WhatsApp Boosts Backup Security with New Passkey Feature
Meta Description: WhatsApp is enhancing the security of its encrypted backups with passkeys, offering a more secure and user-amiable alternative to passwords and encryption keys.
WhatsApp is rolling out a notable upgrade to its backup security system, addressing long-standing concerns about protecting user data.Previously, while messages were secured with end-to-end encryption, backups were vulnerable. Since 2021,the platform offered users the option to encrypt backups with either a standard password or a complex 64-digit encryption key,but both methods presented challenges.Now, the company is introducing passkeys – a new authentication method designed to offer the best of both worlds.
The initial lack of backup encryption left user data exposed, a gap that WhatsApp sought to close with the introduction of password-based and key-based encryption. However, as one analyst noted, “the inherent weaknesses of human password management quickly became apparent.” Many users opt for easily guessable passwords or reuse them across multiple accounts, creating a significant security risk. A compromised email account, for example, could grant hackers access to a user’s WhatsApp backups.
The 64-digit encryption key, while exceptionally secure in theory, proved impractical for most users.Its length made it virtually impossible to memorize, and storing it securely presented another hurdle. Losing the key meant losing access to the encrypted backups entirely. “It’s a classic security versus usability trade-off,” a senior official stated.
Passkeys aim to resolve this dilemma.Unlike conventional passwords, passkeys are stored on a user’s device or associated with their account, eliminating the need to remember or manage a complex passphrase. This means a user’s backups can be decrypted using the same methods they use to unlock their device – a fingerprint scan, facial recognition, or device passcode.
According to a company release,the key is securely stored,making it far less susceptible to data leaks and unauthorized access. the only way to access the encrypted backups is through authentication with a trusted device.Without the user’s biometric data or device passcode, access is denied.
WhatsApp is gradually rolling out passkey support “over the coming weeks and months.” Users can check for availability by navigating to Settings > Chats > Chat backup > End-to-end encrypted backup within the app. This new feature represents a considerable step forward in securing user data and simplifying the backup process, offering a more robust and user-friendly solution than its predecessors.
Why: WhatsApp upgraded its backup security to address vulnerabilities in previous methods (passwords and 64-digit keys) that left user data at risk of unauthorized access.
Who: The upgrade is being implemented by WhatsApp, a Meta-owned messaging platform, for its billions of users worldwide.
What: WhatsApp is introducing passkeys as a new authentication method for encrypted backups, replacing passwords and long encryption keys. Passkeys leverage device-based security features like fingerprint scans and facial recognition.
How did it end?: The rollout of passkey support is gradual, beginning “over the coming weeks and months.” Users can check for availability within the app’s settings. The feature aims to provide a more secure and user-friendly backup experiance, resolving the usability issues of previous methods.
