WhatsApp end-to-end encrypted backups are now rolling out for iPhone users, Facebook has announced. Until now, WhatsApp let users back up their chat history to iCloud, but the messages and media contained in the backups weren't protected by WhatsApp's end-to-end encryption while in Apple's cloud servers.
Since Apple holds the encryption keys for iCloud Backup, a subpoena of Apple or an unauthorized iCloud hack could have potentially allowed access to WhatsApp messages backed up there. Apple was reportedly pressured to not add encryption to iCloud Backups after the FBI complained.
Going forward, however, users can create a password or 64-bit key to protect their backup in cloud-based storage, whether they're saved in iCloud or Google Drive.
Facebook CEO Mark Zuckerberg made the announcement, saying that users can generate a password of their choice or a 64-digit encryption key that only they know in order to access their WhatsApp chat backups.
While end-to-end encrypted messages you send and receive are stored on your device, many people also want a way to back up their chats in case they lose their phone. Starting today, we are making available an extra, optional layer of security to protect backups stored on Google Drive or iCloud with end-to-end encryption. No other global messaging service at this scale provides this level of security for their users' messages, media, voice messages, video calls, and chat backups.
You can now secure your end-to-end encrypted backup with either a password of your choice or a 64-digit encryption key that only you know. Neither WhatsApp nor your backup service provider will be able to read your backups or access the key required to unlock it.
The encrypted chat backups feature will gradually be rolled out to more than two billion users on Android and iOS, and will be available in every market where WhatsApp is operational, which could put the company at odds with some governments.
Notably, Apple is not making its upcoming iCloud+ Private Relay encrypted browsing feature available to users living under certain authoritarian regimes, including China, Belarus, Colombia, Egypt, Kazakhstan, Saudi Arabia, South Africa, Turkmenistan, Uganda, and the Philippines. According to Apple, "regulatory reasons" are preventing the Private Relay feature from launching in those countries.
