New Samsung alert! Score a Galaxy S21 5G for as little as $99 right now

  • Forums
  • Shop
  • Galaxy S21
  • CES 2021
  • Huawei
  • Pixel 5
  • PS5
  • Android 11
  • Best Chromebook
  • OnePlus 8 Pro
  • Best Wireless Earbuds
  • Best VPN

We may earn a commission for purchases using our links. Learn more.

Not a good look

Your private WhatsApp group chats could be a Google Search away from being compromised

All it takes is a simple Google search.
Muhammad Jarir Kanji
21 Feb 2020

WhatsApp Messenger screenshotSource: Joe Maring / Android Central

What you need to know

  • WhatsApp group chats may be far less private than one would imagine.
  • Invite links for private WhatsApp groups can be easily found via a Google Search, meaning anyone could potentially join a private chat.
  • The issue likely stems from a mistake on WhatsApp's part.

A journalist for DW News this week tweeted out a grim warning: "Your WhatsApp groups may not be as secure as you think they are."

The reason for his concern? Invite links for WhatsApp groups are being indexed by Google's search engine, meaning that if a link to your private group exists anywhere on the internet, anyone could potentially find the link and join your group with just a quick Google search.

Your WhatsApp groups may not be as secure as you think they are.

The "Invite to Group via Link" feature allows groups to be indexed by Google and they are generally available across the internet. With some wildcard search terms you can easily find some… interesting… groups. pic.twitter.com/hbDlyN6g3q

— Jordan Wildon (@JordanWildon) February 21, 2020

Doing so is as simple as typing in "site:chat.whatsapp.com" into the search bar on Google. Once you do, you can see that Google has indexed up to 470,000 such links, meaning hundreds of thousands of groups could potentially be accessible this way.

Admittedly, some of these links could have been intended for public sharing by their group administrators, but as discovered by Vice News and some Twitter users, some of the groups indexed by Google almost certainly weren't meant to be public.

VPN Deals: Lifetime license for $16, monthly plans at $1 & more

You can find groups belonging to NGOs and other organizations. Some of the indexed groups possibly also contain illegal material, with one Twitter user even identifying groups that seemingly pertain to child pornography.

WhatsApp has issued the following statement to Vice:

Group admins in WhatsApp groups are able to invite any WhatsApp user to join that group by sharing a link that they have generated. Like all content that is shared in searchable, public channels, invite links that are posted publicly on the internet can be found by other WhatsApp users. Links that users wish to share privately with people they know and trust should not be posted on a publicly accessible website.

However, as app reverse-engineer Jane Manchun Wong points out, WhatsApp could have avoided many of these groups being indexed by changing some of the settings associated with group invite links, such as by using the 'noindex' meta tag.

I reported to facebook security in early november pic.twitter.com/KSfsd8SYxt

— HackrzVijay 💻 (@hackrzvijay) February 21, 2020

The issue had been pointed out to Facebook's bug bounty program by a researcher last year, but the company ruled that it did not warrant a bounty with a statement similar to the one given to Vice.

WhatsApp passes the 2 billion monthly users mark

Have you listened to this week's Android Central Podcast?

Android Central

Every week, the Android Central Podcast brings you the latest tech news, analysis and hot takes, with familiar co-hosts and special guests.

  • Subscribe in Pocket Casts: Audio
  • Subscribe in Spotify: Audio
  • Subscribe in iTunes: Audio

We may earn a commission for purchases using our links. Learn more.

The Galaxy S21 Series Report Card: A winning price with some odd holdovers
From the Editor's Desk

The Galaxy S21 Series Report Card: A winning price with some odd holdovers

Samsung's latest flagship launched this week, and while there is an awful lot to love in the Galaxy S21, S21+, and S21 Ultra, no product is perfect. Here's where the S21 strikes gold and where it just struck dirt.

Samsung Galaxy Buds Pro review: The new best
The right stuff

Samsung Galaxy Buds Pro review: The new best

Samsung's aiming squarely at the AirPods Pro with the new Galaxy Buds Pro, but it's done something better: it's made one of the best-sounding wireless earbuds you can buy.

Soundcore Liberty Air 2 Pro review: Sounds about right
ANC FTW

Soundcore Liberty Air 2 Pro review: Sounds about right

Soundcore isn't a household brand just yet, but Anker's headphone division is making a name for itself as the producer of the best-sounding true wireless earbuds under $150.

Block ads, trackers and even some malware with the best Chrome ad blockers
Stop. Block. Enjoy.

Block ads, trackers and even some malware with the best Chrome ad blockers

Pop-ups, banners and video ads are at the very least annoying, but many also harbor malware. Here are some ad blockers to help cut through the noise.

Keep in Touch

Sign up now to get the latest news, deals & more from Android Central!

I would like to receive news and offers from other Future brands.

I would like to receive mail from Future partners.

No spam, we promise. You can unsubscribe at any time and we'll never share your details without your permission.

  • News
  • WhatsApp
  • Phones
  • Reviews
  • Chromebooks
  • Android
  • How To
  • Deals
  • Forums
  • Gaming
  • VPN

Other Categories

  • About Us
  • Newsletter
  • Advertising Inquiries
  • Licensing and Reprints
  • Tip us on news
  • Accessibility Statement
  • Windows Central
  • iMore
  • CrackBerry
  • Thrifter
  • TechnoBuffalo
  • MrMobile
Log in or Sign up
  • Twitter
  • Facebook
  • YouTube
  • Instagram
  • RSS

Brightness

  • © Future US, Inc.
  • Terms & Conditions
  • Privacy Policy
  • Cookie Policy
  • Careers
  • Licensing
  • External Links Disclosure
  • Accessibility Statement
  • © Future US, Inc.
  • Terms & Conditions
  • Privacy Policy
  • Cookie Policy
  • Careers
  • Licensing
  • External Links Disclosure
  • Accessibility Statement