WhatsApp is bolstering user privacy with the rollout of passkey support for end-to-end encrypted backups, offering a more secure alternative to customary passwords [[1]]. The new feature, impacting over three billion users globally [[2]], allows users to leverage biometric authentication or device PINs to protect their message history stored in iCloud or Google Drive [[3]]. This enhancement aims to provide a stronger defense against data breaches by keeping the cryptographic keys securely on the user’s device.
WhatsApp is rolling out a new feature allowing users to encrypt their chat backups with a passcode, enhancing the privacy of their message history on both iOS and Android devices.
The new functionality enables users to protect their backups using biometric authentication – such as fingerprint or facial recognition – or a device’s screen lock PIN. This builds on existing end-to-end encryption already offered by the Meta-owned messaging platform.
According to reports, passkeys are a passwordless authentication method that allows users to sign in using biometrics, a PIN, or a security pattern. This eliminates the need to remember complex passwords or rely on password managers.
When a passkey is created, a unique cryptographic key pair is generated; the private key is stored on the user’s device, while the public key is shared with the website or application. This approach offers a significant security advantage over traditional credentials, as the private key never leaves the device, making it immune to data breaches.
Users can activate the feature by navigating to ‘Settings’ within WhatsApp, then selecting ‘Chats,’ ‘Chat Backup,’ and choosing ‘End-to-end encrypted backup.’
Meta has begun a global rollout of the feature, with availability expected to expand to all users gradually over the coming weeks and months. The move underscores the increasing importance of user data security in the messaging space.
WhatsApp first introduced end-to-end encrypted chat backups for iOS and Android in October 2021, allowing users to store backups in iCloud (for iOS) and Google Drive (for Android).
Once enabled, these encrypted backups allow WhatsApp users to restore their messages on any device, provided they have the passcode to decrypt them.