Meta CEO Mark Zuckerberg has confirmed that U.S. authorities, including the CIA, can access WhatsApp messages despite the platform’s robust end-to-end encryption. Speaking on the Joe Rogan Experience podcast on Friday, Zuckerberg explained that while encryption prevents Meta from viewing the content of users’ messages, it does not protect against physical access to a user’s phone, effectively allowing law enforcement agencies to bypass the security system.
Zuckerberg was responding to a question from Rogan regarding the surveillance of journalist Tucker Carlson. Carlson had previously claimed that the U.S. government, particularly the NSA and CIA, interfered with his attempts to arrange an interview with Russian President Vladimir Putin by accessing his private messages and emails. The former Fox News host accused the agencies of leaking his plans to the media, spooking Moscow and stalling his efforts. Rogan asked Zuckerberg how this could happen given the encryption in place, to which the Meta CEO explained that while WhatsApp uses end-to-end encryption, which ensures that Meta’s servers never see the content of messages, physical access to a device allows authorities to bypass this safeguard.
“The thing that encryption does that’s really good is it makes it so that the company that’s running the service doesn’t see it. So if you’re using WhatsApp, there’s no point at which the Meta servers see the contents of that message,” Zuckerberg explained. He pointed out that even if someone were to breach Meta’s databases, they would still be unable to view the contents of private conversations. This protection, he noted, extends to other messaging apps that use similar encryption, such as Signal, which Carlson had reportedly used. However, encryption alone cannot protect against direct access to the device itself.
Zuckerberg went on to highlight that law enforcement agencies like the CIA do not need to intercept messages in transit because they can directly access data on the device. He mentioned spyware tools like Pegasus, which can be covertly installed on phones to access a wide range of data, including encrypted messages, photos, and call logs. Once installed, spyware can bypass encryption and give authorities unfettered access to the user’s phone without their knowledge.
To counter this risk, Zuckerberg noted that Meta has introduced features like disappearing messages, which allow users to automatically delete message threads after a set period of time. This feature aims to reduce the amount of sensitive data stored on devices, ensuring that even if a phone is compromised, the messages will no longer be available to those who gain unauthorized access. “If someone has compromised your phone and they can see everything that’s going on there, then obviously they can see stuff as it comes in… So having it be encrypted and disappearing, I think is a pretty good kind of standard of security and privacy,” Zuckerberg explained.
Zuckerberg’s comments come amid ongoing debates about the balance between digital privacy and national security. While end-to-end encryption has been widely praised for its role in protecting user data, it has also been criticized by governments, including the U.S., for hindering efforts to combat crime and terrorism. U.S. agencies like the CIA and FBI have long argued that encryption can obstruct their ability to investigate criminal activity, particularly in cases involving terrorism or child exploitation. A 2021 FBI training document revealed that U.S. law enforcement can gain limited access to encrypted messages on services like iMessage, Line, and WhatsApp, though platforms like Signal and Telegram are considered much more secure. Despite these challenges, it remains difficult to intercept messages during transmission, but cloud backups of encrypted messages may still be vulnerable if the encryption keys are accessible to authorities.
