For years, WhatsApp's promise of privacy carried a quiet asterisk: messages were protected in transit, but once copied to the cloud, they became readable by anyone with a warrant or a sophisticated enough intrusion. Now, the platform is testing a feature that would extend encryption to backups themselves — closing a gap that has long separated the app's reputation from its reality. The move asks users to accept a new kind of responsibility: safeguarding a 64-digit key that stands between them and their own history.
WhatsApp tests encrypted cloud backups to close security loophole
Lose that key, and your entire message history becomes permanently inaccessible
Mark
So right now, if I back up my WhatsApp to Google Drive, the police can just read all my messages if they get a warrant?
Mimi
That's exactly what happens. Your chats are encrypted while they're in the app, but once they're in the cloud, that encryption is gone. Law enforcement can request access just like they would with any other cloud data.
Luke
Though we should note—Google and Apple do have their own security layers. It's not like the messages are sitting there in plain text. But yes, a warrant gets you in.
Mark
And WhatsApp is fixing this by encrypting the backups themselves?
Mimi
Right. They're testing a feature that encrypts everything before it even leaves your phone and goes to the cloud. So even if someone gets a warrant, the data would be unreadable.
Luke
But there's a catch—you get a 64-digit recovery key, and if you lose it, you lose access to everything. That's a real problem.
Mark
So I have to choose between security and being able to recover my messages?
Mimi
Essentially, yes. It's a tradeoff. You get stronger privacy, but you become responsible for keeping that key safe.
Luke
And we don't know yet if this will be the default or optional. That matters a lot for how many people actually get the protection.
Mark
When does this roll out?
Mimi
WhatsApp hasn't said. It's still in beta testing on Android.
Luke
And Facebook hasn't officially confirmed any of this to the press, so we're working from beta reports.
El Pulso
- WhatsApp's end-to-end encryption has always stopped at the cloud's edge — backups stored in iCloud or Google Drive have remained legally and technically accessible to outside parties.
- Law enforcement agencies can obtain search warrants to retrieve full message archives from cloud providers, undermining the privacy guarantees WhatsApp has long advertised.
- The company is now testing pre-cloud encryption on its Android beta, a feature that would shield backups from both hackers and legal compulsion.
- The protection comes at a cost: users must manage a 64-digit recovery key themselves, with no fallback if it is lost.
- WhatsApp has yet to confirm whether encrypted backups will be opt-in or the default — a decision that will determine how many users actually gain the protection.
For years, WhatsApp's promise of privacy carried a quiet asterisk: messages were protected in transit, but once copied to the cloud, they became readable by anyone with a warrant or a sophisticated enough intrusion. Now, the platform is testing a feature that would extend encryption to backups themselves — closing a gap that has long separated the app's reputation from its reality. The move asks users to accept a new kind of responsibility: safeguarding a 64-digit key that stands between them and their own history.
WhatsApp has long presented itself as a privacy-first messaging platform, but that claim has always rested on an uncomfortable exception. While messages are end-to-end encrypted within the app, the backups users store in iCloud or Google Drive are not — leaving them open to law enforcement access via search warrant, and vulnerable to the security limitations of the cloud services themselves.
According to WABetaInfo, which monitors WhatsApp's unreleased features, the company is now testing a fix: encrypting chat backups before they ever reach the cloud. Currently being trialled on the Android beta, the feature would protect message histories and media files from both unauthorised access and legal compulsion.
The trade-off is real. Anyone who enables the feature receives a 64-digit recovery key — the sole means of restoring their chat history on a new or lost device. There is no reset option. Lose the key, and the messages are gone permanently. Users would, in effect, become the sole custodians of their own data.
WhatsApp, owned by Facebook, has not publicly confirmed the feature or its timeline. Still unresolved is whether encrypted backups will be offered as an opt-in setting or made the default — a distinction that will quietly determine how many people the protection actually reaches.
WhatsApp's encryption has a blind spot, and the company is finally moving to close it. Your conversations within the app are protected by end-to-end encryption—a technical safeguard that means only you and the person you're messaging can read what you've written. But the moment those chats leave the app and land in cloud storage, that protection evaporates. Whether your backup lives in iCloud or Google Drive, law enforcement can obtain a search warrant and access the full archive of your messages and media files. The cloud services themselves have security measures in place, but they remain vulnerable to hacking, and more importantly, they remain accessible to authorities with legal paperwork.
According to reports from WABetaInfo, a site that tracks WhatsApp's unreleased features, the company is now testing a solution: independently encrypting backups before they ever reach the cloud. The feature would mean that your chat history and media files would be secured against unauthorized access—whether that access comes from a hacker or a law enforcement agency with a warrant. WhatsApp is currently trialling this capability on the beta version of its Android app, allowing early testers to opt into the more secure backup method.
The trade-off, however, is significant. Users who enable encrypted backups will receive a 64-digit recovery key. This key is the only way to restore your chats if you lose access to your phone or need to move to a new device. Lose that key, and your entire message history becomes permanently inaccessible—even to you. It's a hard choice between security and the ability to recover your data, and WhatsApp is essentially asking users to become their own custodians of that recovery code.
The move addresses a real gap in WhatsApp's security architecture. The app has long marketed itself as a privacy-focused alternative to other messaging platforms, but that privacy claim has always carried an asterisk: it applied only to messages in transit and at rest on your device, not to the backups you store elsewhere. For users in jurisdictions where law enforcement regularly seeks access to digital communications, or for anyone concerned about the security practices of cloud providers, this new feature represents a meaningful step forward.
WhatsApp, owned by Facebook, has not yet publicly confirmed details about the feature or when it might roll out to all users. The company is still in the testing phase, and the recovery key requirement suggests the feature is still being refined. What remains unclear is whether WhatsApp will make encrypted backups the default for all users or leave it as an optional setting that requires deliberate activation—a choice that could significantly affect how many people actually benefit from the added protection.
Citas Notables
Encrypting your backups protect your chat history and media from unauthorized access— WABetaInfo, reporting on WhatsApp's feature development
Quieres la nota completa?
Lee el original en The Irish Sun ↗
Technology