To enhance the privacy of personal chats, images and videos, WhatsApp said it will allow users to encrypt the content backup on services such as iCloud on iPhones and Google Drive on Android.
The Facebook-owned company has provided end-to-end encryption of chats between the sender and the receiver for more than a decade. But there is no option that allows users to encrypt chat backup.
The new security feature will be made available in the coming weeks, the company said.
We’re adding another layer of privacy and security to WhatsApp: an end-to-end encryption option for the backups people choose to store in Google Drive or iCloud
Mark Zuckerberg,
chief executive of Facebook
“Our primary focus is on protecting people’s messages,” Will Cathcart, head of WhatsApp, said.
“That's why we've used end-to-end encryption for messages in-transit, why we’re adding easy ways for private messages to disappear and now strong backup encryption to protect the messages you want to keep.”
The National looks at the new feature and explores the possibilities that it will open up for the users.
What is the new security feature?
Currently, users can store their WhatsApp history on cloud-based storage services like iCloud or Google Drive and they are protected by the individual service providers.
But they are not stored in an encrypted format and can be accessed stealthily by third parties or even cybercriminals. The new feature will let users opt for end-to-end encrypted (E2EE) backups as well.
“Neither WhatsApp nor the backup service provider will be able to access their backup or their backup encryption key,” the company said.
How does E2EE backup work?
To enable E2EE backups, the company has developed a new system for encryption key storage that works with both iOS and Android. Using the system, users will be able to generate encryption keys and passwords.
With E2EE backups enabled, the stored content will be encrypted with a “unique, randomly generated encryption key”. Users can choose to secure the key manually or with a password.
“When someone opts for a password, the key is stored in a backup key vault that is built based on a component called a hardware security module [HSM] – [a] specialised, secure hardware that can be used to securely store encryption keys,” WhatsApp said.
When the account owner wants to access their backup, they can access it with their encryption key or they can use their personal password to retrieve their encryption key from the HSM and decrypt their backup.
How safe is HSM?
The HSM will be responsible for enforcing password verification attempts and it could make the key permanently inaccessible after a limited number of unsuccessful attempts to access it.
“These security measures provide protection against brute-force attempts to retrieve the key. WhatsApp will know only that a key exists in the HSM. It will not know the key itself,” the company said.
How users can access secured WhatsApp backup?
They need to perform three steps to retrieve the secured backup:
- Enter the encrypted password.
- Once the password is verified, the backup key vault will send the encryption key back to the user.
- With the key in hand, the users can decrypt the backups.
Alternatively, if an account owner has chosen to use the 64-digit key alone, they will have to manually enter the key to decrypt and access their backups.
Ten tax points to be aware of in 2026
1. Domestic VAT refund amendments: request your refund within five years
If a business does not apply for the refund on time, they lose their credit.
2. E-invoicing in the UAE
Businesses should continue preparing for the implementation of e-invoicing in the UAE, with 2026 a preparation and transition period ahead of phased mandatory adoption.
3. More tax audits
Tax authorities are increasingly using data already available across multiple filings to identify audit risks.
4. More beneficial VAT and excise tax penalty regime
Tax disputes are expected to become more frequent and more structured, with clearer administrative objection and appeal processes. The UAE has adopted a new penalty regime for VAT and excise disputes, which now mirrors the penalty regime for corporate tax.
5. Greater emphasis on statutory audit
There is a greater need for the accuracy of financial statements. The International Financial Reporting Standards standards need to be strictly adhered to and, as a result, the quality of the audits will need to increase.
6. Further transfer pricing enforcement
Transfer pricing enforcement, which refers to the practice of establishing prices for internal transactions between related entities, is expected to broaden in scope. The UAE will shortly open the possibility to negotiate advance pricing agreements, or essentially rulings for transfer pricing purposes.
7. Limited time periods for audits
Recent amendments also introduce a default five-year limitation period for tax audits and assessments, subject to specific statutory exceptions. While the standard audit and assessment period is five years, this may be extended to up to 15 years in cases involving fraud or tax evasion.
8. Pillar 2 implementation
Many multinational groups will begin to feel the practical effect of the Domestic Minimum Top-Up Tax (DMTT), the UAE's implementation of the OECD’s global minimum tax under Pillar 2. While the rules apply for financial years starting on or after January 1, 2025, it is 2026 that marks the transition to an operational phase.
9. Reduced compliance obligations for imported goods and services
Businesses that apply the reverse-charge mechanism for VAT purposes in the UAE may benefit from reduced compliance obligations.
10. Substance and CbC reporting focus
Tax authorities are expected to continue strengthening the enforcement of economic substance and Country-by-Country (CbC) reporting frameworks. In the UAE, these regimes are increasingly being used as risk-assessment tools, providing tax authorities with a comprehensive view of multinational groups’ global footprints and enabling them to assess whether profits are aligned with real economic activity.
Contributed by Thomas Vanhee and Hend Rashwan, Aurifer
RESULTS
5pm: Watha Stallions Cup Handicap (PA) Dh 70,000 (Dirt) 2,000m
Winner: Dalil De Carrere, Bernardo Pinheiro (jockey), Mohamed Daggash (trainer)
5.30pm: Maiden (TB) Dh 70,000 (D) 2,000m
Winner: Miracle Maker, Xavier Ziani, Salem bin Ghadayer
6pm: Maiden (PA) Dh 70,000 (D) 1,600m
Winner: Pharitz Al Denari, Bernardo Pinheiro, Mahmood Hussain
6.30pm: Maiden (PA) Dh 70,000 (D) 1,600m
Winner: Oss, Jesus Rosales, Abdallah Al Hammadi
7pm: Handicap (PA) Dh 70,000 (D) 1,400m
Winner: ES Nahawand, Fernando Jara, Mohamed Daggash
7.30pm: Maiden (PA) Dh 70,000 (D) 1,000m
Winner: AF Almajhaz, Abdul Aziz Al Balushi, Khalifa Al Neyadi
8pm: Maiden (PA) Dh 70,000 (D) 1,000m
Winner: AF Lewaa, Bernardo Pinheiro, Qaiss Aboud.
Kanguva
Director: Siva
Stars: Suriya, Bobby Deol, Disha Patani, Yogi Babu, Redin Kingsley
