Why Opt-In Security Does Not Work: The WhatsApp Backup Example

As the product leader of Wire, I am deeply invested in delivering genuine, user-first security. A critical aspect of this mission is understanding why opt-in security models often fail to protect the majority of users. A prime example of this failure is WhatsApp’s encrypted backup feature, which is a classic case of security as an afterthought rather than a default.

What is Opt-In Security?

Opt-in security requires users to actively enable protective measures rather than having them set by default. While this may seem to provide users with flexibility and choice, in practice, it places the burden of security on users who may not fully understand the risks or the technical details needed to make informed decisions.

The Downside of Opt-In Security

The result? A majority of users—often upwards of 90%—never enable these security features, leaving their sensitive data vulnerable. This is not due to a lack of concern for privacy but rather a consequence of poor visibility and minimal guidance. When security settings are buried deep in the app, as is the case with WhatsApp's encrypted backup option, it’s no surprise that most users remain exposed.

WhatsApp's Encrypted Backup

WhatsApp offers end-to-end encryption for messages by default, which is a good start. However, when it comes to backups, the approach is entirely different. Backups are stored on Google Drive (or iCloud for iOS users) and are not encrypted unless the user manually enables it. Even then, the setting is hidden at the bottom of the settings menu, with minimal instruction or emphasis.

For the average user, who may not be tech-savvy, finding and enabling this setting is unlikely. Moreover, Google Drive and WhatsApp, both of which have a vested interest in user data and metadata, benefit significantly from unencrypted backups. Without violating terms of service, they could potentially analyze this data to generate detailed metadata profiles, giving them insights into user behavior, contacts, communication patterns, and more. 

Why Default Security Matters

At Wire, our approach is different. We believe that security should not be a choice but a default setting. By providing always-on end-to-end encryption for all communications and data storage, we eliminate the risks associated with opt-in models. Users do not need to hunt through menus or decipher complex settings to secure their data - it is automatically protected from the moment they start using our platform.

The Importance of Always-On Encryption

Security by default not only ensures maximum protection but also builds trust. It demonstrates a genuine commitment to user privacy and puts control back into the hands of users without requiring them to become security experts.

Conclusion: The Future of Secure Messaging

The WhatsApp encrypted backup example highlights a broader issue with opt-in security models: they create a false sense of security while leaving the majority of users exposed. As tech leaders, it is our responsibility to prioritize security by design, ensuring that all users benefit from robust protection, not just those who know where to find a hidden setting.

At Wire, we will continue to champion security by default because every user deserves privacy without compromise. It’s time for the industry to move away from opt-in security and embrace a future where safety is the standard, not an option.