3-Min Guide: How to Enable End-to-End Encryption in WhatsApp
If you want to be certain your WhatsApp chats are safe and secure, you’re in the right place!
End-to-end encryption is a convenient tool that allows you to know that only you and the person you’re talking to can read your messages.
But how do you turn it on? And how can you best make use of it? Not to worry, this process is easier than you may believe! This guide will discuss how to turn on end-to-end encryption, and give some tips and tricks for making yourself as private as possible. Let’s get started!
What is End-to-End Encryption?
End-to-end encryption (E2EE) is a method of securing the communication between two sides of the communication and making sure that only sender and receiver can read the message content. In other words, data is locked in such a way that not even the service provider (in this case WhatsApp) can read it.
In practice, when you send a message, the message is turned into a code and is sent so that only the person you’re sending it to can turn the code back into the message and read it. It’s as though sending a letter in a locked box, and only the receiving person has the key to open it.
Is End-to-End Encryption Automatically Turned On?
Yes. WhatsApp has end-to-end encryption, which is automatically enabled for all one-on-one chats and group chats. You don’t need to worry about turning encryption on yourself to ensure that your messages are encrypted. This means that your messages, calls, and media will all be secured as soon as you send them.
For all other chat backups (those stored on cloud services like Google Drive or iCloud), you must enable an additional layer of end-to-end encryption manually because it is not enabled by default for chat backups.
How to Turn On End-to-End Encryption in WhatsApp
Here's how you can set it up for both chats and backups:
Steps to Enable End-to-End Encryption for Chats
WhatsApp automatically encrypts all messages and media shared between you and the recipient. This includes individual chats, group chats, voice messages, and media. There’s no need to manually enable encryption for messages, as it's already built-in.
Steps to Enable End-to-End Encryption for Chat Backups:
Launch the WhatsApp app on your phone.
Access Settings: On Android, tap the three dots in the upper-right corner, then select Settings. On iPhone, tap Settings in the bottom-right corner.
In the Settings menu, select Chats.
Scroll down and tap on Chat Backup.
Tap on End-to-End Encrypted Backup and turn it on. You’ll be prompted to create a password or generate a 64-digit encryption key.
Password Option: Choose a password (minimum 6 characters) to encrypt your backup. This is easier to remember than the encryption key, but be sure to write it down somewhere secure.
64-Digit Encryption Key: Alternatively, you can choose to use a 64-digit key, which is more secure but harder to remember.
Create a Password
If you choose the password option, enter your password, then confirm it by typing it again. This will encrypt your backups, ensuring they’re protected even if someone gains access to your Google Drive or iCloud.Encryption Process
The backup encryption will begin, and the process might take a few minutes. During this time, WhatsApp will secure your chat backup with the password or key you’ve selected.
Backup Settings and Frequency
Set Backup Frequency
In the Chat Backup settings, tap on Back up to Google Drive (for Android) or iCloud (for iPhone). You can choose the backup frequency (e.g., daily, weekly, or manually). For complete control, select Only when I tap Back up.Choose Google Account for Backup
Select the Google account you'd like to use for backing up your chats. You’ll need to sign in with your Google account if you haven’t already.Back Up Now
To immediately back up your chats, tap Back up. Your chat backup will now be encrypted and stored securely in the cloud.
Device-Level Backups on iPhone:
Applying your iPhone’s iCloud backups will store your WhatsApp chat history as part of the general device backup. If, however, you prefer to keep your WhatsApp backup separate, disable backing up of WhatsApp in your iPhone device backup settings. This allows you more manual control over what’s being backed up and keeps your WhatsApp chats more private.
Remember Your Password: If you forget the password or lose the encryption key for an encrypted backup, you will not be able to restore the backup.
Backup Encryption is Optional: While your chat is automatically protected with encryption, adding backup encryption gives you one more layer of security.
Updates: Update WhatsApp to the latest version to guarantee that your backups are protected by the most updated encryption settings.
Understanding Password Protection for Encrypted Backups in WhatsApp
If you decide to make an end-to-end encrypted backup of your WhatsApp chats (on Android or iCloud), your messages, media, and data will be securely stored in the cloud. You can find your backup iOS files on iCloud, this backup has a password or a 64-digit encryption key.
Important Notes About Password Protection:
Backup Access: If you forget your password or lose your encryption key, you will lose access to your backup and won't be able to restore your chat history. WhatsApp can't help you recover your password or your key. Plan ahead by keeping your password & key in a safe place.
Changing Password: If you still have access to your WhatsApp account and remember your current password or encryption key, you can update your password. This will offer control over your backup security.
No Recovery Options: If you didn't save your password and encryption key, WhatsApp can't send it to you, and WhatsApp can't reset it for you. You are out of luck. You won't be able to use that encrypted backup.
