Questions tagged [whatsapp]

Whatsapp is a proprietary instant messaging client for smartphones

Filter by
Sorted by
Tagged with
5 votes
1 answer
2k views

Can WhatsApp, Signal or Telegram be hacked through a SIM SWAP attack?

In Cuba the telecoms/ISP monopoly, Etecsa, works with the political police to spy on dissidents, journalists and others. A common attack in Cuba is therefore SIM Swapping which is easy for them. It is ...
4 votes
3 answers
8k views

Does WhatsApp have a golden key to decrypt messages?

The head of Information and Communication Technologies Authority of Turkey said this on Twitter yesterday: WhatsApp can read your end to end encrypted messages when necessary. It can decrypt your ...
1 vote
1 answer
612 views

Can malware be contained in an image sent via WhatsApp?

I went online with a new WhatsApp account earlier (with a new number), and the first thing that happened was that I received a threatening message from a number with an ISD commonly used by scammers ...
1 vote
1 answer
790 views

Whatsapp encryption: are the public keys requested from the server every new message or only at session setup?

I was reading through a WhatsApp whitepaper (and all related questions here) and couldn't find an answer to this question: are the public keys for the recipient requested by the sender from WhatsApp ...
54 votes
3 answers
31k views

Is Signal still more secure than WhatsApp?

WhatsApp has "recently" deployed end-to-end encryption using the Signal protocol, which is of course also being used by Signal itself. The related white paper (PDF). Now this raises the question: Is ...
1 vote
0 answers
21 views

How do end-to-end encryption (E2EE) IM apps implementing push notifications? [duplicate]

Say WhatsApp and Signal on Android devices, how do they keep the E2EE not be broken? Some answers claimed that WhatsApp uses VoIP background mode on iOS to make the push notification invoke the app to ...
0 votes
1 answer
128 views

How WhatsApp knows that account is logged in on 1 device

Recently I was switching devices and my WhatsApp got logged out from 1st device when I logged in to 2nd device. And I got this question on my mind How WhatsApp knows that account is logged in on 1 ...
0 votes
0 answers
21 views

block whatsapp web file transfer but not chating [duplicate]

I work in an organisation where we need to block WhatsApp web file transfers. Meaning chatting will work but downloading and uploading files are blocked. We're using Palo Alto firewalls. I've tried ...
2 votes
3 answers
6k views

Whatsapp web security

If I use WhatsApp Web on a computer at work that is connected through a proxy, is there a possibility that they will intercept my messages? I know that, thanks to the proxy, they can see the pages ...
1 vote
0 answers
1k views

How to tell if an image has a virus? [duplicate]

I received (and opened) an image from Whatsapp. How can I know if this image contains a virus (spyware)? Is it possible to send photos containing virus using Whatsapp Mod (unofficial versions of ...
1 vote
0 answers
538 views

Get root permission on android for metasploit

Is there any way to get into the root file system in android with an already installed msfvenom apk in reverse_tcp (to get the whatsapp encryption key)
0 votes
3 answers
6k views

Unknown numbers sending videos on WhatsApp. What should I do?

A number with ISD code +92 sent a video via WhatsApp. No text, only a video. About 20 days later, another number with same ISD sent another video. Should I open the video? OR Should I Report and Block?...
5 votes
1 answer
793 views

Free messaging (but not images, video, etc) on United Airlines free wifi: is it secure?

I recently flew with United Airlines and I used their free messaging wi-fi plan. I could text my friends on Whatsapp, but I could not send (nor receive) multimedia content like images, videos or audio ...
0 votes
2 answers
918 views

Can a VPN hide my IP on Whatsapp?

My IP can be seen by a Whatsapp contact using the netstat command. Can a VPN hide my real IP to them? Or their netstat will still show my real IP?
2 votes
1 answer
1k views

Why is uPnP settings in router showing external IP address and WhatsApp as app description?

I was fiddling with my router's uPnP settings and found this: Why is an external IP address showing here? I also did a reverse IP search and to my surprise the IP 25.54.27.39 showed "UK Ministry ...
5 votes
0 answers
491 views

How does end-to-end encryption work with whatsapp web as of 2022?

The accepted answer to this question is now outdated, since Whatsapp web does not require an online smartphone to function anymore. How is the key exchange performed securely?
3 votes
1 answer
516 views

Is the new Whatsapp Web update compatible with E2E encryption?

