WhatsApp Quietly Extends Encryption to iCloud Backups of Chat Logs

Tuesday May 9, 2017 4:58 AM PDT by Tim Hardwick

WhatsApp has bolstered the security of the iCloud backup feature in its messaging platform, in an attempt to protect archived chat logs from being accessed in a readable form (via TechCrunch).

WhatsApp has offered end-to-end encryption on its messaging service for some time, but that encryption did not previously extend to iCloud backups of messages. Given that Apple holds the encryption keys for iCloud, a subpoena of Apple or an unauthorized iCloud hack could potentially allow access to WhatsApp messages backed up there.


However, WhatsApp has moved to prevent that possibility by also pre-encrypting the backup files. "When a user backs up their chats through WhatsApp to iCloud, the backup files are sent encrypted," a WhatsApp spokesperson told Forbes, confirming the change.

WhatsApp quietly added the encryption to WhatsApp iCloud backups late last year, however the change only came to light last week when professional hackers claimed to be able to circumvent the security measure.

According to Russian-based Oxygen Forensics, third-party hacking tools are able to download the encrypted WhatsApp data backed up to iCloud and then generate an encryption key to decrypt the data using the associated SIM card. The tools could potentially be used by police with access to a phone where the WhatsApp account has been deactivated but the encrypted messages are still stored in iCloud. WhatsApp has yet to comment on the claims.

The encryption debate has been reignited in recent weeks on both sides of the Atlantic. FBI director James Comey revealed earlier this month that his agency had been unable to access the data on more than 3,000 mobile devices in the first half of the fiscal year, despite having legal authority to avail themselves of the contents.

A recent statement by U.S. senator Dianne Feinstein also appeared to confirm that the government had used $900,000 of public money to pay for the third-party tools to unlock the iPhone used by the San Bernardino terrorist. No information of relevance was found on the device, the FBI later revealed.

Meanwhile in the U.K., government home secretary Amber Rudd recently claimed that it is "completely unacceptable" that authorities cannot gain access to messages stored on mobile applications protected by end-to-end encryption, such as WhatsApp. Rudd said she would be discussing the situation with technology companies in the near future.

Since that time, a draft technical paper prepared by the U.K. government has been leaked that contains proposals related to the removal of encryption from private communications. The paper reveals that companies would be required to provide the raw data "in an intelligible form" without "electronic protection" within one working day. Discussions about the feasibility of the proposals are said to be ongoing.

Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.

Top Rated Comments

(View all)
Avatar
38 months ago

Since that time, a draft technical paper prepared by the U.K. government has been leaked that contains proposals related to the removal of encryption from private communications. The paper reveals that companies would be required to provide the raw data "in an intelligible form" without "electronic protection" within one working day.

As a Brit, I was so annoyed with this tech paper. Some politicians just don't get it.
[doublepost=1494335527][/doublepost]

3. I don't back up conversations, no need

I had a close friend pass away recently. Never had I been so glad that I keep all my messages and back them up (iMessage, Whatsapp, Telegram etc.).
Score: 6 Votes (Like | Disagree)
Avatar
38 months ago
I'd like the option from Apple to encrypt iCloud backups with my own key. I'm ok with the fact that if I lose my key my backup will be lost forever. Until then I'll continue using only local encrypted backups.

edit: I have my issues with Comey but I at least appreciate his pragmatic approach that if lawmakers won't force access to encrypted devices we'll just need to change expectations about evidence gathering but law enforcement will go on. I realize he has undertones of FUD to that statement but at least he's being honest that it's not the end of law enforcement, there will just be some information inaccessible to them.
Score: 2 Votes (Like | Disagree)
Avatar
38 months ago
This is awesome. I love me some encryption :)
Score: 2 Votes (Like | Disagree)
Avatar
38 months ago
So the only reason we know it exists, is because it's already hacked/broken? o_O
Score: 1 Votes (Like | Disagree)
Avatar
38 months ago
1. Good for privacy
2. I use WhatsApp sparingly
3. I don't back up conversations, no need
Score: 1 Votes (Like | Disagree)
Avatar
38 months ago
Nice. Can I also have a native Apple Watch app for whatsapp?
Score: 1 Votes (Like | Disagree)

Top Stories

New Low-Cost 'iPhone SE' Could Launch as Soon as Tomorrow

Thursday April 2, 2020 4:06 pm PDT by Juli Clover
Apple's new low-cost iPhone is set to launch as early as Friday, April 3, according to a new report from 9to5Mac that cites a tip from a "highly trusted reader." The site says that while it can't be certain about the launch date, "Apple could reveal and begin taking orders for the new iPhone as soon as tomorrow." The iPhone 8 Apple is said to be planning to call the new iPhone, which is...

