WhatsApp users can now secure chat backups using passkeys: How it works

WhatsApp has unveiled an innovative feature aimed at bolstering the security of user chat histories through passkey-based encryption for backups. Launched on Thursday, this new functionality allows users to safeguard their backups using biometric methods such as fingerprint recognition, facial recognition, or their device’s screen lock, eliminating the need for traditional passwords or the cumbersome task of managing a 64-digit encryption key. This enhancement builds upon WhatsApp’s established end-to-end encryption framework, which already protects personal messages and calls. Previously, users wishing to encrypt their backups stored on platforms like Google Drive or iCloud were required to create and manage a separate password or encryption key. With the introduction of passkey encryption, the process is simplified, linking the encryption directly to the device's existing security measures. This means that a simple tap or glance is now sufficient to secure and later restore a backup. WhatsApp emphasizes that this update ensures user backups remain private, even in the event that a device is lost or replaced. The rollout of this feature will occur gradually over the upcoming weeks and months. Users interested in activating this feature can do so by navigating to Settings > Chats > Chat backup > End-to-end encrypted backup. The company reassures users that its end-to-end encryption guarantees that messages and calls are accessible only to the intended sender and recipient. Each message is protected with a unique digital key, which even WhatsApp cannot access. This system operates automatically without requiring any manual configuration. Additionally, messages sent to business accounts are encrypted using the same robust Signal encryption protocol, ensuring their security before they leave the user's device. However, WhatsApp cautions that once a business receives a message, its handling is subject to the company's privacy policies, and some businesses may permit employees or third-party vendors to access message content for marketing or advertising. With the transition to passkey encryption, WhatsApp's update aims to reduce user friction, allowing individuals to protect years of chats, photos, and voice notes without the burdensome task of managing complicated encryption processes.