Where should you save your WhatsApp chats?
Phone vs encrypted cloud
By Chantal, founder of EM Keep -
The short version: you can keep a WhatsApp export on your phone, in ordinary cloud storage, or in cloud storage that's encrypted on your device before it's uploaded. What matters is who can read the copy, how you get back in if you lose your phone or password, and whether you have a second copy if something goes wrong.
Once you've decided a conversation is worth keeping, the next question is where to keep it. Maybe it's years of family messages, a friend's voice notes, or the small everyday exchanges you never want to lose. Here are the three most common approaches, with the trade-offs left in. They aren't either-or: many people keep one place to revisit their memories and a separate copy somewhere safe.
First, a word about exports
An export is a copy of your chat as a file, with photos, videos and voice notes if you choose to include them. It isn't a backup WhatsApp can restore from.
Once it's out of WhatsApp, WhatsApp's own encryption no longer protects it. How private it stays depends on where you keep it. If you haven't made one yet, here's how to export a WhatsApp chat.
What does 'encrypted' actually mean?
Picture a letter locked in a box. The box can be carried, stored and looked after by someone else, and without the key, nobody can read the letter. Encryption does the same for your words: it turns them into scrambled text that only the right key can unlock.
So the question that matters is who can use the key. Most cloud services encrypt your files while they travel and while they're stored, but they manage the keys themselves, so their systems can unlock your files. Encryption on your device, sometimes called client-side encryption, means your file is locked before it's uploaded. Even then, it's worth checking whether the company can get hold of a key that opens it.
Option 1: only on your device
An export saved to your phone's own storage, or an app that keeps its copy on your device and never uploads it.
What it does well: no cloud company holds this copy, and you can usually open it without an internet connection.
The trade-off: if it's your only copy, it lasts as long as the device does. Phones get lost, broken, wiped and replaced. And on your device doesn't mean locked: anyone using your unlocked phone, or harmful software on it, may be able to open the file.
It takes up room, too. WhatsApp already keeps the chat on your phone, and an app that works only on your device usually needs its own copy as well. How much depends on the app and how it handles photos, videos and voice notes, but with a big chat it adds up quickly on a phone that's already nearly full.
Check where it really is. A file you can see in your phone's Files app may actually live in iCloud Drive or Google Drive, not just on the phone.
A good fit if: you want to open your chats offline and keep full control, and you'll keep a protected copy somewhere else as well.
Option 2: cloud storage the provider can unlock
An ordinary cloud folder, an email to yourself with the export attached, or an app you upload a chat to so it can sort, search or analyse it.
What it does well: the copy survives a lost phone, and you can open it anywhere you can sign in.
The trade-off: the provider holds the keys, so its systems can technically unlock your file. That doesn't mean anyone is reading it, or that it's used to train AI. Those are separate questions, and worth asking.
Not every cloud folder works this way. iCloud Drive with Advanced Data Protection switched on, for example, encrypts files so that only your devices can unlock them.
A chat isn't only your words. It's the other person's words too, and sometimes their voice. Before uploading one to an app that uses AI to read it, check where the messages go, how long they're kept, and whether they're used for anything else.
A good fit if: you want easy access and you're comfortable with how the provider protects, recovers and uses your files.
Option 3: encrypted on your device, kept in the cloud
Your chat is locked on your own phone or computer before it's uploaded, and the company storing it can't use the key that opens it.
What it does well: your memories survive a lost phone, and the company storing them can't read what's inside.
The trade-off: getting back in is in your hands. These services rely on something only you have, like a recovery phrase. Lose every way to unlock it, and the company can't help. Encryption also protects the stored copy, not an unlocked phone or a device with harmful software on it.
Phone space and offline access depend on the app. Some keep copies on your phone so you can open them offline, others fetch your memories each time.
A good fit if: you want your memories to outlast your phone without handing anyone else a way in, and you'll look after your recovery phrase.
