According to WhatsApp representatives, the development team is currently working on eliminating a serious vulnerability in this platform. All messages and data are known to be protected by end-to-end encryption. However, copies of this information, which are kept in cloud storages, such as iCloud and Google Drive, are not encrypted at all. It poses a significant privacy risk for all WhatsApp users who back up their chats. Recently, dissatisfaction with the company's work in this direction and the new privacy policy caused customers' outflow to other messengers.
If hackers gain access to Apple ID or Google accounts, they will be able to use personal data for blackmail and other fraudulent cases. Of course, with the proper level of user responsibility and the widespread use of two-factor identification, it won't be easy to do. However, WhatsApp, for its part, should also take all measures to protect its clients. This question has become especially relevant after a number of phishing attacks on messenger users last year. The update is currently under development, and the release date has not yet been announced. The new feature will allow clients to use a password for protecting their online chat databases, including any multimedia files.
While this vulnerability is not critical, hardening the security and protection of stored data is an important step. At the moment, all users are advised to set different passwords for their backups and WhatsApp account and apply two-factor authentication wherever possible. If you are still seriously concerned about your chats' privacy, refuse to backup, or temporarily switch to another messenger. Moreover, competitors offer a comfortable platform change for those who wish. For example, Telegram recently introduced an easy way to import chat history from WhatsApp.
