Ever since instant messaging application WhatsApp introduced multi-device capability, many users have been using WhatsApp directly through a web browser. That’s why WhatsApp has now come up with a new extension to make its web app more secure so that users can protect themselves from attacks. This extension is being called Code Verify. According to GSM Arena, its sole purpose is to ensure that the web version of WhatsApp is secure enough.
WhatsApp said web apps are inherently less resilient against attacks. So Code Verify ensures the same security as the original app on Windows, iOS or Android.
WhatsApp is announcing Code Verify!
Thanks to this extension, you can verify the integrity of your version of WhatsApp Web so you are sure you’re using an authentic version.https://t.co/Txb5u4soUi
— WABetaInfo (@WABetaInfo) March 10, 2022
Also read- Recharge and win 1.5 lakh prizes and ₹ 50000 vouchers, this company is giving a chance
Code Verify an important web browser extension
According to WABetaInfo, Code Verify is a new very important web browser extension that adds another layer of security for WhatsApp users. When Code Verify is installed, it automatically detects whether the code for the version of WhatsApp Web you are using has been replaced with a malicious code, so if it is an authentic and untempered version.
WABetaInfo reported that, “When Code Verify successfully verifies that you are using an authentic version of WhatsApp Web, it means that your version has not been modified by hackers or other malicious people and scripts. WhatsApp is the best way to verify the integrity of your version of the web.” In addition, the extension doesn’t log metadata and user messages, and it doesn’t share any information with WhatsApp and Meta, “it’s also open-source, so everyone can verify what it does.”
Also read- 180GB data and 90 days validity for ₹ 20 more: This BSNL plan is stronger than Jio
So how does ‘code verify’ work?
According to Meta’s official post, “Verify expands on the concept of Subresource Integrity, a security feature that allows web browsers to verify that the resources they receive have not been manipulated. Subresource Integrity only works on single files.” applicable, but Code Verify checks resources across the entire webpage.”
To do this at scale, and to increase trust in the process, Code Verify partners with Cloudflare to act as a trusted third-party. “We have provided Cloudflare a cryptographic hash source of truth for the JavaScript code of WhatsApp Web. When someone uses Code Verify, the extension automatically compares the code running on WhatsApp Web to the version of the code verified by WhatsApp and published on Cloudflare. If any defect is found, Code Verify will notify the user.”
While comparing hashes to detect tampered files is nothing new, Code Verify does so automatically with the help of Cloudflare’s third-party verification, and for the first time at this scale. WhatsApp Security Protection, Code Verify Extension and Cloudflare all work together to provide real-time code verification. Whenever the code for WhatsApp Web is updated, the cryptographic hash source of truth and extension will also be updated automatically.