974378, that block's hash, and recent Financial Times headlines.
Above the signature, IVPN states the limit in plain words: a third party cannot forge an arbitrary declaration, and force can still make them sign a false one. A duress line such as "we sign this freely" runs into that same limit. A duress code helps only if you arranged it beforehand, off the site, and you are watching for its absence.
A Missed Canary: What It Means and What It Doesn't
A missed warrant canary means the scheduled statement did not arrive, or a line inside it was removed. Pause before you trust this week's picture of that operator. A raid, a gag, a lost passphrase and a week offline all leave that same pause, and only the next statement sorts them.
The dull causes are the common ones: the passphrase holder was offline, the habit slipped, or the wording was so broad that renewing it would have made a smaller event look like a collapse. Riseup's canary hit that broad wording in the winter of 2016, and the renewal did not come. On 16 February 2017 the collective said a gag on two sealed FBI warrants meant any new signature on the old text would have broken the gag. One warrant was for the public contact address of a DDoS extortion ring. The other was for an account using ransomware to extort people. The servers stayed with Riseup, and they said no monitoring had been put on them. The silence was real. The story going around was larger than the warrants.
They rewrote it around events that would put a user at risk: infrastructure leaving their control, a breach, disclosure of private keys, a forced modification of the system. It now renews on 1 February, 1 May, 1 August and 1 November, with a link to a recent news article in each one so the signature could not have been made early. Riseup's own account of that winter is that a canary written too wide signals a seizure when the event was narrower.
A hole in a transparency report can also be a change in how the numbers are allowed to be printed. The missing sentence and the gag leave the same blank on the day you notice it. When the format around the old sentence has changed, the rest of the document answers the blank.
Dread misread a silence of its own in September 2019. A dead-man's switch took the forum offline, and the version that traveled was a compromise. The cause was a server failure, and the forum came back that November. A switch fires when a check-in is missed. A canary goes quiet when a statement is not renewed.
When a canary I rely on is late, the previous signature comes off the table first. A good signature in April says nothing about November. I look for a newer one where that operator posts, which for most markets is their subdread, and I look at the shape of the gap. One denial removed, date fresh, same key: the claims were edited. A missing post, then a statement with a headline from this week under the same key: usually a person catching up.
Canaries Beyond Darknet Markets
Reddit's transparency report for 2015, published on 31 March 2016, dropped the paragraph that said Reddit had never received a classified request for user information. The 2014 report had carried it, dated 29 January 2015: no National Security Letter, no order under the Foreign Intelligence Surveillance Act, no other classified request. The 2015 report still counted what Reddit was allowed to count, 98 requests for user information against 55 the year before. Asked about the hole, an admin wrote that they had been advised not to say anything one way or the other.
Apple dropped a sentence readers took for a dead canary. The transparency report published in November 2013 said "Apple has never received an order under Section 215 of the USA Patriot Act." Later reports dropped it. The report covering January through June 2014 lists national-security orders as a range, 0–249, the banded format the Justice Department had begun to allow. A range that starts at zero has no way to say "never." The dropped sentence fits that change of format.
A VPN transparency report is the same kind of document, and the nouns still have to be read one at a time. IVPN's canary says no warrant has ever been served. Its transparency report, in the row for 2026, counts nine requests received, zero of them valid, and zero that led to user data being handed over. Nine requests and zero warrants are different sentences.
A provider that has never published a canary has not killed one. The signal starts when a rhythm starts.
Where Canaries Fail
An author who never names a date retires their own canary. Riseup's four dates and IVPN's monthly signature, with a block height in the text, are schedules you can miss. "Updated regularly" is a mood. After a couple of quiet months, the people still paying attention file the next quiet month under ordinary delay, and the warning is gone. Markets that re-sign often because clones are chasing them at least leave a rhythm you can see break.
Backdating is the hostile version of a slipped habit. The timestamp in the signature is whatever the signer wrote, so a stack of canaries can be produced today, dated through next spring, and published later by someone who never touches the key again. A headline, a sports score, or a block height inside the signed text is what someone outside the room can check. Without one of those, the date line is a claim.
Key continuity starts when a second canary arrives under the same key. The first statement only shows that some key was willing to sign. A replacement continues the chain only when the previous key signed the handoff: this fingerprint, this date, in a message the old signature still covers. After a seizure, the obvious forgery is a new key and a full set of the right denials. Without the handoff, that file starts a new history.
A trusted third party leaves the chain where the keys left it. A directory or a forum thread can be slow, wrong, or repeating a statement last checked months ago. The signature is the part you can redo yourself, and a write-up of it ages on the canary's own calendar.
A false denial signed on purpose verifies as cleanly as a true one. Duress, a wish to keep people calm, or a misunderstanding of what the gag allows: the signature comes back good in each case. Riseup refused to sign through that winter. IVPN's preface says force can produce the opposite choice. A valid signature tells you the holder of that key accepted those sentences.
Warrant Canary Questions
What is a warrant canary?
A warrant canary is a signed statement an operator renews on a schedule, saying that a specific event has not happened: a secret legal order, a seizure, or a handover of keys. The warning is a missed renewal, or a denial that was in the last statement and is missing from this one.
How often should a warrant canary update?
On the calendar its author actually published. Riseup re-signs on 1 February, 1 May, 1 August and 1 November. IVPN signs every month and puts a fresh news headline and a Bitcoin block inside the text, so the date can be checked. A market that only says it posts regularly has published a mood. The warning is lateness, and a mood has no date attached to it.
Is a missing canary proof of a raid?
A missing canary establishes that the scheduled statement did not arrive, or that a line inside it was removed. A raid, a gag order, a lost passphrase, a week offline, and a change in how a transparency report prints its numbers can all look the same on the day you notice the gap. Apple's Section 215 sentence disappeared when its reports moved to number ranges that start at zero. Riseup's late 2016 canary was a gag on two sealed warrants, and the servers were not seized. Pause, and read the next statement before you decide what the gap was.
Can a warrant canary be faked?
Someone without the private key cannot produce a signature that verifies against the real fingerprint. Someone who has the key can sign a false denial: the operator under pressure, a person the key was handed to, or a thief. IVPN says this in the preface to its own canary. A news headline or a Bitcoin block inside the signed text stops a statement signed months ago from passing as this week's. Checking the signature, fingerprint included, is covered in the PGP guide.