14 DAY TRIAL // WhatsApp messages that are included in backups uploaded from Android devices to Google Drive are not encrypted, raising concerns over possible user privacy violation.
As the largest instant messaging platform on mobile right now, WhatsApp offers end-to-end encryption to users, meaning that only participants in a conversation can read the messages. However, when the said conversation is archived and included in a backup that’s uploaded to Google Drive, messages are left unencrypted.
While the Google Drive backup is an optional feature, security researchers warn that Google could be forced to hand over your data based on a search warrant, despite the search giant itself storing files encrypted on its server.
“From a privacy perspective (completely discounting convenience) online backups are no good regardless of who the custodian is. While Google does encrypt files on the server side they also ultimately control the keys for those -- which can be provided to law enforcement authorities on the basis of a warrant,” Karan Saini, independent security researcher, was quoted as saying by The Economic Times.
No word on iCloud backups
Basically, researchers warn that despite the double-encryption offered by WhatsApp and Google in the case of files stored on its servers, law enforcement could still access your conversations first because messages included in the backups are not encrypted and second because Google holds the encryption keys for uploaded files.
While WhatsApp has remained tight-lipped on these reports, the company updated its support page to state that files included in Google Drive backups are not encrypted.
“Media and messages you back up aren't protected by WhatsApp end-to-end encryption while in Google Drive,” the page now reads.
On iPhone, WhatsApp offers similar functionality with iCloud, the cloud-based storage service developed and operated by Apple. However, it’s not clear if messages included in iCloud backups are unencrypted as well.
On Android, you can disable WhatsApp backups to Google Drive by heading over to the Settings screen > Chats > Chat backup.