WhatsApp has revealed a new open source browser extension to help further protect those who use its online messaging service.
The company has teamed up with web infrastructure company Cloudflare to launch Code Verify, which they say provides independent, third-party, transparent verification of the code users are served on WhatsApp Web (opens in new tab).
This ensures that your WhatsApp Web code hasn't been tampered with or altered.
We're looking at how our readers use VPNs with different devices so we can improve our content and offer better advice. This survey shouldn't take more than 60 seconds of your time. Thank you for taking part.
>> Click here to start the survey in a new window (opens in new tab) <<
While WhatsApp (opens in new tab) protects the personal messages sent on WhatsApp Web using end-to-end encryption as they transit from sender to recipient, there are numerous factors that can weaken the security of a web browser (opens in new tab) that don't exist in the mobile app space.
At the same time, as mobile operating systems such as iOS and Android were created after the web, the security guarantees on mobile can be stronger, particularly when it comes to how app stores review and approve each new app and software update.
In addition to deploying Code Verify for WhatsApp Web, WhatsApp is also offering it as open source software (opens in new tab) on GitHub so that other services can use it as well.
Subresource integrity is a security feature that allows web browsers to verify that the resources they fetch haven't been manipulated and while this only applies to single files, Code Verify expands on the concept to check the resources of an entire webpage.
> WhatsApp update is borrowing another feature from Messenger and Instagram (opens in new tab)
> This WhatsApp update is adding a super helpful online shopping tool (opens in new tab)
> Meta is building WhatsApp into its workplace collaboration platform (opens in new tab)
The Code Verify extension is offered by Meta Open Source and will be available on the official browser extension stores for Google Chrome (opens in new tab), Microsoft Edge (opens in new tab) and Mozilla Firefox (opens in new tab).
In a blog post (opens in new tab), WhatsApp highlights the fact that its new extension doesn't log any data, metadata or user data and it also doesn't share any information with the service itself. Messages that users send and receive using WhatsApp Web are not read or accessed by the company and neither it or its parent company Meta (opens in new tab) will even know whether or not someone has downloaded the Code Verify extension.
Once installed, the extension will run automatically whenever you go to WhatsApp Web and will act as a real-time alert system for the code you're being served. You can also pin the extension to your browser's toolbar to see its findings without any additional steps.
- We've also featured the best privacy apps (opens in new tab) and the best identity theft protection (opens in new tab)