WhatsApp’s ‘Code Verify’ will confirm authenticity of WhatsApp Web code: Here’s how

WhatsApp is rolling out a new free web extension browser called ‘Code Verify’. The extension–which will be available for Google Chrome, Microsoft Edge and Firefox browsers–  is designed for users to verify the authenticity of the WhatsApp web code being served to the browser.
WhatsApp says running the extension will give privacy-conscious users more security and peace of mind that the web version of the app has not been altered. It has also partnered with Cloudfare for the same to enable the deployment of the browser extension at scale.
In a blog post on Facebook engineering, the company wrote that since they had introduced multi-device capability last year on WhatsApp, they have “seen an increase in people accessing” the service directly through their web browser. For those who are not aware, they can now access WhatsApp via the desktop or laptop browser on four other devices without being tethered to their phone, though the link has to be initiated the mobile app.
” id = “6415944” liveblog = “no” ] Given this shift in usage, the company is adding security tools for ensuring that WhatsApp Web is secure. The company has also led reasons on why it needs to do this with the web version in particular. The mobile app is verified and vetted third-party app stores, but the same does not happen for WhatsApp Web. This along with other factors, “could weaken the security of a web browser that don’t ex in the mobile app space, such as browser extensions,” the company said.
What is Code Verify?
This is an open-source web browser extension that can be added to FireFox, Microsoft Edge and Google Chrome browser. WhatApp says it will automatically be pinned to Firefox or Edge browsers once added, and Chrome users will need to pin it for optimal use. The feature works in partnership with Cloudflare, a web infrastructure and security company. It is also being offered as open-source so that other services can use it as well.
The browser extension “doesn’t log any data, metadata, or user data, and it does not share any information with WhatsApp,” according to the company, nor does it read or access messages sent or received the user. Further, neither WhatsApp nor Meta will know whether or if someone has downloaded the Code Verify extension.
WhatsApp Web Code: What is shows when used to verify authenticity of the code.
How does Code Verify work?
WhatsApp is comparing the browser extension to a traffic light. After a user installs the extension, it will run automatically when one goes to WhatsApp Web and”act as real-time alert system.” According to the company, here’s what will show when you use the extension:
If the WhatsApp code is fully validated, the Code Verify icon in the browser will appear green.
If the Code Verify icon appears orange, it means that the user need to refresh your page or another browser extension is interfering with Code Verify. In this instance, Code Verify will recommend that you pause your other browser extensions.
If the Code Verify icon appears red, it will indicate that there is a possible security issue with the WhatsApp Web code you’re being served.
How WhatsApp Code Verify works.
Code Verify works in partnership with Cloudflare and will check the resources on the entire webpage. According to the post, Cloudflare has a “cryptographic hash source of truth for WhatsApp Web’s JavaScript code.” So when someone runs the extension, it compares the code that runs on WhatsApp Web against the version of the code verified WhatsApp and published on Cloudflare. In case of any discrepancies, the user is notified.
When the code is updated for WhatsApp Web, it will be done for Code Verify as well to ensure continuity.