You may see this question as a logical successor of this post. With the new Whatsapp Web update it is now usable without keeping the smartphone online. I can't imagine how this is compatible with End-...
0 votes
1 answer
223 views

Is it more secure to receive OTP or send OTP?

I am working on a project that requires users to set up 2-Factor Authentication. As an additional option (apart from the Authenticator app), users can choose their WhatsApp number as an authentication ...
73 votes
1 answer
39k views

How does end to end encryption work with whatsapp web?

Since today I have noticed whatsapp is using end to end encryption. However web.whatsapp.com is also still working. Does whatsapp establish a connection with my phone to keep things secure?
1 vote
1 answer
1k views

Decrypting WhatsApp traffic and blocking file uploads possible using a firewall ssl decryption policy?

So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp?? I ask because WhatsApp doesn't exactly use SSL right, it's more ...
0 votes
2 answers
9k views

Is it technically possible to clear WhatsApp chat also on receiver's phone?

A friend of mine whom I trust 100% states that a user he was exchanging messages via WhatsApp deleted the whole chat,on his phone as well. He was able to take a screenshot of the last messages before ...
6 votes
1 answer
532 views

Can WhatsApp recover Google Drive backups if the phone is not connected to the original Google account?

Last week Brazilian news outlets reported a scam involving WhatsApp where an attacker could get access to an WhatsApp account by activating the target phone number on a different device in control of ...
2 votes
3 answers
1k views

Are Whatsapp and Signal truly secure and user-privacy friendly?

I have been learning the famous "SIGNAL MESSAGING PROTOCOL", Its brilliantly designed and perfectly secure , but I doubt on its implementations Famous messenger services like Whatsapp and Signal ...
2 votes
2 answers
3k views

Telegram, Signal, WhatsApp: chats encrypted in local storage on mobile devices?

I wonder if the chat content's are encrypted in local storage on mobile devices (iOS, Android). I hardly found any reliable information about this topic. My thought is about somebody stealing my ...
1 vote
1 answer
4k views

Forensics methods for obtaining WhatsApp data from Windows Desktop PCs

WhatsApp has the option to download a Windows (or Mac) Desktop version. Installation requires pairing the software with a mobile phone. I have read a similar question about Android devices, and ...
0 votes
1 answer
549 views

What happens when app have access to your photos?

These days I see many apps request access to photos on iPhone. I understand app request access to photos to iOS which then request access to me, that sounds ok. In that context I can allow access to ...
0 votes
4 answers
2k views

How Whatsapp shows link previews despite E2E encryption?

Someone sends me a link. Whatsapp shows its preview. How can they do that despite being E2E encrypted?
0 votes
0 answers
1k views

Hijacking a WhatsApp session

If a device running a WhatsApp account has already be compromised. Can the attacker steal session cookies/encryption keys on the device and establish a persistent connection to receive calls and ...
1 vote
1 answer
654 views

Does my ISP have a clue about what type of activity I'm doing on WhatsApp/Viber/Telegram?

Can my ISP see the difference between sending messages, making video call, and simply engaging with communities - building on traffic types?
0 votes
0 answers
189 views

How can I protect myself from this simple, yet lethal (SE) WhatsApp hack?

I've been using WhatsApp as well as my current phone number for at least eight years now. As of now, everything went pretty smooth. That's why the message four days ago, 13rd of August 2021, struck me:...
1 vote
1 answer
223 views

Are Whatsapp phone numbers viewable by network admins?

If I connect to a network, is the network admin able to identify user phone numbers used by Whatsapp through the network traffic? In other words, are phone numbers used to signup by messaging apps ...
3 votes
1 answer
2k views

How to run whatsapp as privately as possible?

I believe it is fairly common knowledge that there are security and privacy concerns regards WhatsApp. The EFF, Ed Snowden, and many others, have expressed concern about the apps' integrity. You don't ...
1 vote
1 answer
307 views

WhatsApp message from own number + 1 [closed]

I got a WhatsApp message from a number which is exactly mine but the last digit is increased by one (5 instead of 4). It was just a "Hi" and and a photo of a random guy. I asked who it is ...
30 votes
2 answers
12k views

How can WhatsApp restore local or Google Drive Backups?

