The HSM-based Backup Key Vault Meta’s HSM-based Backup Key Vault provides the foundation for end-to-end encrypted backups for WhatsApp and Messenger. The system allows people to protect their backed-up message history with a recovery code, ensuring that the recovery code is stored in tamper-resistant hardware securi...
Software Engineering
How Meta Is Strengthening End-to-End Encrypted Backups
Meta Engineering · 2026-05-01
Related items
Software EngineeringMeta Engineering
Labyrinth 1.1: Making End-to-End Encrypted Backups Even More Reliable
We’re rolling out version 1.1 of Labyrinth, the encrypted storage system and protocol that secures messages and history on Messenger. Labyrinth 1.1 enhances the reliability of end-to-end encrypted backups with a new sub-protocol that helps messages survive the loss of a device, a switched device, and long gaps betwe...
Software EngineeringMeta Engineering
Escaping the Fork: How Meta Modernized WebRTC Across 50+ Use Cases
At Meta, WebRTC powers real-time audio and video across various platforms. But forking a large open-source project like WebRTC within our monorepo presents unique challenges – over time, an internal fork can drift behind upstream, cutting itself off from community upgrades. We’re sharing how we escaped this “forking...
Software EngineeringAWS Architecture Blog
Streaming CloudWatch metrics to VPC-based OpenTelemetry collectors using Lambda
In this post, we demonstrate an approach we used to address this challenge for a customer by implementing an AWS Lambda transformation function that streams Amazon CloudWatch metrics directly to internal OpenTelemetry collectors running within a VPC.
Software EngineeringCloudflare Developer Platform Changelog
Browser Run - Browser Rendering is now Browser Run
We are renaming Browser Rendering to Browser Run . The name Browser Rendering never fully captured what the product does. Browser Run lets you run full browser sessions on Cloudflare's global network, drive them with code or AI, record and replay sessions, crawl pages for content, debug in real time, and let humans...
Software EngineeringCloudflare Developer Platform Changelog
Stream - Stream live inputs can now be disabled and enabled
You can now disable a live input to reject incoming RTMPS and SRT connections. When a live input is disabled, any broadcast attempts will fail to connect. This gives you more control over your live inputs: Temporarily pause an input without deleting it Programmatically end creator broadcasts Prevent new broadcasts f...
Software EngineeringCloudflare Developer Platform Changelog
Email Service - Email Sending now in public beta
Email Sending is now in public beta. Send transactional emails directly from Workers ( env.EMAIL.send() ) or the REST API, with support for HTML, plain text, attachments, inline images, and custom headers. Email Sending joins Email Routing under the new Cloudflare Email Service — a single service for sending and rec...