Application Security and Permissions
How Meta Is Strengthening End-to-End Encrypted Backups

How Meta Is Strengthening End-to-End Encrypted Backups

5/1/2026 · Evan Smoot, Guy Lewin, Antonio Martin, Kevin Koh

What this post added

Introduced over-the-air fleet key distribution for Messenger's end-to-end encrypted backups, enabling new HSM fleet deployments without app updates. This mechanism uses signed validation bundles from Cloudflare and Meta to cryptographically prove the authenticity of fleet public keys. Also committed to publishing evidence of secure HSM fleet deployments to enhance transparency.

Read the original post ↗