Skip to main content
  1. Home
  2. Mobile

WhatsApp’s online backups are getting end-to-end encryption

By

Facebook is tightening WhatsApp’s security by extending end-to-end encryption (E2EE) to cloud backups via an update to the app on iOS and Android. This was already allowed this on local WhatsApp backups, but the company will extend these security tools to online backups made to iCloud and Google Drive.

“Starting today, we are making available an extra, optional layer of security to protect backups stored on Google Drive or iCloud with end-to-end encryption. No other global messaging service at this scale provides this level of security for their users’ messages, media, voice messages, video calls, and chat backup,” the WhatsApp team shared this week.

Recommended Videos

It’s an optional feature, and users will be able to enable it in WhatsApp’s settings when it’s available. While WhatsApp’s link to Facebook means that it carries the company’s stigma around privacy and security, the service had always been surprisingly secure. Person-to-person chats are secured by the same end-to-end encryption protocol as Signal, while the only loophole was with online chats. With this rollout, the company would be closing that and increasing its privacy profile.

WhatsApp multi-device support image laptop, display, tablet
Facebook Engineering Blog

“To enable E2EE backups, we developed an entirely new system for encryption key storage that works with both iOS and Android. With E2EE backups enabled, backups will be encrypted with a unique, randomly generated encryption key. People can choose to secure the key manually or with a user password,” the WhatsApp team explained in September. “When someone opts for a password, the key is stored in a Backup Key Vault that is built based on a component called a hardware security module (HSM) — specialized, secure hardware that can be used to securely store encryption keys. When the account owner needs access to their backup, they can access it with their encryption key, or they can use their personal password to retrieve their encryption key from the HSM-based backup key vault and decrypt their backup.”

Related

Facebook’s other messaging services, Messenger and Instagram Direct, do not yet offer end-to-end encryption by default. Instead, the company offers a discrete private mode on Messenger for people who want their calls and chats secured. With Facebook planning to merge all three services eventually, it seems more likely than not that the company plans for end-to-end encryption to be the default at some point in the future.

Editors’ Recommendations

Topics
Michael Allison
Michael Allison
Mobile News Writer
A UK-based tech journalist for Digital Trends, helping keep track and make sense of the fast-paced world of tech with a…
How to know if someone blocked you on WhatsApp
WhatsApp logo on a phone.

While it's still not won mass adoption in the U.S., WhatsApp is the world's most popular messaging app, and billions use it every day to chat with friends, family, local groups, and even businesses. But such an enormous user base means not every interaction is going to be positive, and that's why WhatsApp has a blocking system to prevent you from seeing messages you don't want to see.

It's entirely possible you've been blocked by a few people yourself -- but how would you know? Unlike blocking on social media sites like Twitter, WhatsApp doesn't let you know if you've been blocked, leaving you somewhat in the dark. However, there are a few ways to figure out if you've been blocked by a specific user, even if there's no list you can check to find out for sure. Here they are:
You can't see any changes to their profile picture or status

Read more
It’s not just you: the Apple Weather app is down
Cloudy weather showing in iOS 15's weather app.

Stop trying to force quit apps or restart your phone, it isn't going to help. It's not just you, Apple's Weather app is down right now. There were some sporadic issues yesterday, but it seems more widespread this morning.

Whether it's on an iPhone, iPad, or Mac -- the back-end service running Apple's Weather app seems to be having issues loading data. Sometimes the home screen widget won't work; other times you'll get one or two locations in your list to update, but not the rest. Other times it all looks good, but the hour-by-hour forecast details aren't working. That's frustrating!

Read more
These Android apps are spying on you — and there’s no easy way to stop them
Illustration of a giant eye stalking through a phone

Android’s security woes need no introduction, but another threat that hasn’t received its fair share of awareness relates to spyware and stalkerware apps. These apps can secretly be installed on a victim’s phone to monitor their activity and can be exploited to harass victims of domestic abuse and engage in online stalking. All someone needs is physical access to the victim's phone to install these apps, which is not too difficult in cases of domestic abuse.

Call it an app-fueled version of AirTag stalking, but on steroids, because these spyware apps can steal everything including messages, call logs, emails, photos, and videos. Some can even activate the microphone and the camera, and secretly transfer these recordings to a remote server where the abuser can access it. Since Google Play's policies don't allow stalking apps, these apps are sold via third-party websites and need to be sideloaded.

Read more