WhatsApp Encryption Vulnerable to Snooping Through Security Backdoor: Report

Advertisement
By Agence France-Presse | Updated: 14 January 2017 11:24 IST
WhatsApp Encryption Vulnerable to Snooping Through Security Backdoor: Report

The Facebook-owned mobile messaging service WhatsApp is vulnerable to interception, the Guardian newspaper reported on Friday, sparking concern over an app advertised as putting an emphasis on privacy.

The report said that WhatsApp messages could be read without its billion-plus users knowing due to a security backdoor in the way the company has implemented its end-to-end encryption protocol.

The system relies on unique security keys "that are traded and verified between users to guarantee communications are secure and cannot be intercepted by a middleman," the report said.

WhatsApp Denies Encrypted Messages Can Be Intercepted

But WhatsApp can force the generation of new encryption keys for offline users "unbeknown to the sender and recipient of the messages," it said.

Advertisement

Tobias Boelter, a cryptography researcher at the University of California told the Guardian: "If WhatsApp is asked by a government agency to disclose its messaging records, it can effectively grant access due to the change in keys."

Boelter said he had reported the backdoor vulnerability to Facebook in April 2016 and was told that Facebook was already aware of the issue but that it was not actively being worked on.

Advertisement

The company said in a statement that it provided a "simple, fast, reliable and secure" service.

It said there was a way of notifying users when a contact's security code had changed.

Advertisement

"We know the most common reasons this happens are because someone has switched phones or reinstalled WhatsApp.... In these situations, we want to make sure people's messages are delivered, not lost in transit," it said in a statement.

But the Guardian said it had verified that the security backdoor still exists.

The paper quoted Steffen Tor Jensen, head of information security and digital counter-surveillance at the European-Bahraini Organisation for Human Rights, saying: "WhatsApp can effectively continue flipping the security keys when devices are offline and re-sending the message, without letting users know of the change till after it has been made, providing an extremely insecure platform".

Facebook bought WhatsApp in 2014 but it continues to operate as a separate app.

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: WhatsApp, Facebook, Encryption, Apps, Social
Advertisement

Related Stories

Popular Mobile Brands
  1. Samsung Galaxy Z Fold 7, Galaxy Z Flip 7 May Get Big Gemini Live Upgrades
  2. Lenovo Yoga Slim 7i Aura Edition Review: A Premium All-Rounder with a Few Rough Edges
  3. Nothing Phone 3 Surfaces on Walmart Website Which Reaffirms Its US Launch
  4. Samsung Galaxy S24 Ultra and Galaxy S24 Price Lowered on Amazon
  1. iPhone’s Lock Screen Will Display Animated Artwork from Third-Party Music Apps With iOS 26: Report
  2. Samsung Galaxy Z Fold 7, Galaxy Z Flip 7 Said to Get New Gemini Live Features, Upgrades
  3. NASA Chandra Spots Distant X-Ray Jet; Telescope Faces Major Budget Cuts
  4. JWST Reveals Pluto’s Haze Cools Atmosphere, Paints Charon’s Poles Red
  5. Earth’s Oceans Enter Danger Zone Due to Rising Acidification, New Study Warns
  6. Samsung Galaxy S24 Ultra, Galaxy S24 Price Lowered on Amazon With Discounts, Cashback Offers
  7. Maryade Prashne Now Streaming on SunNXT: Everything You Need to Know
  8. Good Wife OTT Release: When and Where to Watch Tamil Legal Drama Online?
  9. Android 16 QPR1 Beta 2 Update for Pixel Reportedly Brings New Launch Animation for Gemini Overlay
  10. Jinn - The Pet OTT Release Date: When and Where to Where to Watch Tamil Horror-Comedy Online?
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.