WhatsApp Closes Encryption Loophole That Revealed Who Blocked You

WhatsApp has eliminated a recently discovered method that allowed users to confirm if they were blocked by someone else. The vulnerability exploited a flaw in the app's automatic encryption verification system, which would fail when a user was blocked, prompting a manual verification request. This failure became a reliable indicator that a block had occurred without sending any messages that could reveal the check.

Meta, WhatsApp's parent company, quickly addressed the issue by deploying a server-side update that fixes the encryption verification process. The update ensures that even if a user is blocked, the system will still show a successful verification result, preserving user privacy and ambiguity around blocking. This fix was applied universally to all Android and iPhone users without requiring any app update downloads.

The closure of this loophole reflects Meta's intention to maintain discretion for users who block others, preventing technological confirmation of blocking actions. Users will now have to rely on traditional, less definitive signs of being blocked, such as a single gray checkmark persisting, disappearance of profile pictures, and failed voice calls. While none of these signs alone conclusively prove a block, their combination remains the only way for users to guess if they have been blocked.

The encryption itself was never compromised, but the technical glitch in verification was exploited as a tracking tool. Meta's rapid response highlights the company's commitment to user privacy and the subtle balance between transparency and confidentiality in communication apps.