64 Digit Encryption Key WhatsApp: Where to Find It

WhatsApp does not display a 64-digit encryption key anywhere in its app, and you cannot retrieve one from your phone. The 64-digit number you may have seen referenced is the fingerprint of your chat’s end-to-end encryption key, which WhatsApp shows as a 60-digit number (in groups of 12) on the encryption info screen. This article explains exactly where that number appears, what it actually means, and how to verify it with the person you’re chatting with.

What the 64-Digit Number Actually Is

WhatsApp uses the Signal Protocol to encrypt messages. Each device generates a pair of public and private keys. The public key is shared with the other party, and the private key never leaves your device. To let you verify that no one is intercepting your messages, WhatsApp computes a 60-digit fingerprint from the public keys of both participants. This fingerprint is often called a “safety number” or “security code.” It is not a key you type in to unlock anything; it’s a verification tool. The confusion about “64 digits” likely comes from other encryption systems (like some PGP keys) or from a misreading of the 60-digit display.

Where to Find the Encryption Fingerprint in WhatsApp

Open a chat with the contact you want to verify. Tap on their name at the top of the screen to open the contact info page. Scroll down and tap “Encryption” (on Android) or “Security” (on iPhone). You’ll see a QR code and a 60-digit number below it. That number is the safety code. On Android, you can also find it by tapping the three-dot menu in a chat, then “More,” then “Encryption.” On iPhone, tap the contact name, then “Security,” then “Show Security Code.”

How to Use the Safety Code

The safety code is meant to be compared out-of-band. The most reliable method is to scan the QR code with the other person’s phone. To do this, both of you open the Encryption screen, then one person taps “Scan Code” and points their camera at the other’s QR code. If the codes match, WhatsApp shows a green checkmark. Alternatively, you can read the 60-digit number aloud or send it via a different channel (like a phone call or a separate messaging app) and compare digit by digit. If the numbers match exactly, your chat is secure.

Why You Can’t Find a 64-Digit Key

WhatsApp does not give you access to the raw encryption keys. The private key is stored in the secure enclave of your phone’s hardware and is never exposed to the user or to WhatsApp’s servers. The public key is embedded in the safety code, but it’s hashed and truncated to produce the 60-digit fingerprint. There is no setting, file, or menu that shows a 64-digit key. If you see a 64-digit number mentioned online, it’s likely from a different app or an outdated tutorial. Some users confuse the 60-digit safety code with a 64-character hexadecimal key used in other encryption software.

What to Do If the Safety Code Doesn’t Match

If you and the other person compare codes and they don’t match, stop the conversation. A mismatch means at least one of you is not using the expected public key. Possible causes include:

One of you reinstalled WhatsApp or switched phones, which generates new keys.
One of you is using a third-party WhatsApp client that doesn’t follow the same protocol.
A man-in-the-middle attack is occurring (rare but possible).

In most cases, the fix is to ask the other person to verify their phone number and then re-scan the QR code. If the codes still don’t match, do not share sensitive information until you’ve confirmed the identity through another channel.

Common Misconceptions About the Safety Code

One common myth is that the safety code changes every time you open the app. It doesn’t. It stays the same as long as both devices keep the same keys. It only changes when a device is re-registered (e.g., after reinstalling WhatsApp or switching phones). Another misconception is that the safety code is a password you need to enter somewhere. It isn’t. You never type it into WhatsApp; you only compare it visually or via QR scan. Finally, some people think that copying the safety code from a screenshot is enough. Screenshots can be forged, so always verify through a live comparison or a separate channel you trust.

Alternatives for Verifying Encryption

If you want a higher level of assurance, you can enable two-step verification in WhatsApp settings. This adds a PIN to your account, but it doesn’t change the encryption keys. For truly sensitive conversations, consider using a dedicated secure messaging app that shows full key fingerprints (like Signal, which displays a 60-digit safety number as well). WhatsApp’s safety code is sufficient for most users, but if you’re a journalist or activist, you may want to use a separate device for critical chats and verify codes in person.

Frequently Asked Questions

How do I copy the 60-digit safety code?

On the Encryption screen, tap the “Copy” button (Android) or the share icon (iPhone) to copy the code to your clipboard. You can then paste it into a secure note or send it via a different channel. Remember, copying is less secure than scanning the QR code because the copied code could be intercepted if your clipboard is compromised.

Does the safety code expire?

No, the safety code does not expire on its own. It remains valid until one of the devices generates new keys. This happens when you reinstall WhatsApp, switch phones, or clear app data. After that, a new code is generated, and you’ll need to verify again.

Can I see the encryption key for a group chat?

Yes. Open the group chat, tap the group name, then scroll to “Encryption” or “Security.” You’ll see a safety code that is derived from all participants’ keys. It’s a single code for the whole group, not individual codes per member.

Why does the code show 60 digits and not 64?

WhatsApp deliberately truncates the fingerprint to 60 digits for readability. The underlying key is much longer (256-bit), but the fingerprint is a hash. The 60-digit format is standard for Signal-based apps. There is no 64-digit version in WhatsApp.

Is it safe to share my safety code publicly?

Sharing your safety code publicly is not recommended. While it doesn’t directly expose your private key, it gives an attacker a target to try to match. Only share it with the person you’re chatting with, and preferably through a secure channel.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →