A class action lawsuit alleges that WhatsApp does not implement end-to-end encryption (E2EE) as claimed, asserting that Meta employees can access users' messages. The lawsuit contradicts the statements made by WhatsApp founders Jan Koum and Brian Acton, who designed the app with E2EE to ensure that only the participants in a chat could decrypt messages.
Concerns have been raised about the privacy implications of this lawsuit, suggesting that Meta may store and allow access to encrypted communications. According to whistleblower accounts, Meta staff can easily request access to users’ messages through an internal system, potentially granting them unlimited temporal access, including to messages that users believe have been deleted.
Professor Matthew Green from Johns Hopkins University has analyzed these claims, noting that while WhatsApp's encryption is based on the Signal protocol, the proprietary code makes independent verification impossible. If proven accurate, the allegations could lead to significant implications for user privacy within the tech industry.