Connect with us

E-Business

How Access to Whatsapp Encryption May Affect your Privacy

Published

on

whatsapp encry.jpg
Kindly share this post

In the wake of last week’s terrorist attack in Westminster, the British government on Sunday disclosed that its security services must have access to encrypted messaging applications such as WhatsApp, revealing it was used by the killer behind the parliament attack.

In this piece, Yudala – the largest online and offline retail chain – examines the benefits of WhatsApp encryption and why access to these encrypted messages by a third-party may mean less privacy for you…

Created in 2009 as an alternative to text messaging, WhatsApp is today one of the world’s most popular instant messaging service with more than one billion users in 180 countries.

According to a May 2016 report from research firm SimilarWeb, WhatsApp is the top chat app in 109 countries, including Brazil, India, and the United Kingdom. Facebook acquired WhatsApp in 2014 to make a bigger play in the rapidly-growing messaging market, along with its own Messenger platform. At the time the deal was announced, WhatsApp had 450 million users worldwide.

Khalid Masood, the 52-year-old Briton who killed four people before being shot dead in a rampage in Westminster on Wednesday, reportedly used WhatsApp to send a message some moments before the assault – a discovery that has seen the UK government determined to gain access to the end-to-end encrypted messages sent through the app.

Home Secretary Amber Rudd affirmed that it was “completely unacceptable” that police and security services had not been able to crack the heavily encrypted service.
“You can’t have a situation where you have terrorists talking to each other — where this terrorist sent a WhatsApp message — and it can’t be accessed,” she said.

WHAT DOES WHATSAPP END-TO-END ENCRYPTION MEAN?
WhatsApp’s end-to-end encryption ensures only you and the person you’re communicating with can read what is sent and nobody in between, not even WhatsApp. Your messages are secured with a lock and, only the recipient and you, have the special key needed to unlock and read your message. For added protection, every message you send has a unique lock and key. All of this happens automatically: no need to turn on settings or set up special secret chats to secure your messages.

It is also important to note that end-to-end encryption is always activated, provided all parties are using the latest version of WhatsApp. There is no way to turn off end-to-end encryption. End-to-end encryption is available when you and the people you message are on the latest versions of WhatsApp.

The benefits of end-to-end encryption on WhatsApp are numerous and has remained one of the major factors that has contributed to the growing popularity of the Facebook-owned service. These benefits include:

Privacy: With end-to-end encryption in place, people can communicate with each other and express themselves freely without fear of unintended people gaining access to their private stuff. This way, you can talk to your doctor about your medication, hold intimate chat sessions with your spouse/partner or have a discussion with an associate about a business proposal without the fear of being overheard or the call being tapped.

Safe group chats: Group chats are also safely encrypted, thereby lending an air of confidentiality to messages sent in such a forum. With encryption featuring in group chats, non-group members will have no clue at all about the happenings in the group. This makes it more attractive for people with like minds and interests to discuss their affairs in WhatsApp groups without the fear of being overheard.

Encryption works by default: Encryption setting is turned on by default by WhatsApp in all devices. If you are running the version of WhatsApp that has encryption support, you will be informed of this on your chat screen when you send messages across along with a lock symbol next to the confirmation screen. You can also verify the default ON setting by making use of a unique QR code on the phone of each contact in your list.

In case, for some reason, the default encryption setting does not get activated, you can do it yourself through a simple process. In your chat window, just click on your contact’s name at the top of the window to display his or her profile details. You will find an option to turn the encryption on.

WhatsApp can’t read your messages: End-to-end encryption means that even if it wanted to, WhatsApp cannot gain access to your messages. In other words, only the sender and receiver can read intended messages.

Not even WhatsApp employees or hackers will be able to gain access to the messages sent or received. This applies to any form of messages – text, images, videos and files.

Encryption works on all devices: The encryption in WhatsApp works using an open-source protocol known as Signal that is developed by an organization called Open Whsiper Systems. This company has worked in close association with WhatsApp in determining its requirements and the level of encryption to be provided.

The app ensures that smartphones featuring this app support the encryption and decryption keys to be applied to messages going out and coming into the device.

The encryption technology is supported by all recent WhatsApp versions running on Android, Windows, iPhones, and Nokia phones. Keeping in line with the usual trend, WhatsApp first introduced encryption on Android before extending it to other platforms.

Even in error, you are protected: WhatsApp has become very focused on making encryption mandatory that it now refuses to work on unencrypted messages.

If a person tries to send a contact an unencrypted message, WhatsApp will immediately prevent him or her from doing so.

Additionally, the sender will be informed that this is because the messages being sent from his or her end are not encrypted.

No server hacks with end-to-end encryption: When the encryption process was first implemented by WhatsApp, it took place over a central hub.

Messages management and key exchange coordination take place centrally, apart from central control of the encrypted code that is executed on both the servers and mobile phones.

However, this did not result in complete safety and paved way for end-to-end encryption. As a result, messages will get decrypted only on the receivers’ handsets rather than in between the server and the handsets.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Galaxy Backbone Tops FG’s Website Performance Ranking

Published

on

Kindly share this post

Galaxy Backbone Limited (GBB) has been ranked first overall in the 2025 Federal Government Website Performance Scorecard.

