WhatsApp new encryption isn't all that it seems

Office for Mere Mortals
Your beginners guide to the secrets of Microsoft Office
Invalid email address
Tips and help for Word, Excel, PowerPoint and Outlook from Microsoft Office experts.  Give it a try. You can unsubscribe at any time.  Office for Mere Mortals has been running for over 20 years, we've never, ever revealed or sold subscriber details.  Privacy policy

WhatsApp is getting credit, including fawning praise, for turning on End-to-end encryption for their very popular messaging product.  Looking a little deeper into WhatsApp shows that it’s not as great as the hype might have you think.

For starters, WhatsApp is late to the ‘end to end encryption’ party.  Other messaging apps like Wickr and our preference, Telegram have had this feature for many years.  WhatsApp isn’t an innovator, it’s just catching up with the competition.

It’s certainly not the ‘full encryption’ that some media is reporting.  WhatsApp has records of what you’re doing.

Call log

WhatsApp does track who you are calling and texting.  This is from their privacy statement under the misleading heading ‘The Information WhatsApp Does Not Collect’:

Notwithstanding the above, WhatsApp may retain date and time stamp information associated with successfully delivered messages and the mobile phone numbers involved in the messages, as well as any other information which WhatsApp is legally compelled to collect.

It’s similar to a phone company having your call log.  They know who you called, when and for how long.

Data handover

That last phrase ” any other information which WhatsApp is legally compelled to collect” is vital.  Any privacy promises mean nothing.  That includes the part where WhatsApp promises to delete any files sent via their servers – it’s a promise they can’t keep because laws (especially US law) can compel them to keep those files, hand them over and keep the entire privacy breach a secret from the people affected.

This data can (and probably is) handed over to governments either for specific people or in bulk.  The same laws that expose your use of OneDrive, Skype and Gmail apply to WhatsApp.

No documents

One critical omission from WhatsApp (at least for Microsoft Office users) is the limited file transfer features.  Only pictures, videos and PDF’s can be sent via WhatsApp.

To send Office documents securely between people you need Telegram or Wickr.

 

Our recommendation from 2015 is unchanged. We prefer Telegram because it has a very secure ‘Secret’ mode where necessary but mostly people will use the easier standard mode.  It can securely send any type of file, including Office documents.

subs profile e1563205311409 - WhatsApp new encryption isn't all that it seems
Latest news & secrets of Microsoft Office

Microsoft Office experts give you tips and help for Word, Excel, PowerPoint and Outlook.

Give it a try. You can unsubscribe at any time.  Office Watch has been running for over 20 years, we've never, ever revealed or sold subscriber details.  Privacy policy
Invalid email address