What Does End to End Encrypted Mean on WhatsApp? Plain English

You've probably seen the little notice at the top of a new WhatsApp chat saying messages and calls are end-to-end encrypted, and perhaps ignored it. I don't blame you. It sounds technical, yet it's the main reason people trust the app with private conversations and, if you run a business, with customer details. Here's what that phrase means, taken from WhatsApp's own help centre and privacy pages, plus the places where WhatsApp says it doesn't apply.

What end-to-end encrypted means on WhatsApp in plain English

WhatsApp describes it like this: your personal messages and calls are secured with a lock, and only you and the person you're talking to have the special key needed to open and read them. Nobody else can, and that includes WhatsApp. The scrambling happens on your phone before the message leaves it, and it's only unscrambled on the phone of the person you're writing to.

Think of posting a letter in a box that only the recipient can open. The postal service still carries it, but it can't read what's inside. WhatsApp says it uses the Signal protocol to do this, and that you don't need to switch anything on, because the encryption is on by default and works all the time.

What WhatsApp end-to-end encryption covers

According to WhatsApp, it covers your personal messages, calls, photos and videos, whether you're in a one-to-one chat or a group. That's the part most people care about. A few related points from WhatsApp's pages help to fill in the picture:

• Messages are usually kept on your own device rather than on WhatsApp's servers.
• If a message can't be delivered straight away, WhatsApp's privacy policy says the encrypted message can be held for up to thirty days before it's removed.
• Media you send can be kept in encrypted form on WhatsApp's servers for up to thirty days to help with delivery, according to the same policy.

Encryption protects the content of a conversation. It doesn't hide the fact that you have a WhatsApp account, and your phone number is still how people find you. If you'd like to understand who can see what, my guide to whether WhatsApp Business hides your personal number is a good companion read.

Where WhatsApp end-to-end encryption does not apply

This is the bit that often gets lost, and it's worth reading twice. WhatsApp's own statements say:

• Chats with a business account aren't treated as end-to-end encrypted by WhatsApp, because many businesses use Meta as their storage provider. If you chat with a company, assume more people at that company can read it.
• If you choose to talk to Meta AI, whether directly or in a group, Meta receives what you or others send to it. That's not a private two-person chat any more.
• A screenshot, a forwarded message or a person standing behind you can all share what's on the screen. Encryption protects the message in transit, not what a person does with it.

If you use WhatsApp for customers, that second point matters. Be sensible about what you collect and share in business chats, and don't ask customers for things like full card details by message.

How to check that a WhatsApp chat is end-to-end encrypted

WhatsApp says every one-to-one chat has its own security code, shown as a QR code and a long number on the contact's info screen. It's there so you and the other person can confirm that your calls and messages are end-to-end encrypted, by comparing the code or scanning each other's QR code. On the phone, open the chat, tap the contact's name at the top, then look for the Encryption option. Menus vary by app version.

You'll occasionally see a notice that a contact's security code changed. WhatsApp's help page says this can happen when someone reinstalls the app, changes phone, or adds or removes a linked device. It's usually harmless, and I've explained the other side of it in what a changed security code means in WhatsApp.

WhatsApp end-to-end encryption and your backups

A chat can be encrypted in transit and still be exposed if a copy sits somewhere less protected. WhatsApp's help centre has a page about end-to-end encrypted backup, which is an extra option for protecting a backup of your chat history. If you back up your chats, it's worth reading that page and deciding whether to switch it on. Keep any password or key it asks for somewhere safe, because WhatsApp can't read the backup for you.

Does end-to-end encryption stop WhatsApp accounts being hacked?

No, and this is a common mix-up. Encryption protects messages while they travel. An account can still be taken over if someone gets the six-digit code sent to your phone. I've written about that in my guide to how WhatsApp accounts get taken over and how to protect yours. The short version is never to share your code and to turn on two-step verification.

What WhatsApp end-to-end encryption means for small businesses

• Customers' personal chats with you on a standard account are covered, but remember the business-chat exception above if you use the WhatsApp Business app or a business platform.
• Use two-step verification on the phone number your business uses.
• Check your linked devices from time to time, especially if more than one person uses the number.
• Tell customers plainly how you handle their messages, and don't promise a level of privacy that WhatsApp's own pages don't state.

Frequently asked questions

What does end to end encrypted mean on WhatsApp?

It means your personal messages and calls are locked so that only you and the person you're talking to can read or listen to them. According to WhatsApp, no one else can, not even WhatsApp.

Can WhatsApp read my messages if they're end-to-end encrypted?

WhatsApp says it can't read personal messages or listen to personal calls that are end-to-end encrypted. Its pages note exceptions for business chats and content you choose to share with Meta AI.

Do I need to turn on end-to-end encryption in WhatsApp?

No. WhatsApp says it's on by default for personal messages and calls, and it can't be switched off for those chats.

What is the security code in a WhatsApp chat?

It's a QR code and a long number on the contact info screen that you and the other person can compare to confirm your chat is end-to-end encrypted. WhatsApp says it can change if someone reinstalls the app or changes phone.

Are WhatsApp Business chats end-to-end encrypted?

WhatsApp says it doesn't treat chats with businesses as end-to-end encrypted, because many businesses use Meta as their storage provider.