Galaxy Backbone Tops FG's Website Performance Ranking

This is a landmark achievement for Nigeria’s digital economy.

The ranking, conducted by the Bureau of Public Service Reforms (BPSR), is the definitive benchmark for digital excellence and transparency across all Ministries, Departments, and Agencies (MDAs).

Professor Ibrahim Adepoju Adeyanju, managing director and CEO of Galaxy Backbone, received the award during a ceremony in Abuja.

He described the feat as a validation of the agency’s“Nigeria First”data sovereignty strategy and its relentless pursuit of service excellence.

This recognition comes as the Federal Government intensifies its push to achieve a fully paperless civil service by December 31, 2025.

GBB has been the primary architect of this transition through its 1Gov Enterprise Content Management (ECM) platform, which now hosts the operations of almost all federal MDAs.

The award adds to a growing list of accolades for Galaxy Backbone in 2025, following its recent win of the “International Standard Excellence Award for Best IT Service Provider.”

As the central hub for government shared services, GBB’s performance serves as a blueprint for other agencies currently undergoing digital transformation.

With its expanded fiber-optic backbone now covering over 13 states and its secure cloud solutions, Galaxy Backbone remains the cornerstone of Nigeria’s vision to become a leading digital nation by the end of the decade.

 


Kindly share this post
Continue Reading

E-Business

Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack

Published

on

Kindly share this post

Okitipi Samuel, a Nigerian man, has been taken into custody by the Nigeria Police Force for his alleged role in a global cyberattack on Microsoft 365 users.

Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack

Benjamin Hundeyin, Force public relations officer, disclosed this on Thursday in Abuja while briefing journalists on the outcome of investigations carried out by the National Cybercrime Centre of the Nigeria Police Force.

Hundeyin said the centre, under the leadership of Ifeanyi Uche, its director and Commissioner of Police, commenced investigations in collaboration with Microsoft, the Federal Bureau of Investigation, the United States Secret Service, and the United Kingdom’s National Crime Agency.

According to him, investigations revealed that a phishing toolkit known as “Raccoon 0365” was used to create fake Microsoft login portals to harvest user credentials and unlawfully access email accounts belonging to corporate organisations, financial institutions, and educational institutions in several countries.

“This investigation commenced following credible intelligence received from Microsoft USA through the FBI, indicating that a malicious phishing toolkit known as Raccoon0365 was being used to create fake Microsoft login portals, harvest user credentials, and unlawfully access the email accounts of corporate organisations, financial institutions, and educational establishments,” Hundeyin said.

He added that between January and September 2025, several reports of unauthorised access to Microsoft 365 accounts were traced to phishing emails designed to mimic legitimate Microsoft login pages, enabling business email compromise, internal phishing, data breaches, and other cyber-enabled fraud.

Hundeyin said digital forensic analysis and cryptocurrency tracing identified wallets connected to the illegal operation.

He noted that operatives were deployed to Lagos and Edo states, leading to the arrest of three suspects identified as Joshua, James, and Okitipi Samuel between September 20 and October 4, 2025.

“Following extensive digital forensic and technical intelligence analysis, the centre conducted cryptocurrency tracing that identified suspicious wallets connected to cash-out schemes.

“Acting on actionable intelligence, operational teams were deployed to Lagos and Edo states, resulting in the arrest of Joshua, James, and Okitipi Samuel. Searches at their residences led to the recovery of mobile devices, laptops, and other digital exhibits linked to the fraudulent scheme,” he said.

Hundeyin identified Okitipi Samuel, also known as “0365” and Moses Felix as the principal suspect and developer of the phishing infrastructure.

“The primary suspect, Okitipi Samuel, also known as Moses Felix, has been identified as the developer and operator of the phishing infrastructure. Investigations revealed that he managed a Telegram channel used to sell phishing links in exchange for cryptocurrency and hosted fake login pages on Cloudflare using stolen or fraudulently obtained email addresses,” he said.

He added that investigations confirmed Samuel unlawfully used the email details of one of the arrested individuals without consent to register some of the accounts used in the operation.

The police spokesperson said further investigations revealed that the identities of Joshua and James were used without their consent.

“There was no evidence linking them to the creation or operation of the phishing scheme. They were victims of identity theft,” Hundeyin said.

He said a prima facie case had been established against Samuel for identity theft, unlawful access to computer systems, creation and distribution of malicious software, unauthorised interference with network data, and aiding and abetting fraud.

Hundeyin added that the suspect would be charged under relevant provisions of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2024.

He said the suspect would be prosecuted in Nigeria, noting that the country has the capacity to enforce its cybercrime laws, although extradition could be considered if formally requested through due process.

Hundeyin assured Nigerians that the police, under the leadership of Kayode Egbetokun, inspector-general of Police,  would continue to protect the country’s digital ecosystem and urged citizens to practise good cyber hygiene by being cautious when clicking links and sharing personal information online.

