WhatsApp announces end-to-end encrypted backups on iCloud

"WhatsApp is the leading global messaging service to offer both end-to-end encrypted messaging and backups on iCloud or Google Drive"

What you need to know

  • WhatsApp has just made a massive security announcement.
  • The company is going to offer end-to-end encryption on cloud backups to iCloud and Google Drive.
  • The feature is on its way in the coming weeks.

WhatsApp has today announced that it is bringing end-to-end encrypted chat backups to iCloud and Google Drive.

Facebook CEO Mark Zuckerberg posted stating:

We're adding another layer of privacy and security to WhatsApp: an end-to-end encryption option for the backups people choose to store in Google Drive or iCloud. WhatsApp is the first global messaging service at this scale to offer end-to-end encrypted messaging and backups, and getting there was a really hard technical challenge that required an entirely new framework for key storage and cloud storage across operating systems.

It means users will now have the option to end-to-end encrypt backups of their chats in the cloud, patching what was a major loophole in the otherwise secure platform that is WhatsApp.

The company says it is the first global messaging service to offer both E2E messaging and backups on both iCloud and Google Drive and says it had to overcome incredible technical challenges. The company says that as a result of the changes encrypted backups will only be accessible to users, with neither WhatsApp nor Apple/Google able to decrypt the messages.

The new feature is rolling out in "the coming weeks", which will give users a 64-digit encryption key they can store offline or a password, TechCrunch explains:

In the "coming weeks," users on WhatsApp will see an option to generate a 64-digit encryption key to lock their chat backups in the cloud. Users can store the encryption key offline or in a password manager of their choice, or they can create a password that backs up their encryption key in a cloud-based "backup key vault" that WhatsApp has developed. The cloud-stored encryption key can't be used without the user's password, which isn't known by WhatsApp.

The move is a big step forward for privacy and security on WhatsApp, as it continues to battle rivals like Signal to win users most concerned about their privacy.