WhatsApp is rolling out a series of updates aimed at making it easier for users to manage their contacts privately across devices. Previously, users could only add contacts via their mobile device by entering a phone number or scanning a QR code.
Now, the Meta company is expanding contact management capabilities to WhatsApp Web and Windows, and eventually other linked devices.
This new functionality also introduces the option to save contacts exclusively to WhatsApp. This feature is designed for users who share devices or want to separate personal and business contacts when managing multiple WhatsApp accounts on one phone.
“Today we’re making it easier to privately add and manage your contacts on WhatsApp, from any device you may be using,” the company said in a blog. “Until now, the only place you were able to add contacts was from your mobile device by either typing in a phone number or scanning a QR code. Soon, you’ll be able to add and manage contacts from the comfort of your keyboard on WhatsApp Web and Windows – and eventually other linked devices.”
The company said it is also debuting a new choice to save a contact exclusively to WhatsApp. “These WhatsApp contacts are ideal for when you are sharing your phone with others or if you want to separate personal and business contacts when managing more than one WhatsApp account on your phone. Contacts you save to WhatsApp will be restored in case you ever lose your phone or change devices,” WhatsApp said.
Most importantly, contacts will be encrypted and are able to be restored if a user changes devices or loses their phone.
In another move towards enhancing privacy, WhatsApp says it is developing a system that will enable users to manage contacts by usernames instead of phone numbers. This will provide an extra layer of security, as users can avoid sharing their phone numbers while messaging.
To support these updates, WhatsApp has implemented a new encrypted storage system called Identity Proof Linked Storage (IPLS), designed to store contacts and ensure seamless restoration on any device securely.
Contacts created within WhatsApp can now be synced to the phone or stored exclusively on WhatsApp, depending on user preference.
IPLS builds on existing WhatsApp technologies, including key transparency and hardware security modules (HSMs), to ensure contacts are encrypted and can be restored through a secure channel.
The system uses a cryptographic keypair tied to the user’s phone number, and WhatsApp’s Auditable Key Directory (AKD) helps verify encryption keys, ensuring robust security.
To ensure the security of this system, WhatsApp has partnered with Cloudflare, which provides third-party auditing to validate the cryptographic properties of the system.
This integration strengthens WhatsApp’s ability to manage contact data securely, with Cloudflare’s digital signatures verifying the authenticity of the system’s operations.
WhatsApp’s new IPLS system enables privacy-preserving contact storage at scale, offering users the flexibility to manage contacts across multiple devices and ensuring they can securely restore their contacts without compromising privacy.
With these updates, WhatsApp says it is taking a significant step toward improving contact management while reinforcing user security.
About the Author
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.