This is all not about their end-to-end transmission protocol and my question is mostly Android centric. What I ask myself: When reading about hacking and decrypting local WhatsApp database backups it ...
0 votes
0 answers
3k views

Only allowing WhatsApp traffic through firewalls

Problem: On our client's ship, we have an expensive backup internet connection. We want the backup connection to only allow WhatsApp traffic. This way we won't be greeted with an extreme bill because ...
0 votes
0 answers
109 views

I got a call from a contact on What'sApp and that person says they didn't call me even by accident. Should I be worried about using What'sApp?

I got a call from a contact on What'sApp, and when I picked up there was no audio. The person says they weren't even holding their phone when it happened, and it even took a minute for the call to ...
13 votes
4 answers
10k views

How To Recover End-To-End Encrypted Data After Losing Private Key?

I'm creating a mobile app which has chat feature in it. Since I wanted to make it secure, I'll do some encryption to messages and the data. I'm thinking of using End-To-End encryption for it but I've ...
1 vote
0 answers
145 views

How Can I Backup App Data In Android/iOS Devices?

After my other post I'm looking over some other possibilities to do what I'm trying to do. How To Recover End-To-End Encrypted Data After Losing Private Key? If I save user data in server, in order to ...
0 votes
1 answer
547 views

Radio transmission on my whatsapp voice note

I was sending a voice note to a friend and when I listened to it, the first ~6 seconds were completely normal and then something weird happened. A radio transmission from some radio station (I don't ...
31 votes
3 answers
11k views

Can I use WhatsApp to securely send public key, symmetric key and private key?

I am asking this because WhatsApp says it is end-to-end encrypted. Are there any problems with sending a public key through WhatsApp? There might be some objections to sending symmetric and private ...
0 votes
0 answers
25 views

End-2-end encryption with WhatsApp [duplicate]

I have had recently gone through the horror of transferring WhatsApp conversations when changing phones (android for iPhone). Actually, the thing that it is close to impossible for everyday folk is a ...
26 votes
6 answers
14k views

Can governments intercept end-to-end encrypted Whatsapp communication through lawful interception?

Since Whatapp started end-to-end encryption with an option for users to verify keys, many government security agencies, like the Indian one, red-flagged such use of encryption. Now, Yesterday the ...
3 votes
1 answer
16k views

If I accidentally agree for new WhatsApp's terms and conditions, How to revert that? [closed]

WhatsApp team updates their policy and it will be from Feb 8. I accidentally agreed with the policy. Later I realized the policy is not good. How can I revert my agreement with the WhatsApp team? We ...
9 votes
2 answers
24k views

Found an application (Whatsapp) initiating UPnP requests, is it something that I should worry about?

I have logged in into my router using the web interface. I was checking UPnP forwarding (which is enabled by default), and found out that whatsapp is initiating a UPnP request on port 65072. Is ...
-1 votes
1 answer
190 views

Following the new WhatsApp data privacy update, why does WhatsApp ask from users, even if they didn't, who is going to check their source code?

New WhatsApp data privacy update, that it will share our data with Facebook, we all know Facebook owns WhatsApp and this is obvious Facebook can always access users of WhatsApp as well. So why to ask ...
3 votes
1 answer
366 views

Can contacts be stolen over public WiFi?

Being on vacation for a few weeks, I only have access to public WiFi. After I have done some research on google and using the search button here (because "how safe is public WiFi" is a really common ...
3 votes
2 answers
1k views

If Whatsapp media messages are e2e encrypted, what is the point of storing popular messages on the server?

There is something I don't understand about whatsapp's privacy policy. Your Messages. We do not retain your messages in the ordinary course of providing our Services to you. Once your messages (...
1 vote
0 answers
143 views

Does it make sense to create a Facebook account so I can tell them not to track me?

Not sure this is the right site to ask this, but here it goes. I've never created a Facebook account, because I don't want people to know about me more than I know about them. But I do have an ...
0 votes
1 answer
976 views

WhatsApp account got "hacked"/hijacked?

I was on a WhatsApp call with my friend (Alice) when the call suddenly dropped. I then immediately opened my chats and noticed an alert in a mutual group that said "Your security code with Alice ...
1 vote
1 answer
2k views

Why can't WhatsApp read end-to-end encrypted messages?

In the web page of WhatsApp there is the following: WhatsApp's end-to-end encryption ensures only you and the person you're communicating with can read what is sent, and nobody in between, not even ...