I want to know if it is possible for websites to send messages through my WhatsApp without my permission. I read about the WhatsApp API, but I haven't done much PHP so it did not make much sense to me.

Is it also possible for a website to view my contacts, as well as post messages to existing chats that I have not deleted?



It no way possible can they do this with out having you security token (Lets call it your login credentials). The PHP API you saw is an unofficial API and requires logging in when starting it up.

What can a website do?

There is something called WhatsApp URI which lets websites build a custom link that upon pressing will redirect you to WhatsApp so you can share their content (See more here).

  • Can they send messages to a contact that I did not select? – Don Jun 30 '16 at 13:19
  • @Don Nope! not unless they hacked your phone/obtained your credentials. – Bubble Hacker Jun 30 '16 at 13:20
  • How can one obtain my credentials...sorry if this is a long explanation. – Don Jun 30 '16 at 13:21
  • You gave them out or they hacked your phone. – Bubble Hacker Jun 30 '16 at 13:22
  • Can this be done remotely? – Don Jun 30 '16 at 13:23

In order to use your WhatsApp account, they'll need your username and password. If they have that, then yes it's possible. This is one of the many reasons you shouldn't have the same password for multiple services.

With your credentials, they can do anything and access any service available to a normally logged-in user -including view contacts.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.