Friday, 15 October 2021

WhatsApp: New encryption feature protects your chat history from prying eyes

WhatsApp is now rolling out its end-to-end encryption service for chat backups, the company has confirmed.

Announced last month, the encryption feature adds an additional layer of protection to chat backups stored in Apple iCloud and Google Drive.

According to a WhatsApp blog post, users can now secure end-to-end encrypted backups with either a password or 64-digit encryption key, which in theory means no third party (including both WhatsApp and the cloud storage vendor) will have access to the information.

WhatsApp says the new feature will be rolled out incrementally, presumably so that any bugs and performance issues can be identified and isolated early on.

WhatsApp backups

Although WhatsApp was among the first platforms to provide users with end-to-end encryption for messages, a combination of technical challenges and inter-company politics has meant the same level of protection has not been available for chat backups, until now.

“WhatsApp was built on a simple idea: what you share with your friends and family stays between you,” wrote the company.

“While end-to-end encrypted messages you send and receive are stored on your device, many people also want a way to back up their chats in case they lose their phone. Starting today, we are making available an extra, optional layer of security to protect backups stored on Google Drive or iCloud with end-to-end encryption.”

As per a whitepaper published by WhatsApp, before backups are delivered to the cloud, the client encrypts messages and other content with a random key generated on the user’s device. Unless the user chooses to manage it themselves, this key is stored in a hardware security module (HSM)-based vault, which shields against tampering and unauthorized access attempts.

Essentially, this means WhatsApp users can rest easy in the knowledge that no one else is able to access their chat history backups while they are held in storage.

It’s worth noting that the encryption feature will not be switched on by default, so must be activated manually in the app via the following route: Settings > Chat > Chat Backup > End-to-end Encrypted Backup.

  • We've built a list of the best VPN services around
https://ift.tt/3ALI0P8

No comments:

Post a Comment