WhatsApp End-to-End Encrypted Cloud Backups Now Available

Enhanced Backup Security for WhatsApp Users

WhatsApp is initiating the rollout of a new security feature, extending the option of end-to-end encryption to chat history backups stored in iCloud or Google Drive. This addresses a significant vulnerability previously leveraged by governmental bodies to access private communications.

While WhatsApp has consistently provided encryption for in-app chats, a means to safeguard cloud-stored backups was previously unavailable. iPhone users’ chat histories reside in iCloud, while Android users depend on Google Drive for this purpose.

Reports indicate that law enforcement agencies globally have exploited this gap to gain access to private WhatsApp conversations involving individuals under investigation.

Closing a Critical Security Gap

Processing over 100 billion messages daily, WhatsApp is now mitigating this weakness. The company confirms to TechCrunch that this feature is being made available to users across all operational markets, though its implementation is optional.

It is not unusual for companies to restrict the availability of privacy features due to legal or regulatory constraints. For example, Apple’s encrypted browsing functionality is not accessible in certain countries, including China, Belarus, and Saudi Arabia.

Mark Zuckerberg, founder and CEO of Facebook, highlighted WhatsApp as the first global messaging service of its scale to offer both end-to-end encrypted messaging and backups. He expressed his pride in the team’s commitment to leading in security for private conversations.

How the New Encryption Works

WhatsApp began testing this functionality with a limited user group last month. A system was developed to allow users on both Android and iOS platforms to secure their chat backups using encryption keys.

Users will be presented with the choice of generating a 64-digit encryption key to protect their cloud backups. This key can be stored locally or within a preferred password manager.

Alternatively, users can create a password to back up their encryption key in a newly developed, cloud-based “backup key vault” managed by WhatsApp. Crucially, this cloud-stored key is inaccessible without the user’s password, which remains unknown to WhatsApp.

“While end-to-end encrypted messages you send and receive are stored on your device, many people also want a way to back up their chats in case they lose their phone,” the company explained in a blog post.

This addition of an extra privacy layer is a significant development with potentially substantial consequences, as previously noted.

Government Reactions and Concerns

End-to-end encryption continues to be a contentious issue, with governments worldwide advocating for backdoor access. Reuters reported that Apple faced pressure to forgo encryption for iCloud Backups following objections from the FBI.

Google has offered encryption for data stored in Google Drive, but reportedly did not inform governments prior to the feature’s release.

India, WhatsApp’s largest user base, has enacted legislation requiring the company to enable “traceability” of certain messages. WhatsApp has initiated legal action against the Indian government, arguing that this mandate effectively necessitates mass surveillance.

The U.K. government has recently requested messaging apps to disable end-to-end encryption for accounts belonging to children. Australia previously passed laws aimed at compelling tech companies to grant law enforcement and security agencies access to encrypted communications.

WhatsApp has refrained from commenting on whether it engaged in consultations with lawmakers or government agencies regarding this new feature.

Positive Reception from Privacy Advocates

Organizations dedicated to privacy, such as the Electronic Frontier Foundation, have praised WhatsApp’s initiative.

“This privacy win from Facebook-owned WhatsApp is striking in its contrast to Apple, which has been under fire recently for its plans for on-device scanning of photos that minors send on Messages, as well as of every photo that any Apple user uploads to iCloud. While Apple has paused to consider more feedback on its plans, there’s still no sign that they will include fixing one of its longstanding privacy pitfalls: no effective encryption across iCloud backups,” the organization stated.

“WhatsApp is raising the bar, and Apple and others should follow suit.”