Exceptions to Access WhatsApp Content

Basically, we have explained that WhatsApp correspondence cannot be accessed by third parties, but in some cases, access to the content may be possible. However, these situations are not due to the security vulnerability of WhatsApp software, etc., but are possible situations that may occur by intercepting the phone or QR code of the person or persons to whom the message is sent.

First of all, if we talk about the seizure of the phone, you sent a message to person B and the phone of the person B you sent it to fell into the hands of others. In such a case, the person holding the phone will be able to access the content deleted up to 7 days ago.

WhatsApp automatically performs backup at 02:00 every night and performs a 7-day local backup. Deleted messages and media from the WhatsApp application up to 7 days ago can be restored from these backups. However, in order for this scenario to occur, the phone must be unlocked or unlocked. For example, the phone belonging to the perpetrator of the assassination of Russian Ambassador Andrey Karlov on 19 December 2016 could not be unlocked, so the content on the phone could not be accessed.

Another possibility is to access the QR Code used for WhatsApp Web. In this way, the WhatsApp account of the person can be accessed and the contents of the account can be accessed. Finally, by accessing the username and passwords of the person, it will be possible to access WhatsApp data by accessing Google Drive or iCloud accounts where WhatsApp backups are kept, and if the backups are accessed, it will be possible to access WhatsApp data by uploading the backups to the appropriate phones.

As can be seen, the realisation of the issue regarding access to WhatsApp content by the state is not possible without seizing the phone in the current situation. Exceptionally, it may be possible to access WhatsApp correspondence on a mobile device belonging to a suspect person obtained as a result of a search and seizure decision applied within the scope of the investigation during a criminal proceeding through examinations by forensic informatics experts. However, in order for this to happen, various variables such as phone model, operating system, password status must be provided.