It seems like Meta has finally taken user privacy more seriously and added three extra security features. These include Device Verification, Automatic Security Codes, and Account Protect. The updates were announced right after WhatsApp unveiled its latest ‘Stay Safe with WhatsApp’ campaign.
The Device Verification feature has already been rolled out to all Android users and is currently in the roll-out phase for iOS users.
Based on what we know so far about these additions, these features will not only add an extra layer of protection but will also give the user more control over who gets to choose to access their account.
What Are These Features All About?
The Account Protect feature is for those trying to move their WhatsApp account to a new device. Once you initiate the transfer, you’ll get a notification on your old device asking you to authorize the move. This feature is designed to prevent unauthorized users from hacking into your device or moving it to their system without your consent.
For more privacy, the company also offers two-factor authentication and end-to-end encrypted backups.
The Device Verification is designed to deal with mobile malware that could hack your device and send messages through your WhatsApp account without your knowledge.
This feature is completely automated and needs no supervision. WhatsApp will automatically authenticate your account and ensure it hasn’t been invaded by malware, virus, or hacker.
The third security feature is the Automatic Security Codes which can be used to verify connections with other devices/accounts. Powered by a unique “Key Transparency” process, this feature will ensure that you’re chatting with the right person.
While this feature was available earlier, it was only used by the most skeptical users and needed a manual initiation. The new update has automated the process. Now, WhatsApp will authenticate every connection before you start chatting— no user action is required.
How Does Device Verification Work?
Of the three newly added security features, Device Verification seems to have received the maximum attention. After all, moving your WhatsApp to a different device is a one-of thing, and chatting with the right person is still easier to verify, but protection against malware? Now that’s something of interest.
Earlier, WhatsApp used an authentication key to prevent a malware outbreak. But this key can be easily stolen, especially if you have an infected third-party application on your mobile. Once the key is stolen, your WhatsApp account will be left vulnerable once again.
To amp up protection, WhatsApp added three new security tokens. This includes:
- A security token that is updated every time an offline message is retrieved
- A nonce that will identify and authenticate the user trying to retrieve those messages, and
- An authentication challenge that will ping the user’s device asynchronously.
Together, these three features not only make it impossible for malware to steal the key but also prevent a hacker from connecting to your WhatsApp server outside your device.
Read More
Margarete Coby