Developer Tools

Texas AG sues Meta over WhatsApp encryption claims

Meta accused of misleading 3B users about message privacy—details inside.

Deep Dive

The Texas Attorney General filed a lawsuit against Meta, claiming that WhatsApp’s end-to-end encryption (E2EE) is not genuine. The complaint asserts that Meta can and does read the unencrypted contents of WhatsApp messages, contradicting CEO Mark Zuckerberg’s 2018 Senate testimony that “Facebook systems do not see the content of messages.” The sole factual evidence cited is a Bloomberg article reporting a closed Commerce Department investigation that allegedly found “no limit to the type of WhatsApp message that can be viewed by Meta.” Meta has labeled the allegations “baseless” and vowed to fight the suit in court.

Cryptography experts and researchers have pushed back, noting that thorough reverse engineering of WhatsApp in 2023 gave the app a clean bill of health regarding its E2EE claims. A team from King’s College London found that the Signal protocol implementation works as described, with no evidence of Meta bypassing encryption. However, they did discover a design flaw allowing a Meta employee with infrastructure access to add users to a group chat without permission—though the addition is visible to all members. The scarcity of direct evidence in the lawsuit has raised eyebrows among technologists, who question the validity of the state’s claims.

Key Points
  • Texas AG lawsuit alleges Meta misrepresents WhatsApp’s end-to-end encryption and can read messages.
  • Bloomberg article about a closed Commerce Department probe is the sole cited evidence; Meta calls the lawsuit baseless.
  • 2023 independent cryptanalysis of WhatsApp found no encryption bypass, but identified a design flaw enabling unauthorized group additions.

Why It Matters

This lawsuit challenges the trust billions place in WhatsApp’s privacy promise, with implications for global encrypted messaging standards.