What’s the “Verify Security Code” Screen?
Along with safeguarding your backup, WhatsApp also offers an additional layer of security for your end-to-end encrypted chats. Each encrypted chat (inc. between you and a contact) has a special security code of its own. This code is used to assure that your texts and calls are, in fact, encrypted.
How to Verify End-to-End Encryption of Your Chat:
Open the Chat: Go to the individual or group chat you want to verify.
Access Contact Info: Tap the contact’s name at the top of the chat to open the contact info screen.
Find the Encryption Section: Tap on Encryption to view the QR code and the 60-digit number associated with that chat.
Verification Process:
If you're physically with the person, you can scan the QR code or visually compare the 60-digit number. If you see a match, you'll see a green checkmark, which means the chat is end-to-end encrypted.
If you're not together physically, you can share the 60-digit number through another secure channel (such as SMS or email), and the person you sent it to can check that the number adds up on their end.
Why Verify?
Verification allows you to double-check that no one (for example, hackers, or otherwise unauthorized third parties) are intercepting your messages, or otherwise spying on what you are saying. It also ensures that your other linked devices are also current.
If the codes do not match, you might be communicating with a different contact, or there may be a problem with the chat encryption. It is important to verify security codes frequently to ensure the security of your messages.
How to Turn Off End-to-End Encryption in WhatsApp
If you've turned on end-to-end encryption for your WhatsApp backups, but you've now decided that you no longer want to have those backups protected this way, you can easily turn this feature off.
Open WhatsApp and tap on the three dots (menu) in the top right corner for Android or go to Settings directly on iPhone.
Select Chats from the settings menu.
Tap on Chat Backup to access your backup settings.
You'll see the option for End-to-End Encrypted Backup. Tap on it to proceed.
Tap Turn off. You’ll be prompted to enter your password or 64-digit encryption key for verification.
After entering your password or encryption key, confirm the action by tapping Turn off again.
After you finish these steps, your backups will no longer be end-to-end encrypted, so you can eventually do the regular backups without that extra security.
Disabling encryption will make your backup less secure, so you should only do this if you're really positive you won't need the encryption.
Remember, you will still be able to back up your chats and data, but they won't be encrypted from end to end after disabling this feature.
How to Retrieve Encrypted Messages on WhatsApp
Case 1: Downloading Encrypted Backups
If you forget your encryption key, you cannot access your WhatsApp backups on your computer. iPhone WhatsApp backups are stored in iCloud, but you cannot access it directly. For Android users, backups may be in Google Drive, or locally on the device at (/WhatsApp/Databases/).
To access a local Android backup:
Connect your phone to a computer and locate msgstore.db.crypt12 in the WhatsApp database folder.
The encryption key, needed to decrypt backups, resides at data/data/com.whatsapp/files/key on your device, but requires root access.
Alternative Solutions
Restoration: If you possess the backup and key, restore it on an Android device using WhatsApp.
Third-Party Tools: Some tools claim to decrypt these backups, but caution is advised due to potential security risks.
Case 2: Password Limitations and Challenges
Problems occur when WhatsApp blocks password attempts to decrypt backups. Limits on the number of attempts and increasing time limits between attempts can make it difficult for users to access their backups, and calls into question the transparency of the process.
Users have sought engaging WhatsApp in a dialogue to allow for more password attempts and shorter waiting periods, but results have been mixed; factory resetting your phone is the last step in the process if you cannot guess the password after a certain number of attempts, adding yet another layer of challenge to the recovery process.
Treat an encrypted backup with caution. Be sure to document the settings you used in making the backup and any encryption keys.
If you forgot your password, there is no way to restore the backup without the password.
FAQ
When Did WhatsApp Release End-to-End Encryption?
In 2016, WhatsApp embraced end-to-end encryption as one of its central characteristics. This allows users to communicate securely and privately without any intrusions from third parties. WhatsApp uses the Signal Protocol, a popular open-source encryption technique that is also used by other secure messaging applications.
Should I Enable End-to-End Encryption in WhatsApp?
Regular chats are supported by end-to-end encryption, so no action is needed on your part for everyday conversations. That said, if you're concerned about the security of your backup data (e.g. chat histories, photos, or videos), you should turn on end-to-end encryption for backups. This will keep your backup data secure in the event your cloud account is accessed by someone without your permission.
In the End
In short, you should enable end-to-end encryption on WhatsApp by turning on encryption for your chat backups.
You should also take steps to keep track of your password or encryption key. This will allow you to have safe, private chats in the long run.
Keep in mind that losing hold of your friend key could hamper your ability to recover it, so be sure to store it somewhere safe. Knowing that your chats will be safe and secure from prying eyes can also be a major source of comfort.