Speaking separately, Ifeanyi Uche, director of the National Cybercrime Centre,  urged Nigerians to exercise caution online.

Uche advised members of the public to avoid clicking on links from unknown or unexpected sources, noting that such links often contain malware or phishing tools designed to compromise devices and personal data.

He warned that indiscriminate clicking of links or responding to unsolicited emails could lead to unauthorised access to personal and corporate accounts, urging citizens to “wash their cyber hands” by verifying sources before taking action online.


Kindly share this post
Continue Reading

E-Business

Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda

Published

on

Kindly share this post

Nigeria has unveiled a comprehensive, multi-pronged strategy designed to localise WSIS+20 commitments. This roadmap accelerates national transformation by prioritising robust infrastructure, transparent internet governance, and advanced cybersecurity through deep stakeholder collaboration.

Unveiled in New York at the Nigerian high-level side event titled “Re-Imagining Digital Cooperation for Sustainable Development: From WSIS+20 Vision to Local Action,” the strategy cements Nigeria’s position as a primary architect of the world’s digital future.

Speaking at the event, the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, CCIE represented by Director, Corporate Planning and Strategy, Dr. Dimie Shively Wariowei said Nigeria’s approach is deliberately aligned with the four core activity areas identified under the ongoing WSIS+20 review process.

According to him, the focus areas provide a practical framework for translating global digital commitments into measurable national outcomes, ensuring that international resolutions drive inclusive growth and sustainable digital development at the country level.

Inuwa identified digital infrastructure as the foundation of effective localisation, noting persistent challenges in extending connectivity to underserved and remote communities. Beyond infrastructure gaps, he highlighted affordability constraints and digital literacy deficits, stressing that addressing these issues remains central to Nigeria’s digital inclusion drive.

He explained that government alone cannot shoulder the burden of nationwide digital infrastructure deployment, given Nigeria’s vast geographical spread, hence the adoption of collaborative Public-Private Partnership (PPP) models. He disclosed that Nigeria, in collaboration with the World Bank, is implementing a major fibre-optic project spanning about 90,000 kilometres nationwide to boost connectivity.

The NITDA DG also revealed that the current National Broadband Plan, which has guided broadband expansion in recent years, is nearing completion, with plans underway to renew and reposition it for the next five years. The renewed plan, he said, will strategically target increased broadband penetration as a catalyst for digital access and economic growth.

On internet governance, Inuwa referenced Nigeria’s active participation in the Internet Governance Forum (IGF), noting that the country successfully hosted its annual national IGF. He said the forum operates on a multi-stakeholder model that brings together government, the private sector, civil society and the technical community to foster cooperation and informed policy dialogue.

Cybersecurity, he added, remains a critical pillar of Nigeria’s localisation efforts. He cited the existing Cybersecurity Act and ongoing efforts to strengthen the legal framework through a reviewed version currently awaiting parliamentary approval. These measures, he said, are designed to mitigate risks associated with increased internet use and to protect users and critical digital infrastructure.

Inuwa further stressed Nigeria’s ambition to play a leadership role in advancing digital cooperation across Africa through inclusive, multi-stakeholder engagement. He underscored the importance of coordinated national data collection, noting that reliable, country-specific data is essential for tracking progress and presenting Africa’s digital development story on the global stage.

He concluded that sustained engagement and follow-up actions arising from the WSIS+20 review would strengthen digital cooperation among African countries and ensure that global digital commitments translate into tangible national and regional impact.

Stakeholders commended Nigeria’s efforts in the digital space, acknowledging the country’s growing role in shaping Africa’s digital future.

Earlier, Ms. Jennifer Chung, Co-Convener of the Informal Multi-Stakeholder Sounding Board (IMSB), praised Nigeria for convening a broad-based, multi-stakeholder delegation and for its commitment to the meaningful implementation of WSIS+20 outcomes.

Chung stressed the growing demand for localised WSIS follow-up mechanisms, noting that platforms such as the annual IGF, National and Regional IGF Initiatives (NRIs), and youth-led forums are vital for tracking progress towards the 2030 Agenda and Africa’s Agenda 2063.

She described the WSIS+20 review as a critical step toward effective monitoring, reliable data collection and evidence-based evaluation, particularly for developing countries in the Global South. According to her, these measures are essential to achieving WSIS targets and ensuring that no region is left behind.

Drawing parallels with the Asia-Pacific region, Chung noted that challenges around affordable and meaningful connectivity remain widespread across developing economies. She emphasised that expanding broadband penetration and reducing the cost of access are crucial to closing digital divides in Africa, Asia-Pacific and other parts of the Global South.

She also highlighted the need to enable active citizen participation in emerging technologies, including artificial intelligence and future innovations such as quantum technologies, stressing that inclusive digital access is key to maximising the benefits of digital transformation.

Reflecting on the WSIS+20 review process, Chung praised the innovative and inclusive approach adopted through the informal multi-stakeholder sounding board, describing it as one of the first of its kind in global digital governance. She called for sustained collaboration among governments, the private sector, civil society and the technical community to carry the WSIS vision from global commitments to local action.


Kindly share this post
Continue Reading

Trending