Apple's 2020 MacBook Air vs. 2020 iPad Pro

Wednesday April 1, 2020 2:45 pm PDT by Juli Clover
Apple in March updated both the MacBook Air and the iPad Pro, and with the iPad Pro increasingly positioned as a computer replacement, we thought we'd compare both new machines to see how they measure up and which one might be a better buy depending on user needs. Subscribe to the MacRumors YouTube channel for more videos. We're comparing the base model 12.9-inch iPad Pro and the base model...

AirTags Referenced in New Apple Support Video

Thursday April 2, 2020 12:12 pm PDT by Joe Rossignol
Apple has accidentally referenced its widely rumored AirTags item tracking tags in a video that it uploaded to its Apple Support channel on YouTube today. The video was first spotted by the blog Appleosophy and has quickly been removed. The video was titled "How to erase your iPhone." AirTags were mentioned in Settings > Apple ID > Find My > Find My iPhone under Enable Offline Finding, with...

Intel Unveils 10th-Gen Processors Suitable for Next 16-Inch MacBook Pro With Wi-Fi 6 and Turbo Boost Speeds Above 5GHz

Thursday April 2, 2020 7:53 am PDT by Joe Rossignol
Intel today announced the launch of its latest 10th-generation Core processors for high-end notebooks, potentially including the next 16-inch MacBook Pro. The batch of 45W chips, part of the Comet Lake family, are built on Intel's 14nm++ architecture. The new H-series chips have the same base clock speeds as the 9th-generation chips in the current 16-inch MacBook Pro, but Turbo Boost speeds...

Apple Paid Hacker $75,000 for Uncovering Zero-Day Camera Exploits in Safari

Friday April 3, 2020 3:58 am PDT by Tim Hardwick
Apple paid out $75,000 to a hacker for identifying multiple zero-day vulnerabilities in its software, some of which could be used to hijack the camera on a MacBook or an iPhone, according to Forbes. A zero-day vulnerability refers to a security hole in software that is unknown to the software developer and the public, although it may already be known by attackers who are quietly exploiting...

Apple Offers Employees Deep Discounts on HomePod, Beats Headphones and More

Friday April 3, 2020 11:14 am PDT by Juli Clover
Apple is offering employees significant discounts on products that include the HomePod and Beats headphones, according to details on the deals shared by MacGeneration and 9to5Mac. Apple is said to be clearing stock of Beats headphones and HomePods, providing them to employees through an internal deals program. The HomePod is available at a 50 percent discount, dropping the price to $149.50,...

iPhone 8 Screen Protector Updated With 'iPhone SE' Compatibility on Apple's Online Store

Thursday April 2, 2020 8:10 pm PDT by Joe Rossignol
Another clue has surfaced to suggest that Apple's rumored lower-cost iPhone SE successor will likely be released soon. Earlier today, a product listing for a Belkin screen protector on Apple's online store was updated to reflect compatibility with not only the iPhone 7 and iPhone 8, but also the iPhone SE. Given the original iPhone SE was a 4-inch device, and the iPhone 7 and iPhone 8 are...

Apple Adding Some 2013 and 2014 MacBook Air and MacBook Pro Models to Vintage Products List at End of April

Wednesday April 1, 2020 2:24 pm PDT by Joe Rossignol
In an internal memo obtained by MacRumors, Apple has indicated that the following 2013 and 2014 models of the MacBook Air and MacBook Pro will be added to its vintage and obsolete products list on April 30:MacBook Air (11-inch, Mid 2013) MacBook Air (13-inch, Mid 2013) MacBook Air (11-inch, Early 2014) MacBook Air (13-inch, Early 2014) MacBook Pro (13-inch, Mid 2014)Apple defines vintage...

Zoom Updates Mac App Installer to Remove Controversial 'Preflight' Installation Method

Thursday April 2, 2020 11:42 am PDT by Eric Slivka
The popular video conferencing company Zoom has been under scrutiny over the past few days for the method used to install the Mac version of its app, which essentially abused a "preflight" compatibility check to install the app without the user needing to explicitly grant installation permission, as highlighted by developer Felix Seele earlier this week. Screenshot of preflight compatibility ...

Top Stories: Apple Leaks iPhone SE and AirTags, Apple Buys Dark Sky, and More

Saturday April 4, 2020 6:00 am PDT by MacRumors Staff
With the calendar rolling over to April this week, we yet again saw several leaks and rumors, most notably including Apple itself leaking some references to a pair of long-rumored products: a new budget iPhone SE and AirTags item trackers. Subscribe to the MacRumors YouTube channel for more videos. Apple also acquired popular weather app Dark Sky, while Amazon's Prime Video app now allows...