Is WhatsApp End-to-End Encrypted?

That protection means nobody but you and the person you're talking to can read the content. But it doesn't automatically extend to your chat backups, and it never covered metadata—the record of who you talked to, when, and how often. Here's what's actually locked down, and what isn't.

Is WhatsApp end-to-end encrypted by default?

Yes. WhatsApp's own security page states plainly that "No one can search for your phone number or read your personal messages" as part of what it calls its default privacy guarantee. You don't have to turn anything on to get this protection for your personal messages—it's active the moment you start a conversation.

What's not encrypted in WhatsApp—and why does it matter?

Encryption covers what you say, not the fact that you said it. A preprint from researchers at the University of Vienna and SBA Research found they could build a large-scale census of WhatsApp users by harvesting visible account data—timestamps, profile pictures, about text, and public keys—without ever touching message content. As the paper puts it, "we were able to perform a census of WhatsApp users, providing a glimpse on the macroscopic insights a large messaging service is able to generate even though the messages themselves are end-to-end encrypted." See the full arXiv preprint for the technical details. In plain terms: nobody can read your texts, but patterns about your contacts and activity can still be pieced together from what's left visible.

Are WhatsApp calls and messages encrypted the same way?

Yes. The company's FAQ on business features states that "the privacy and security of your personal messages and calls do not change. They are protected by end-to-end encryption, and WhatsApp and Meta cannot read or listen to them," according to WhatsApp's business features FAQ. The same FAQ does flag one business-chat caveat: some businesses use secure hosting services that Meta plans to offer to store and respond to customer messages, and WhatsApp says it labels those chats so users can decide whether to keep messaging that business.

Are WhatsApp backups encrypted?

Not automatically. This is the biggest gap people miss. Meta's WhatsApp blog describes a feature, not a default, when it says the encrypted-backup option means "the same security that protects your personal chats and calls on WhatsApp is applied to your chat backups so they are always safe, accessible and private"—but only once you turn it on. Before this option existed, protecting a backup meant memorizing "a password or a cumbersome 64-digit encryption key," according to the WhatsApp blog. As of October 2025, Meta made that easier: a passkey system lets you use your fingerprint, face, or screen lock instead of a password or that 64-digit key, as explained in the Meta Newsroom announcement. Meta notes that "WhatsApp was the first private messaging app to offer end-to-end encryption for your chat backups"—but offering the option isn't the same as applying it automatically. If you back up chats to iCloud or Google Drive and never visited the backup settings, your backup is likely sitting on that cloud service without WhatsApp's end-to-end protection. To check or turn it on, Meta's rollout instructions point to: Settings > Chats > Chat backup > End-to-end encrypted backup.

The feature is rolling out gradually rather than reaching everyone at once. Meta's announcement says: "We're rolling this feature out gradually over the coming weeks and months." So if you don't see the option yet, that's expected.

Encryption only protects what it's designed to protect—it doesn't stop someone from screenshotting a conversation, doesn't hide who you're messaging, and isn't the same thing as anonymity. For a broader breakdown of what end-to-end encryption does and doesn't cover across apps, read our explainer on what end-to-end encryption actually protects.

Sources

• Meta Newsroom: making it easier to encrypt WhatsApp chat backups — Meta's October 2025 announcement of passkey-based backup encryption and how to enable it.
• WhatsApp Blog: Encrypting your WhatsApp Chat Backup Just Got Easier — step-by-step settings path and background on why backups weren't encrypted by default before.
• WhatsApp Security page — WhatsApp's own statement of its default privacy guarantee for personal messages.
• WhatsApp Business Features FAQ — WhatsApp's own statement that personal messages and calls remain end-to-end encrypted.
• arXiv preprint: "Hey there! You are using WhatsApp" — a University of Vienna/SBA Research study showing what metadata remains visible even with end-to-end encryption in place.
• Privacy Unpacked: What End-to-End Encryption Actually Protects — our sister explainer on the limits of E2E encryption across messaging apps generally.