Explained | WhatsApp brings passkeys security for end-to-end encryption of cloud backups; how to enable it

For passwords, the user has to remember them every time they move from one device to another. And, 64-digit encryption keys are vulnerable to brute-force attacks and may be stolen. Passkeys are a safer bet for user privacy security.

In 2023, Meta introduced a new user privacy safety feature to protect private chats with passkey security.

Now, Mark Zuckerberg-owned entity has launched a similar feature for end-to-end encryption of backup data stored in cloud storage -- iCloud (for iPhones/iPads/Mac devices) and Google Drive (for Android phones and tablets).

Currently, users have two options to secure their end-to-end encrypted data with either a password of their choice or a 64-digit encryption key that only the account owner knows. But these two have risks.

For passwords, the user has to remember them every time they move from one device to another. And, 64-digit encryption keys are vulnerable to brute-force attacks and may be stolen.

Previously, WhatsApp offered two options-- password and 64-key encryption protection for backup data on cloud server.

However, the passkeys are safer than any of the conventional security features.

What is passkeys?

Passkeys is a short user ID alternative to log in to online accounts. This is a one-time process, and once done, users do not have to remember multiple passwords for different accounts.

People don't have to write it down in a secret journal or store it in a phone's digital notepad. Most importantly, unlike passwords, passkeys can't be stolen or guessed easily by cyber crooks to take over an online account.

Once the user enables Passkey on the device, he/she can log in to the account by choosing the Passkey option instead of entering a traditional password.

The device will securely connect with an online account, using the access key stored on the encrypted storage of the device to authenticate the identity.

The user can use biometric security features such as FaceID or TouchID (fingerprint sensor) or the device's passcode to log in to the online platform.

WhatsApp brings Passkeys for protection of backup data on cloud server.

Once the cloud storage is secured with end-to-end encryption, neither WhatsApp nor the backup service provider (Apple or Google), will be able to read the backups or access the key required to unlock them.

Here's how to enable end-to-end encryption of WhatsApp data backup:

Go to Settings > Chats > Chat backup > End-to-end encrypted backup >> Turn on >> Select Passkeys option

It should be noted that WhatsApp is rolling out this feature in phases, so it will take a week or two to reach all corners of the world. It will be available for both the Android and iOS versions of WhatsApp. It will be released to other versions later.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech