How Meta Is Strengthening End-to-End Encrypted Backups

How Meta Is Strengthening End-to-End Encrypted Backups - Engineering at Meta

Skip to content

[](https://engineering.fb.com/ "Engineering at Meta")

Search this site !Image 2

• [Open Source](http://engineering.fb.com/2026/05/01/security/meta-strengthening-end-to-end-encrypted-backups/# "Open Source")
• [Open Source](https://engineering.fb.com/category/open-source/ "Open Source")
• [Meta Open Source](https://opensource.fb.com/ "Meta Open Source")

• [Platforms](http://engineering.fb.com/2026/05/01/security/meta-strengthening-end-to-end-encrypted-backups/# "Platforms")
• [Android](https://engineering.fb.com/category/android/ "Android")
• [iOS](https://engineering.fb.com/category/ios/ "iOS")
• [Web](https://engineering.fb.com/category/web/ "Web")

• [Infrastructure Systems](http://engineering.fb.com/2026/05/01/security/meta-strengthening-end-to-end-encrypted-backups/# "Infrastructure Systems")
• [Core Infra](https://engineering.fb.com/category/core-infra/ "Core Infra")
• [Data Infrastructure](https://engineering.fb.com/category/data-infrastructure/ "Data Infrastructure")
• [DevInfra](https://engineering.fb.com/category/developer-tools/ "DevInfra")
• [Production Engineering](https://engineering.fb.com/category/production-engineering/ "Production Engineering")
• [Security & Privacy](https://engineering.fb.com/category/security/ "Security & Privacy")
• [Research Publications](https://research.facebook.com/publications/research-areas/systems-infrastructure/ "Research Publications")

• [Physical Infrastructure](http://engineering.fb.com/2026/05/01/security/meta-strengthening-end-to-end-encrypted-backups/# "Physical Infrastructure")
• [Connectivity](https://engineering.fb.com/category/connectivity/ "Connectivity")
• [Data Center Engineering](https://engineering.fb.com/category/data-center-engineering/ "Data Center Engineering")
• [Networking & Traffic](https://engineering.fb.com/category/networking-traffic/ "Networking & Traffic")
• [Research Publications](https://research.facebook.com/publications/research-areas/networking-connectivity/ "Research Publications")

• [Video Engineering & AR/VR](http://engineering.fb.com/2026/05/01/security/meta-strengthening-end-to-end-encrypted-backups/# "Video Engineering & AR/VR")
• [Video Engineering](https://engineering.fb.com/category/video-engineering/ "Video Engineering")
• [Virtual Reality](https://engineering.fb.com/category/virtual-reality/ "Virtual Reality")
• [Research Publications](https://research.facebook.com/publications/research-areas/augmented-reality-virtual-reality/ "Research Publications")

• [Artificial Intelligence](http://engineering.fb.com/2026/05/01/security/meta-strengthening-end-to-end-encrypted-backups/# "Artificial Intelligence")
• [ML Applications](https://engineering.fb.com/category/ml-applications/ "ML Applications")
• [AI Research](https://engineering.fb.com/category/ai-research/ "AI Research")
• [Research Publications](https://ai.facebook.com/results/?content_types%5B0%5D=publication "Research Publications")

• [Watch Videos](http://engineering.fb.com/videos "Watch Videos")

POSTED ON MAY 1, 2026 TO Production Engineering, Security & Privacy

How Meta Is Strengthening End-to-End Encrypted Backups

By [Evan Smoot](https://engineering.fb.com/author/evan-smoot/ "Posts by Evan Smoot"), [Guy Lewin](https://engineering.fb.com/author/guy-lewin/ "Posts by Guy Lewin"), [Antonio Martin](https://engineering.fb.com/author/antonio-martin/ "Posts by Antonio Martin"), [Kevin Koh](https://engineering.fb.com/author/kevin-koh/ "Posts by Kevin Koh")

The HSM-based Backup Key Vault

Meta’s HSM-based Backup Key Vault provides the foundation for end-to-end encrypted backups for WhatsApp and Messenger. The system allows people to protect their backed-up message history with a recovery code, ensuring that the recovery code is stored in tamper-resistant hardware security modules (HSMs) and is inaccessible to Meta, cloud storage providers, or any third party. The vault is deployed as a geographically distributed fleet across multiple datacenters, providing resilience through majority-consensus replication.

Late last year, we made it easier to end-to-end encrypt your backups using passkeys, and now we continue to strengthen the underlying infrastructure that protects password-based end-to-end encrypted backups with two updates: over-the-air fleet key distribution for Messenger and a commitment to publishing evidence of secure fleet deployments.

Over-the-Air Fleet Key Distribution

To verify the authenticity of the HSM fleet, clients validate the fleet’s public keys before establishing a session. In WhatsApp, these keys are hardcoded into the application. To support Messenger — where new HSM fleets need to be deployed without requiring an app update — we built a mechanism to distribute fleet public keys over the air as part of the HSM response. Fleet keys are delivered in a validation bundle that is signed by Cloudflare and counter-signed by Meta, providing independent cryptographic proof of their authenticity. Cloudflare also maintains an audit log of every validation bundle. The full validation protocol is described in our whitepaper, “Security of End-To-End Encrypted Backups.”

More Transparent Fleet Deployment

Transparency in the deployment of our HSM fleet is essential to demonstrating that the system operates as designed and that Meta cannot access users’ encrypted backups. We will now publish evidence of the secure deployment of each new HSM fleet on this blog page, further cementing our leadership in the space of secure encrypted backups. New fleet deployments are infrequent — typically no more than every few years — and we are committed to demonstrating to our users that each new fleet is deployed securely, which any user can verify by following the steps in the Audit section of our whitepaper.

Read the Whitepaper

For the complete technical specification of the HSM-based Backup Key Vault, read the full whitepaper, “Security of End-To-End Encrypted Backups.”

Share this:

• Share on Facebook (Opens in new window)Facebook
• Share on Threads (Opens in new window)Threads
• Share on WhatsApp (Opens in new window)WhatsApp
• Share on LinkedIn (Opens in new window)LinkedIn
• Share on Reddit (Opens in new window)Reddit
• Share on X (Opens in new window)X
• Share on Bluesky (Opens in new window)Bluesky
• Share on Mastodon (Opens in new window)Mastodon
• Share on Hacker News (Opens in new window)Hacker News
• [Email a link to a friend (Opens in new window)Email](mailto:?subject=%5BShared%20Post%5D%20How%20Meta%20Is%20Strengthening%20End-to-End%20Encrypted%20Backups&body=https%3A%2F%2Fengineering.fb.com%2F2026%2F05%2F01%2Fsecurity%2Fmeta-strengthening-end-to-end-encrypted-backups%2F&share=email)

TAGS: WhatsApp

Read More in Security & Privacy

View All

APR 16, 2026

Post-Quantum Cryptography Migration at Meta: Framework, Lessons, and Takeaways

APR 8, 2026

Trust But Canary: Configuration Safety at Scale

MAR 13, 2026

Patch Me If You Can: AI Codemods for Secure-by-Default Android Apps

MAR 9, 2026

How Advanced Browsing Protection Works in Messenger

FEB 4, 2026

No Display? No Problem: Cross-Device Passkey Authentication for XR Devices

JAN 27, 2026

Rust at Scale: An Added Layer of Security for WhatsApp

Related Posts

• * *




Related Positions

• * *

• Production Engineering FREMONT, US
• Production Engineering REMOTE, US
• Production Engineering REMOTE, US
• Production Engineering BELLEVUE, US
• Production Engineering MENLO PARK, US

See All Jobs

Available Positions

• * *

• Production Engineering FREMONT, US
• Production Engineering REMOTE, US
• Production Engineering REMOTE, US
• Production Engineering BELLEVUE, US
• Production Engineering MENLO PARK, US

See All Jobs

Technology at Meta

• !Image 14: footer-fb-engineering Engineering at Meta - X Follow
• !Image 15: footer-AI AI at Meta Read
• !Image 16: footer-developers Meta Quest Blog Read
• !Image 17: footer-developers Meta for Developers Read
• !Image 18: footer-bug-bounty Meta Bug Bounty Learn more
• !Image 19: footer-rss RSS Subscribe

Open Source

Meta believes in building community through open source technology. Explore our latest projects in Artificial Intelligence, Data Infrastructure, Development Tools, Front End, Languages, Platforms, Security, Virtual Reality, and more.

• !Image 20: android ANDROID
• !Image 21: ios iOS
• !Image 22: web WEB
• !Image 23: backend BACKEND
• !Image 24: hardware HARDWARE

Learn More


Engineering at Meta is a technical news resource for engineers interested in how we solve large-scale technical challenges at Meta.

• Home
• Company Info
• Careers

© 2026 Meta

• Terms
• Privacy
• Cookies
• Help

To help personalize content, tailor and measure ads and provide a safer experience, we use cookies. By clicking or navigating the site, you agree to allow our collection of information on and off Facebook through cookies. Learn more, including about available controls: Cookie Policy

Accept