Top Stories


    Apr 07, 2016

    WhatsApp goes all private with encryption

    POPULAR chat app WhatsApp now encrypts all the communications of its users, making it harder for anyone - including law enforcement agencies - to snoop on conversations and harvest messages.

    In a blog post on Tuesday, WhatsApp co-founders Jan Koum and Brian Acton said the messaging service has extended encryption - which started with just text on Android devices in 2014 - to all communications including photos, group chats, videos and calls, and Apple devices.

    "No one can see inside that message. Not cybercriminals. Not hackers. Not oppressive regimes. Not even us," said the post.

    "End-to-end encryption helps make communication via WhatsApp private - sort of like a face-to-face conversation."

    This means that only the sender and recipient can see the messages. Users need to update their app with the latest version to benefit.

    US-based Internet statistics firm Statista estimates that more than 70 per cent of mobile Internet users in Singapore are on WhatsApp.

    Globally, WhatsApp users number more than a billion.

    The update comes in the wake of heightened international debate over law enforcement bodies' access rights, and Apple's tussle with the Federal Bureau of Investigation (FBI) over an order to unlock the encrypted iPhone of a mass shooter.

    Acknowledging this in the post, the co-founders said: "While we recognise the important work of law enforcement in keeping people safe, efforts to weaken encryption risk exposing people's information to abuse from cybercriminals, hackers and rogue states."

    Lawyers believe the new feature does not change the limitations of Singapore laws on digital services not based here.

    The Criminal Procedure Code in Singapore requires technology companies to disclose information, or any codes they may have to unlock locked or encrypted information.

    "But the law extends only to companies with a local presence," said lawyer Cyril Chua of ATMD Bird & Bird.

    "WhatsApp servers are not located here. Even though WhatsApp's parent company Facebook has local presence, it may be hard to enforce the law on Facebook as they are different legal entities," he added.

    Also, local telcos Singtel, StarHub and M1 do not store WhatsApp messages on their servers.

    Market observer and director of an IT company, Michael Tan, 45, said WhatsApp possibly did this as it does not want to be liable for customer information that governments want to snoop on.

    However, WhatsApp still has access to other confidential customer information.

    "Customer metadata such as when and how often they use WhatsApp, their Internet addresses, circle of friends or frequent chatting buddies can be more powerful than the actual message exchanged, for targeted marketing," said Mr Tan.