WhatsApp introduces major new security update to safely store people’s messages

Andrew Griffin
Friday 10 September 2021 14:23 EDT
Comments
WHATSAPP
WHATSAPP (AP)

Your support helps us to tell the story

From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.

At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.

The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.

Your support makes all the difference.

WhatsApp has launched a major new security update, meaning that it is fully embracing end-to-end encryption.

WhatsApp message are already securely encrypted as they are passed between the people who are sending them, meaning that nobody – including WhatsApp – is able to see them. But, until now, any backups of those messages have not been encrypted, leaving them potentially open to hackers.

Now WhatsApp says that it will include end-to-end encrypted backups, too, meaning that they are secure all the way through the process. The company said that it had overcome “the final hurdle” in creating an entirely end-to-end encrypted messaging service.

In an announcement, Mark Zuckerberg said the feature had required building an “entirely new framework” to make sure the backups worked.

“We’re adding another layer of privacy and security to WhatsApp: an end-to-end encryption option for the backups people choose to store in Google Drive or iCloud,” Mark Zuckerberg said in his announcement.

“WhatsApp is the first global messaging service at this scale to offer end-to-end encrypted messaging and backups, and getting there was a really hard technical challenge that required an entirely new framework for key storage and cloud storage across operating systems.”

Mr Zuckerberg statement that WhatsApp is now the biggest service of its size to offer such secure encryption appears partly to be a shot at Apple, which has looked to position itself as a market leader on security. While Apple’s iMessage is end-to-end encrypted, backups of those messages are stored on iCloud in such a way that the company still has access to the key – meaning it can unlock them if requested to by law enforcement, for instance.

That level of security does, however, come with a cost. If a user loses access to their backups, there will be no way to get them back, since WhatsApp does not have the key to unlock the messages even with the consent of the person who sent them.

As such, the feature will be optional, and users will be able to avoid it if they wish.

The new feature will be rolled out to iOS and Android users “in the coming weeks”, WhatsApp said. It indicated that it had announced the feature early to ensure that security researchers and others were able to check over its proposals, which include detailed technical white papers on how its encryption works.

Encrypting messages entirely has led to some criticism from politicians, law enforcement and surveillance agencies, who argue that it is helpful to be able to access the chats of people who may be using messaging platforms for abuse, terror or other criminal activity.

Proponents of encryption – including WhatsApp – have argued however that weakening security just for those users means weakening it for everyone, and that the benefits of strong encryption outweigh those drawbacks.

Join our commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in