WhatsApp’s “End-to-End Encryption by Default” Claim Called Consumer Fraud by Pavel Durov

Telegram founder Pavel Durov has publicly criticized WhatsApp, labeling its “end-to-end encryption by default” claim as a massive consumer fraud.

He argues that while messages may be encrypted during transit, the default backup settings leave the vast majority of user conversations completely unprotected.

In a recent statement on the social media platform X, Durov highlighted a critical vulnerability in how the popular messaging application handles user data backups.

This accusation reignites the ongoing debate surrounding data privacy, usability, and secure messaging standards.

The controversy also sheds light on the often misunderstood difference between encrypted transit and secure data storage.

The Cloud Backup Vulnerability

Durov pointed out that roughly 95% of private WhatsApp messages eventually end up stored as plain text on Apple and Google servers.

This happens because the application automatically backs up chat histories to iCloud or Google Drive by default.

While WhatsApp introduced an optional end-to-end encrypted backup feature in 2021, Durov noted that very few users actually enable it or take the time to set strong passwords for these archives.

Because the default configuration relies on unencrypted cloud storage, the initial end-to-end encryption becomes virtually meaningless if a third-party server is compromised or legally subpoenaed.

Cybercriminals frequently target these cloud accounts, knowing that standard backups serve as a goldmine for extracting sensitive information.

While Durov defended his own platform by stating Telegram has never disclosed user message content in over a decade, security experts quickly noted the irony in his statements.

Cryptography researchers like JP Aumasson have called Durov’s critique disingenuous due to Telegram’s own underlying architecture.

Unlike WhatsApp, Telegram does not offer end-to-end encryption by default for standard chats, relying instead on basic client-server encryption.

This means standard messages are effectively stored in plain text on Telegram’s own infrastructure, granting the company access to the decryption keys for most conversations.

Consequently, cybersecurity professionals continue to recommend alternative applications like Signal for superior default privacy and strictly secure local storage capabilities.

This public exchange brings attention to the constant tradeoff between maximum privacy and everyday application usability. Features like seamless multi-device syncing require centralized data storage, which inherently introduces new security vulnerabilities.

As the debate over messaging privacy escalates, the market is preparing for new competitors to enter the space.

According to social media commentator Mario Nawfal, a new secure messaging application called XChat is scheduled to launch on iOS on April 17.

This upcoming platform reportedly promises end-to-end encryption, self-destructing messages, and screenshot blocking without requiring a user phone number, aiming to attract users frustrated by current tech giants.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.