{"id":8069,"date":"2017-02-12T08:00:02","date_gmt":"2017-02-12T13:00:02","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=8069"},"modified":"2017-02-20T13:52:51","modified_gmt":"2017-02-20T18:52:51","slug":"whatsapps-encryption-problematic-users-security","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/whatsapps-encryption-problematic-users-security\/","title":{"rendered":"Is WhatsApp\u2019s Encryption Problematic for Users&#8217; Security?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">WhatsApp rolled out end-to-end encryption on its platform in April of last year. This means that WhatsApp users now have all of their photos, media, and messages encrypted by default. In this new system, only the intended recipient of a message can read the message \u2014 no one in between, not even WhatsApp or the government, can ostensibly access these conversations.<\/span><\/p>\n<p>This January, The Guardian broke the news that Facebook-owned WhatsApp contained a \u201cbackdoor\u201d to its encrypted messaging platform. This alleged \u201cbackdoor,\u201d the article claims, can allow governments and hackers to snoop on users\u2019 private conversations. This \u201cbackdoor\u201d is possible thanks to a vulnerability in the app: the vulnerability was designed to make the app more user friendly. That\u2019s why it\u2019s important to run regular virus scans on your device, to ensure that all of your apps and data are protected \u2014 despite any vulnerabilities. Click here to run a full virus scan now:<\/p>\n<p><center><a href=\"psafe:\/\/launch\/antivirus_quick\" rel=\"attachment wp-att-7530\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-7530\" src=\"https:\/\/www.psafe.com\/en\/blog\/wp-content\/uploads\/2017\/02\/Security-Scan.png\" alt=\"Security Scan\" width=\"300\" height=\"78\" \/><\/a><\/center><b><br \/>\nA False Backdoor?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Almost immediately after The Guardian\u2019s article, cryptologists took to Twitter to criticize the allegation. Brian Acton, WhatsApp\u2019s co-founder, and Moxie Marlinspike, the founder of Open Whisper Systems \u2014 the team that helped design WhatsApp\u2019s encryption \u2014 released statements calling the claim \u201cfalse\u201d and \u201cdisappointing.\u201d Further, 40 security experts signed an open letter requesting that The Guardian apologize and retract the story since the use of the word \u201cbackdoor\u201d implies an intentional design decision on WhatsApp\u2019s end. <\/span><\/p>\n<p>In his statement, Marlinspike explained that the feature The Guardian had interpreted as a \u201cbackdoor\u201d came about as a necessary trade-off between security and usability. In other end-to-end encrypted messaging systems, users are often blocked if they try to message someone who changed his or her security key \u2014 unbeknownst to the sender. In contrast, WhatsApp made the choice to give the sender a warning that the recipient of the message has changed his or her security key.<\/p>\n<p><b>WhatsApp is Still Safe to Use<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Putting aside this drama about the backdoor possibility, security experts have conceded that the flaw in the encrypted messaging system is problematic. The end-to-end system has also briefly impeded WhatsApp\u2019s ability to detect and fight spam. However, as reported by Business Insider, WhatsApp is still the best choice for users who want a secure messaging platform that is easy to use. <\/span><\/p>\n<p><b>An Alternative to WhatsApp<\/b><\/p>\n<p><span style=\"font-weight: 400;\">For users who still feel concerned however, consider downloading the Signal app. This messaging app was developed by Open Whisper Systems, and is largely considered to be the most secure messaging app on the market. You can download this app for free from the Play store or directly from Open Whisper Systems\u2019 website.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Earlier this year, The Guardian published an article claiming that WhatsApp wasn\u2019t as secure or private as the company claimed to be.<\/p>\n","protected":false},"author":83,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"categories":[5],"tags":[],"class_list":["post-8069","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/8069","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/users\/83"}],"replies":[{"embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/comments?post=8069"}],"version-history":[{"count":0,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/posts\/8069\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/media?parent=8069"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/categories?post=8069"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.psafe.com\/en\/blog\/wp-json\/wp\/v2\/tags?post=8069"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}