Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> WhatsApp, a Facebook owned app, will not give you read access to your own chat database - it’s encrypted.

On android? On iOS you can get a tarball of all your chats.



I just had to check this; the Android app has "Request account info" and specifically mentions "which you can access or port to another app".

As much as I'm happy to pile on Google, Facebook and WhatsApp, this appears to be untrue.


It also specifically mentions that doesn't contain all the messages, and takes up to 3 days. You can export individual chats as texts, but not all the attachments, metadata, etc - and you have to specifically select each one.

The statement that "Facebook gives an unencrypted copy of your chat database to Google but will not give it to you" is true; I'm referring to the SQLite database. You can back it up locally, but it's encrypted and Facebook will not willingly give you the key under any circumstance (though it is possible to trick them by impersonating the app). However, the Google Drive backup is unencrypted. But Google won't let you download it directly either (although, again, you can trick them by impersonating the app).


Thanks for clarifying, makes sense. This sort of behaviour really gets my goat. Just like trying to get my 2FA keys out of Authy so I could switch to Aegis involved having to use a third party tool written in Golang on my PC, to extract them using the API, or use some js hack on the deprecated Chrome extension to write them to the console.

Recently I was trying to switch my wife away from the free Keeper app to the one I use and backup to our own storage, they make it impossible to get your passwords without paying them or rooting your phone. I hand copied them one by one from her old to new phone. Honestly, screw any company that does this.


isn't whatsapp using e2e ?

if that's the case then facebook can't "give you" the key, because they don't have it, it's supposed to be on your phone and only there..

Is there something i'm missing here ?


It's using e2e during transmission. On your local device, it is plaintext.

They make a copies of that plaintext database for backup purposes:

One on google drive (not mandatory, but it IIRC by default), which is still plaintext but not accessible to yourself.

One on your local SD card (if you ask for it), which is encrypted with a key that's on your phone but was sent down from FB servers. If you switch your phone, and try to restore that database, it will contact FB servers to retrieve the key.

> if that's the case then facebook can't "give you" the key, because they don't have it, it's supposed to be on your phone and only there..

Regardless of the backup encryption, e2e doesn't mean that they don't have the key; it just means that it leaves one phone encrypted and enters the other encrypted without being decrypted along the way -- unlike, e.g. regular email, which is usually encrypted in transit by TLS, but gets decrypted and re-encrypted at every stop along the way.


That is just what WhatsApp stores about you on their servers i.e. contacts and groups.

But you can export all chats one by one.


On android you can select "export chats", select contacts and then send it to where you want it.


You can do that on iOS as well. That has been a feature for a long time.


Yes, individual chats, and not a complete record last time I tried (no "when received / when read" times; no attachments). There's a simple SQLite file containing everything; They upload it to google drive unencrypted, but neither google nor facebook will give you an unencrypted copy.

When you make a local backup, it is encrypted, and Facebook doesn't think you deserve a copy of the key or an unencrypted copy.


I think this is incomplete (it doesn’t represent replies or media properly) and the parent comment was talking about the SQLite database containing all messages




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: