Telegram CEO warns of security flaws in WhatsApp’s encryption
By Aloys Michael, January 27, 2026A new controversy around digital privacy and encrypted messaging has surfaced after Telegram founder Pavel Durov cast doubt on WhatsApp’s security claims, warning users against assuming the platform is fully protected in 2026.
In an X post on Monday, January 26, 2026, Durov said Telegram’s internal research identified several potential weaknesses in WhatsApp’s encryption setup, arguing that risks may stem less from encryption technology itself and more from how it is deployed and maintained across a massive global user base.
“You’d have to be braindead to believe WhatsApp is secure in 2026. When we analyzed how WhatsApp implemented its “encryption”, we found multiple attack vectors,” the post read.
The statement has reignited long-standing tensions between the world’s largest messaging platforms and raised renewed concerns among users about how private their conversations really are.
End-to-end encryption
WhatsApp, a subsidiary of Meta Platforms, has consistently asserted that user messages are secured through end-to-end encryption, a system designed so that only the communicating parties can access the message content.
The platform relies on the Signal Protocol, a cryptographic framework widely regarded as robust and trustworthy. Nevertheless, cybersecurity specialists caution that encryption by itself does not ensure complete privacy.
They point to potential vulnerabilities arising from cloud backups, encryption key handling, compromised devices, and the collection of metadata, factors that are often ignored by users who assume encryption equals total security.
Durov’s remarks seem aimed at these real-world implementation gaps rather than at the cryptographic standard itself. Longstanding tensions between Telegram and WhatsApp over privacy practices, transparency, and data usage have played out publicly for years.
Meta defends privacy and security
While Telegram markets itself as a privacy-centric platform, WhatsApp’s vast global user base, especially across Africa, South Asia, and Latin America, has made it a regular target of scrutiny from regulators and digital rights advocates.
The comments surface amid growing global pressure on messaging platforms, as governments push for lawful access to private communications while users increasingly demand uncompromising privacy protections.
The debate has intensified concerns over whether popular apps can balance security with regulatory expectations.
However, Meta insists that WhatsApp does not compromise on user privacy, reiterating that it has no ability to read personal messages.
According to the company, claims suggesting otherwise often overstate risks or strip technical details of their broader context.