WhatsApp is reportedly working on a new security-focused feature that could help users better protect their accounts from potential privacy and security risks. The Meta-owned messaging platform is testing a warning system that alerts users when they connect their WhatsApp accounts through unofficial or third-party web clients instead of the official WhatsApp Web platform. The feature was recently spotted in a beta version of WhatsApp for Android and will be available to a wider group of users in a future update.
The new warning is part of the Linked Devices section of WhatsApp that users can access to manage all computers and devices connected to their accounts. If WhatsApp detects that a user is trying to connect through an unofficial web client, then the application will show a notification to them to switch to the official WhatsApp Web service. The purpose is to keep WhatsApp users up-to-date with the risks of third-party apps and communication in their WhatsApp accounts.
Why is WhatsApp introducing this feature?
Unofficial WhatsApp web clients and browser extensions are now very popular for some users because they provide additional customization features or alternative interfaces. Nevertheless, these tools are not produced, managed or verified by WhatsApp. As a result, the company cannot guarantee how they handle sensitive user information such as messages, contacts, media files and account credentials.
Security experts have long warned that third-party applications may be intermediaries between users and official services. When an app does not provide the same security measures as the official app, personal data may be exposed. WhatsApp’s new warning system seems to be part of a larger strategy to make certain users are able to assess these risks before connecting their accounts through unofficial channels.
How the Warning Will Work
According to beta testing, the alert was found in WhatsApp beta for Android version 2.26.35.1. The warning will appear whenever WhatsApp detects an unofficial web client connection. Users can dismiss the notification but the warning may continue to appear until they switch to the official WhatsApp Web platform.
The feature is still in development and is not yet widely available to all beta testers. WhatsApp has not given a firm launch date yet, which means testing and iteration are ongoing.
Growing Focus on Security
This is in line with WhatsApp's increased focus on security and privacy. Earlier this year, WhatsApp had warned hundreds of users that they had unknowingly installed a fake version of WhatsApp that was infected with spyware. That incident highlighted the dangers of unofficial apps that mimic trusted services. WhatsApp then encouraged the affected users to uninstall the fake application and install the official application instead.
WhatsApp has previously discouraged the use of unofficial versions of its platform. Users have previously been warned that modified or unauthorized clients may violate its terms of service and potentially compromise account security. It appears that the new web-client warning is an extension of that long-standing policy.
Risks of Unofficial Web Clients
Researchers warned that unofficial web clients can leak user data if they can intercept user information before it is encrypted or after encrypted data has been decrypted. Although WhatsApp's official platform has end-to-end encryption, the company does not know if third-party software is secure. This creates an open risk that messages, photos, videos and contact information can be accessed by unauthorized parties.
Browser extensions that embed WhatsApp Web within a different interface can also trigger the new warning system. Users who rely on such tools could receive alerts telling them that their connection may not be fully secure.
What Users Should Do
To prevent any security risk, users should only access WhatsApp from official channels. The safest options are the official app on the phone, the official desktop app and the official application on the WhatsApp Web. Users should be careful of downloading browser extensions or third-party apps which promise to add WhatsApp functionality.
Experts suggest checking the web address before linking an account. Users should verify the legitimacy of the service in case it isn't available on the official WhatsApp Web platform.
As WhatsApp is concerned with cybersecurity protection, the company is working on security features to improve account protection and transparency. The feature is still being tested but it could be a significant security assurance for millions of people across the world whose daily lives are intertwined with WhatsApp for personal and professional communication.
