WhatsApp has fixed its "View once" feature – but has left more of your data at risk

WhatsApp on smartphone
(Image credit: Anton/Pexels)

WhatsApp appears to have fixed issues with its "View Once" privacy feature that previously let users bypass the protection.

First introduced in 2021, WhatsApp's View Once allows you to send self-destructing messages, photos, and videos for maximum privacy. The feature also prevents the receiver from forwarding or saving the messages, with screenshots being blocked as well.

Last August, however, a security researcher found a bug that let people using WhatsApp's desktop app save the disappearing messages, de-facto bypassing the View Once feature. On Friday, December 6, 2024, the company confirmed to TechCrunch it "rolled out a longer-term fix that resolved the issue."

WhatsApp's solution is welcomed but "isn't perfect" as it increases the amount of unencrypted metadata which might bring further privacy risks for users.

A "great improvement," but an impact on metadata

"We’re constantly building in layers of privacy protection, and that includes rolling out key updates to view once on web," WhatsApp spokesperson Zade Alsawah told TechCrunch.

Alsawah recommends everyone update the encrypted messaging app to the latest version which addresses the security vulnerability. He also suggests sending View Once messages only to people you know and trust.

Tal Be’ery, the security researcher who first reported the issues with the View Once feature, welcomed WhatsApp's update with a post on X (see tweet below).

He wrote: "The fix indeed addresses the root cause properly, so we are happy we were able to make the world a little safer!"

However, as Be’ery explains, the provider managed to fix the privacy flaw by adding a "View Once" flag to the messages' unencrypted metadata.

This means that the provider's solution de facto increases the amount of unencrypted metadata exposed to the WhatsApp Server. This could open up other potential privacy risks, noted the expert.

"The fix highlights the known, yet often overlooked, fact that E2EE protects messages’ content but not their metadata," wrote Be’ery. "WhatsApp traded-off user increased privacy against receiver unauthorized View Once content access, against reduced privacy for unauthorized View Once metadata access on WhatsApp server."

We've previously reported on how metadata collection may be a problem for WhatsApp's users' privacy as surveillance techniques get increasingly more sophisticated. That said, "While this fix is not perfect, we still consider it as a great improvement with respect to the original starting point," concluded Be’ery.

Chiara Castro
News Editor (Tech Software)

Chiara is a multimedia journalist committed to covering stories to help promote the rights and denounce the abuses of the digital side of life – wherever cybersecurity, markets, and politics tangle up. She writes news, interviews, and analysis on data privacy, online censorship, digital rights, cybercrime, and security software, with a special focus on VPNs, for TechRadar and TechRadar Pro. Got a story, tip-off, or something tech-interesting to say? Reach out to chiara.castro@futurenet.com

Read more
Trojan
WhatsApp patches security flaw which let hackers install spyware
WhatsApp China VPN
Paragon spyware campaign targeting journalists disrupted by WhatsApp
Collage of hand with a key and a smartphone
Is it possible to send a truly anonymous message?
ignal messaging application President Meredith Whittaker poses for a photograph before an interview at the Europe's largest tech conference, the Web Summit, in Lisbon on November 4, 2022.
"We will not walk back" – Signal would rather leave the UK and Sweden than remove encryption protections
Young woman holds a smartphone with a beam of light obscuring her eyes
Privacy powerhouses: 5 apps to take your online security to the next level
Photograph of a hand holding a smartphone with two googly eyes
Every tap, every message – how to stop your smartphone spying on you
Latest in VPN Privacy & Security
Demonstrators protesting against the arrest of the Mayor of Istanbul Ekrem Imamoglu block Atatürk Boulevard on March 22, 2025 in Ankara, Türkiye.
Turkey's social media ban has been lifted, but VPN usage is still high
Shape of Russia filled with Russian flag-colored internet codes on a black hacking background
A new wave of blocks in Russia targets VPN apps and Cloudflare subnets
Digital hand set location on map with two pins. AI technology in GPs, innovation delivery, map location, future transport logistic, route path concept. GPs point. New office location, change address
What does your IP address reveal about you?
A stethoscope next to a laptop on a pink background
How to check if your VPN is working
Teenager playing on a gaming PC with two monitors
Is using a VPN while gaming cheating? 5 myths you shouldn't believe about gaming with a VPN
Neon blue email symbols on a black background
Why am I suddenly getting so many spam emails?
Latest in News
Zotac Gaming RTX 5090 Graphics Card
Nvidia Blackwell stock woes are compounded by price hikes as more RTX 5090 GPUs soar in pricing, and I’m sick and tired of it all at this point
An Apple Music pink/pixellated poster advertising DJ with Apple Music
DJ with Apple Music lands, allowing subscribers to build and mix DJ sets directly from its +100 million-song catalog
The Meta Quest 3 and controllers on their charging station which is itself on a wooden desk next to a lamp
Forget Android XR, I've got my eyes on Vivo's new Meta Quest 3 competitor as it could be the most important VR headset of 2025
Samsung Galaxy S25 from the front
The Now Bar on Samsung One UI 7 is about to get a lot more useful – and could soon match Live Activities on iOS
Marvel Rivals
Marvel Rivals will get two new hero skins for Moon Knight and Black Panther this week meaning I'll now need to farm even more Units
An iPhone running iOS 18 on a purple and blue background
iOS 18.4 could launch soon with a major upgrade to your iPhone’s notifications