How Meta Is Strengthening End-to-End Encrypted Backups
May 1, 2026Evan Smoot, Guy Lewin, Antonio Martin, Kevin Koh
Summary
Introduced over-the-air fleet key distribution for Messenger's end-to-end encrypted backups, allowing clients to validate fleet public keys without app updates. This mechanism delivers fleet keys in a validation bundle signed by Cloudflare and counter-signed by Meta, with Cloudflare maintaining an audit log. This enhances transparency and allows for new HSM fleet deployments without requiring app updates. Additionally, Meta commits to publishing evidence of secure fleet deployments on the blog.
More from the Application Security and Permissions trail
- How We’re Building Scam Alert on WhatsApp With End-to-End Encryption and Verifiability Guarantees
- Privacy-Aware Infrastructure in the AI-Native Era: An Asset Classification Case Study
- Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable
- Post-Quantum Cryptography Migration at Meta: Framework, Lessons, and Takeaways
- Patch Me If You Can: AI Codemods for Secure-by-Default Android Apps