Skip to Content

What ports does WhatsApp use firewall?

WhatsApp is a popular messaging app used by over 2 billion people worldwide. It uses the internet to send messages, images, videos, documents, and voice calls between users. For WhatsApp to work properly, certain ports need to be open on routers and firewalls. Knowing what ports WhatsApp uses can help troubleshoot connection issues and optimize network security settings.

WhatsApp Ports

WhatsApp requires the following ports to be open for optimal functionality:

Port 5222

This port is used by WhatsApp for the XMPP/Jabber protocol to establish connections between WhatsApp clients and WhatsApp servers. XMPP stands for Extensible Messaging and Presence Protocol and is an open protocol for real-time messaging. WhatsApp uses XMPP for text messaging, group chat, status updates and transferring files. Port 5222 needs to be open for incoming and outgoing XMPP traffic.

Port 5223

This is an additional XMPP/Jabber port used by WhatsApp for client-server communication. It can provide redundancy if port 5222 is blocked. For full XMPP functionality, port 5223 also needs to be unblocked on routers and firewalls.

Port 4244

WhatsApp uses this port for video calling. Opening port 4244 allows WhatsApp clients to connect to WhatsApp’s servers for video calling and screen sharing features. Firewalls need to allow bi-directional traffic on port 4244.

Port 4443

WhatsApp web uses port 4443 to connect user’s smartphones to WhatsApp web. If this port is blocked, WhatsApp’s web application will not work properly.

Port 443

WhatsApp uses HTTPS and communicates over port 443 for encrypted web traffic between users’ smartphones, WhatsApp’s servers and content delivery networks. Port 443 needs to be open for sending and receiving messages, media and documents.

UDP Ports for Media

In addition to the TCP ports, WhatsApp uses UDP ports for transferring media files like photos, videos and audio messages. Though UDP is not always required, opening the following UDP ports can improve media delivery:

  • Port 3478
  • Port 4244
  • Port 16384 to 16387

Steps to Open Ports on Firewall

To allow WhatsApp’s ports and protocols on a firewall, follow these general steps:

  1. Log into your firewall admin interface and navigate to port forwarding or port triggering settings.
  2. Create new rules to open TCP ports 5222, 5223, 4244 and 443 for inbound and outbound traffic.
  3. Open UDP ports 3478, 4244 and range 16384 to 16387.
  4. Specify IP addresses of devices that need WhatsApp access in the firewall rules.
  5. Configure your firewall to allow XMPP/Jabber protocols.
  6. Save and apply the new firewall rules.
  7. Test to confirm WhatsApp connectivity.

The exact steps depend on the firewall brand and model. Refer to the firewall admin guide for specific instructions. Some key things to ensure are:

  • Outbound rules are configured in addition to inbound rules.
  • IP addresses of smartphones, desktop PCs and servers are allowed in rules.
  • Rules are ordered correctly, with WhatsApp rules on top.
  • Unused old rules are deleted to avoid conflicts.

For additional security, limit the IP address ranges to only allow trusted device subnets access.

Opening Ports on a Router

Routers may also need WhatsApp ports forwarded to devices inside the network. Here are the steps:

  1. Access your router admin console, usually at an IP address like 192.168.1.1.
  2. Navigate to Port Forwarding or Virtual Server settings.
  3. Create new entries for TCP ports 5222, 5223, 4244 and 443.
  4. Set the internal IP address of the device that needs WhatsApp access.
  5. Save settings and test connectivity.

Again, refer to your specific router brand’s admin guide for detailed instructions.

Enabling UPnP on your router can also automatically open WhatsApp ports. However, UPnP port forwarding should only be enabled when absolutely necessary as it presents security risks.

Troubleshooting WhatsApp Connectivity

If WhatsApp is still not working after opening the required ports, try these troubleshooting steps:

  • Confirm ports are open using online port check tools.
  • Check for conflicting firewall or antivirus software blocking ports.
  • Verify no NAT or proxy servers are blocking traffic.
  • Disable VPN connections and retest.
  • Clear WhatsApp cache and force close the app.
  • Check for DNS errors preventing WhatsApp server resolution.
  • Retry with cellular data instead of Wi-Fi.

Restarting the smartphone, router, firewall and network equipment may help resolve intermittent connection issues. WhatsApp’s network status page can also indicate any service outages.

Conclusion

WhatsApp requires TCP ports 5222, 5223, 4244 and 443 to be open for optimal performance. UDP ports 3478, 4244 and range 16384-16387 are also recommended for media transfer. Configure your firewalls and routers to allow both inbound and outbound access to these ports. Limiting access to only trusted device IP addresses is recommended for security. Troubleshoot any connectivity issues by verifying port access and resolving network problems. With the proper ports configured, WhatsApp will work seamlessly across Wi-Fi and cellular networks.