WhatsApp is one of the most popular messaging apps in the world, with over 2 billion users. One of the main features of WhatsApp is voice and video calling. WhatsApp promotes its calls as private and secure, with end-to-end encryption. This means only the people in the call can access the call content, not even WhatsApp itself. However, there have been some concerns over whether WhatsApp calls are truly as private as claimed. In this article, we will examine the evidence around the privacy of WhatsApp calls and voice messages.
Quick Answers
Are WhatsApp calls encrypted?
Yes, WhatsApp calls are encrypted end-to-end by default which means the call content is not accessible to anyone outside of the call, including WhatsApp and third parties.
Can WhatsApp access my calls?
No, due to end-to-end encryption WhatsApp cannot access the content of your calls. Only the participants in the call can access the call.
Can governments access WhatsApp calls?
In general no, not even governments can access WhatsApp call content due to end-to-end encryption. However, if a government legally compels WhatsApp to compromise a specific account they may be able to access future calls.
Are WhatsApp calls logged?
No call content is logged but some metadata like phone numbers, date and time is logged. This does not reveal call contents.
End-to-End Encryption
The key privacy feature for WhatsApp calls is end-to-end encryption. When end-to-end encryption is enabled, the call contents are encrypted on the sender’s device and only decrypted on the receiver’s device. This prevents any third parties, including WhatsApp itself, from accessing the call data.
Here is a summary of how WhatsApp implements end-to-end encryption for calls:
- The Signal protocol is used to encrypt all call data before it leaves the user’s device
- The encryption keys are stored only on the users’ devices, not WhatsApp’s servers
- Even if call data is intercepted in transit, it cannot be decrypted without the encryption keys
- The keys change with each call, preventing tracking across calls
This protocol is designed to mathematically guarantee call privacy against any party except the people in the conversation. Not even WhatsApp has the ability to decrypt the call data.
WhatsApp Cannot Access Call Contents
Due to end-to-end encryption, WhatsApp themselves claim they do not have the ability to listen to your calls or access call data. The call audio and video is encrypted between the caller and receiver. At no point is WhatsApp able to access unencrypted call data.
WhatsApp’s privacy policy states: “We do not retain your private calls. Once your call ends, we delete the encrypted call information (except for undelivered calls).”
There is no evidence to suggest WhatsApp has any backdoor or key to enable decrypting users’ calls. Independent security researchers have validated WhatsApp’s encryption methods.
So while WhatsApp’s servers facilitate the call connection, the call contents remain private from WhatsApp itself.
Governments Cannot Access Calls
In general, government agencies also cannot access WhatsApp call contents due to end-to-end encryption. The encryption happens on users’ devices, so there is no centralized server for governments to access call data from.
However, there are some exceptions where governments can potentially access WhatsApp call contents:
- If a government legally compels WhatsApp to compromise an individual user’s account, they could enable call interception for that account only.
- If a user’s phone is hacked and encryption keys are stolen, calls could be intercepted at the device level.
- Calls made over compromised internet networks without VPNs could potentially allow governments to intercept data in transit.
Still, under normal circumstances government agencies cannot legally access WhatsApp call contents on a broad level due to end-to-end encryption. They would need to specifically target an individual account.
What Metadata is Collected?
While WhatsApp cannot access call contents, some metadata around calls is logged:
- Phone numbers involved in the call
- Date and time of the call
- Call duration
- Mobile phone identifiers like IMEI number
This metadata reveals who called who and when, but not what was said in the call.
WhatsApp states they need this metadata to maintain the WhatsApp service, including routing calls and troubleshooting problems. However, they cannot use it to access call contents.
This metadata could potentially be accessed by governments with a legal order to WhatsApp.
Are WhatsApp Voice Messages Private?
WhatsApp also allows sending voice messages or notes. These are treated similarly to calls in that they are end-to-end encrypted. Neither WhatsApp nor third parties can access the contents of WhatsApp voice messages.
Some key points about WhatsApp voice message privacy:
- Encrypted with the same Signal protocol used for WhatsApp calls
- Stored encrypted on WhatsApp’s servers until delivered
- Deleted from WhatsApp servers after delivery to user
- Governments cannot access message contents without compromising target device
So in summary, WhatsApp voice notes have the same high level of privacy as WhatsApp voice and video calls.
Risks and Limitations
While WhatsApp calls are generally very secure and private, there are still some risks and limitations to be aware of:
- The initial call setup process is not encrypted, posing a metadata privacy risk.
- Calls over compromised internet networks could be intercepted.
- Individual user accounts could be targeted and compromised by governments.
- Bugs or backdoors in WhatsApp’s code could theoretically enable call interception – but this is unverified.
- If your phone is hacked, encryption keys could be stolen to intercept future calls.
So while WhatsApp calls have strong end-to-end encryption, the overall system is still vulnerable to targeted hacking and intercepts. Users seeking maximum call privacy may want to use additional encryption tools.
Comparison to Other Messaging Apps
WhatsApp is not the only messaging app to offer end-to-end encrypted calls. Here is how WhatsApp compares to some other popular messaging apps in terms of call privacy:
| App | End-to-End Call Encryption | Can App Access Call Content |
|---|---|---|
| Yes | No | |
| Signal | Yes | No |
| Telegram | Optional | Yes (if E2EE not enabled) |
| Skype | No | Yes |
| Facebook Messenger | No | Yes |
From this comparison, WhatsApp is on par with Signal in terms of call encryption and privacy. Apps like Skype and Facebook Messenger do not offer the same level of call privacy.
Is WhatsApp Safe for Sensitive Conversations?
Based on the available evidence, WhatsApp calls and voice notes appear reasonably safe for sensitive conversations under normal circumstances. The risk of interception is low outside of targeted surveillance.
However, users with an extreme threat model may want to combine WhatsApp with other layers of encryption and security:
- Use VPNs to encrypt internet traffic.
- Use devices with encrypted operating systems.
- Verify contacts’ identities to avoid interception.
- Enable WhatsApp two-factor authentication.
- Frequently verify encryption keys to detect interception.
Following best practices around device security and network encryption can help minimize any remaining risks.
Conclusion
To conclude, WhatsApp calls and voice messages appear to have strong end-to-end encryption that prevents interception by governments, WhatsApp itself or third parties. While some metadata around calls can be collected, the call contents remain private.
There are still risks around targeted surveillance, device hacking, and insecure internet connections. But overall, WhatsApp calls offer users a reasonable level of privacy in most situations. Users seeking maximum security may want additional encryption tools and safeguards to minimize any remaining risks. But for the majority of users, WhatsApp calls are reasonably safe and private.