WhatsApp Tests E2EE Cloud Backups, Bypassing Google Drive and iCloud

Key Takeaways

• WhatsApp is developing an in-house cloud backup solution, moving away from reliance on Google Drive and iCloud.
• The new system will offer users dedicated storage, potentially including a free tier up to 2 GB and a premium 50 GB option.
• End-to-end encryption will be mandatory for all data backed up to WhatsApp’s native cloud, enhancing user privacy and security.
• Users will have multiple secure authentication methods, including passkeys, traditional passwords, and a 64-digit encryption key.

WhatsApp is currently engineering an independent cloud backup infrastructure, a strategic move designed to give users enhanced autonomy over their message histories. This forthcoming capability will enable the secure storage of user backups directly on WhatsApp’s proprietary servers.

The initiative aims to lessen dependence on third-party cloud services such as Google Drive and Apple’s iCloud, simultaneously enforcing stringent cryptographic standards for user data.

Addressing Cloud Storage Constraints

The increasing volume of high-resolution media shared through WhatsApp often leads to chat backups consuming substantial portions of users’ personal cloud storage. Presently, both Android and iOS users are compelled to store their backups on their respective default cloud providers.

This mandates that users allocate their finite storage capacity across various digital assets, including emails, device backups, and sizable WhatsApp data files. When users reach their storage limits, they are faced with the choice of either deleting existing files or purchasing additional storage from Google or Apple.

To mitigate this data bottleneck, WhatsApp is constructing a dual-provider system. Users will soon gain the flexibility to retain their existing third-party service or transition to WhatsApp’s dedicated backup platform. Key aspects of this new storage ecosystem include:

• WhatsApp plans to offer a complimentary tier providing up to 2 GB of storage. However, it remains uncertain whether this will be universally accessible or exclusively for WhatsApp Plus subscribers.
• Developers are exploring a premium storage plan, potentially offering 50 GB of space for approximately $0.99.
• This premium tier would present an economical alternative for users managing extensive chat archives and media libraries.
• All pricing structures and storage capacities are preliminary and subject to modification following market evaluations.

Mandatory End-to-End Encryption for Native Backups

Security is a paramount concern for this independent storage system. Should a user opt for WhatsApp’s native cloud for backups, end-to-end encryption will become a mandatory protocol for all data stored within that cloud. This measure guarantees that chat histories remain entirely inaccessible to unauthorized entities, malicious actors, and even WhatsApp itself.

To ensure both robust security and user accessibility, WhatsApp is integrating device-based authentication. According to WABetaInfo, users will be provided with three distinct options to secure their backup data:

• Passkeys will serve as the default method, enabling users to unlock backups using hardware-backed biometric authentication, such as fingerprint or facial recognition.
• Traditional alphanumeric passwords will continue to be available for users who prefer manual entry.
• A 64-digit encryption key will offer a manual recovery option, catering to advanced users seeking maximum cryptographic control.

Passkeys represent a significant security enhancement for the average user. Their secure storage within a password manager and linkage to trusted devices eliminate the risk of forgotten passwords while simultaneously providing protection against remote phishing attacks.

The WhatsApp Chat Backup Provider is currently undergoing active development. Engineers are meticulously testing the feature to ensure seamless integration with existing security frameworks. Following internal validation, the feature will be progressively rolled out to selected beta testers before a broader public release. This capability signifies a notable evolution in how the platform manages user data, optimizing backup processes while simultaneously strengthening mobile security.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.