Skip to main content

WhatsApp users might leave traces of personal data after clearing chat logs

whatsapp
Image used with permission by copyright holder
“Delete.”

When you click the button, in comes a rush of satisfaction. You’ve gained newfound free space, of course, but more importantly, an unwanted piece of your digital footprint is gone, without a trail of breadcrumbs to so much as suggest at its previous existence. Nothing nebulous. It’s clear cut. Gone, and gone forever.

But what happens when it isn’t so straightforward?

Digital forensics and security expert Jonathan Zdziarski published research findings this week on his blog that suggest the more than 1 billion active users of WhatsApp might not actually be deleting their data when they tap the “clear all chats” button.

While encryption and privacy has been a major selling point for the popular messaging app, Zdziarski’s findings show the latest version of the app “leaves forensic trace of your chats, even after you’ve deleted, cleared, or archived them … even if you ‘Clear All Chats.’ In fact, the only way to get rid of them appears to be to delete the app entirely,” he writes.

Zdziarski made it clear that while the service itself deletes the record and doesn’t appear to be intentionally keeping user chat data on its servers, “the record itself is not being purged or erased from the database, leaving a forensic artifact that can be recovered and reconstructed back into its original form.”

So, what does it all mean for users? First, there’s no need to panic, Zdziarski says — it’s more important for people using WhatsApp to be aware of their digital footprint. He doesn’t suggest the app has some internal vulnerability making it easier for hackers to hijack your information.

However, it does mean that after issuing a warrant with Apple, law enforcement could potentially obtain your deleted chat logs.

It also means people with physical access to your device could create a backup with the encrypted data, and people with physical access to your computer could “copy this data from an existing, unencrypted backup, or potentially decrypt it using password breaking tools, or recover the password from your keychain.”

While WhatsApp has not yet responded to a request for comment, Zdziarski further outlined in the original post how the company could mitigate the issue in future versions of the app.

“Software authors should be sensitive to forensic trace in their coding. The design choices they make when developing a secure messaging app has critical implications for journalists, political dissenters, those in countries that don’t respect free speech, and many others,” he writes. “A poor design choice could quite realistically result in innocent people — sometimes people crucial to liberty — being imprisoned.”

Editors' Recommendations

Harrison Kaminsky
Harrison’s obsession in the tech space originated in his father’s electronics store in Denville, New Jersey, where he…
WhatsApp is copying two of Zoom’s best video-calling features
Call Links by WhatsApp

WhatsApp is taking a couple of pages out of Zoom's playbook. The Meta-owned company is rolling out the Call Links feature, making it easier for people to join audio and video calls with just one tap on the phone screen.

Mark Zuckerberg announced the new feature in a Facebook post on Monday morning. Starting this week, WhatsApp users will be able to tap the Call Links option within the Calls tab and create a link for audio or video calls to send to their friends and family, who will then tap on the link and join the call from there.

Read more
WhatsApp just upgraded its emoji reactions and I want them now
Close up of WhatsApp icon as seen on a smartphone display. Credits: WhatsApp official.

WhatsApp will now allow users to react to messages with any emoji, in an expansion of its reaction feature that came out last year. It's coming to iOS and Android over the coming weeks, and it brings more personalization to one of the world's most used messaging apps.

Once you get the update, the emoji reactions will work as they do now, with a long press bringing up the basic six options with the incision of a new plus button. Pressing that plus icon will show you the new expanded set of emojis, and you'll be able to add whatever emoji you want. This includes skin tone variations, family types, and more.

Read more
You can finally move your WhatsApp chats from Android to iOS
WhatsApp and Telegram app icons.

Moving WhatsApp chats from Android to iOS has been a painful task for years. But not anymore, as Apple and WhatsApp have made the process a whole lot easier. Starting today, Apple is adding a feature that allows you to move chats between the two platforms. The feature is a part of Apple’s existing “Move to iOS” Android application. It’s worth noting that the feature is currently available for beta users only, so non-beta users might have to wait for a week or two as it's rolled out in phases.

This is a big move since 2 million people use WhatsApp and, until now, there wasn’t an official method to move conversations between Android and iOS. There have been third-party solutions here and there, but nothing officially backed by Apple or WhatsApp. With the feature becoming available, users will be able to move their chats swiftly from Android to iOS.

Read more