Hacker News Reader

It doesn't mean they don't either. It's the removal of the previous claim that's worrying.

But honestly, it doesn't matter anyway since Whatsapp is somehow able to backup all your data on Google Drive and restore it on separate phones. How are they able to do that without backing up the private key?

https://faq.whatsapp.com/android/chats/how-to-restore-your-c...

View on HN

I thought the backups were unencrypted (or encrypted with a key that was specific to backups) for that exact purpose.

The backups are unencrypted as highlighted in the UI (if I recall correctly). They re-generate the keys when you switch phones / re-install / clear data. That's when you get to see the "XYZ's security code changed" service message

I guess it makes sense. Doesn't make a difference if you deliver the chest with the key to the lock or the chest without the lock.

> For example, if you use a data backup service integrated with our Services (like iCloud or Google Drive), they will receive information you share with them, such as your WhatsApp messages.

https://www.whatsapp.com/legal/updates/privacy-policy/?lang=...

Looks like you're right, it must be unencrypted.

Reply on news.ycombinator.com