The three side by side
| Only on your device | Cloud where the provider can unlock | Encrypted on your device, kept in the cloud | |
|---|---|---|---|
| If you lose your phone | The only copy may go with it | Still there | Still there, as long as you have your password |
| Can the storage company read it? | No company holds it | Its systems can unlock it | No, it can't use your key |
| Getting back in | Depends on your phone and the file | Usually a password reset | Your recovery phrase or password. Lose both, and no one can get in |
| Space on your phone | The app's copy, on top of WhatsApp's | Depends on the app | Depends on the app |
| Without internet | Usually yes | Depends on the app | Depends on the app |
These describe approaches, not ratings. Each app's own settings and recovery options are worth a look.
What about WhatsApp's own backup?
WhatsApp's backup is there to restore WhatsApp if your phone changes. It goes to iCloud on iPhone, your Google Account on Android, and for some people WhatsApp's own cloud storage, which is still rolling out.
It's worth keeping on, and worth protecting. Go to Settings, then Chats, then Chat backup, then End-to-end encrypted backup. Depending on your phone and app version, you can lock it with a passkey, a password or a 64-digit key.
A backup isn't a place to browse your memories, though. It only opens inside WhatsApp, and each new Google Account backup replaces the one before. An export is the copy you keep for yourself.
Is this the same as end-to-end encryption?
End-to-end encryption is best known from messaging, but it's also used for stored files and backups, like WhatsApp's encrypted backups and iCloud's Advanced Data Protection. Labels mean slightly different things at different companies, so rather than looking for one, ask the questions behind it: is my content encrypted before it's uploaded, who can unlock it, and what stays readable?
Questions to ask before you upload a chat anywhere
- Is my content encrypted before it leaves my device?
- Who can get hold of, or use, the key that unlocks it?
- What can the company see, including details about my messages?
- Is anything sent to an AI model, kept, or used for training?
- Can I get back in if I lose my phone, or forget my password?
- Can I download my chats again, including the media that matters?
- What's deleted when I remove a chat or my account, and what stays in backups?
Clear answers help you weigh up the trade-offs. They aren't the same as an independent security review, but a service that can't answer them plainly is worth a second thought.
How EM Keep does it
I built EM to keep my conversations with Emma and my partner (amongst many others), so this was never a question I could take lightly. I wanted her words to outlast any phone I own, and I never wanted anyone else to be able to read any of my messages.
EM Keep brings back the messages you sent on this day in past years, one card at a time. Here's how it answers those seven questions.
Encrypted before it leaves your device. Message text, journal notes and voice notes are encrypted in your browser with AES-256-GCM before anything is uploaded.
Your password unlocks the key. EM creates a random encryption key just for you and only ever stores it locked. Your password unlocks it, and your recovery phrase is a second way to unlock it if you forget your password. EM never holds an unlocked copy, so it cannot be used to read your memories.
What EM can see. Some details stay readable, so the right memories come back on the right day: message dates and times, message types, counts, hearts, whether a chat is marked in memory of someone, journal dates and return dates, and fact-card types. EM can also see the size and length of voice notes, and your account and usage details. None of the memory details hold anything written or said. Our privacy page lists them all.
No AI reads your messages. Your messages aren't sent to any AI model for any reason. What comes back is your real words, exactly as they were sent and received.
If you lose your phone, your memories are still there. Sign in on your new device with your password.
If you forget your password, an emailed code and your recovery phrase let you set a new one. If you forget your password and lose your recovery phrase too, EM can't recover your memories, because it never could read them.
What EM keeps from an export. Messages, and voice notes if you include media (hearing them is part of EM Premium). Photos and videos aren't imported, and a chat you download from EM includes the messages but not the voice notes.
Deleting. You can delete a chat or your account at any time. Deleted data can stay in EM's database backups for up to 14 days before it's gone.
So keep your original export too, somewhere protected, especially for the conversations that matter most. EM is a place to revisit your memories, not a replacement for your own copy.
Encrypted before it leaves your device. Only you can read your memories.
EM is free to start.
Some conversations deserve to last.
Is it safe to upload WhatsApp chats?
It depends on the service. WhatsApp's encryption doesn't protect a chat once it's exported, so check whether the service encrypts your chat before upload, who can unlock it, what stays readable, and how deleting works.
Can EM read my messages?
No. Your messages are encrypted in your browser before they're uploaded, and EM can't use the key that unlocks them. A few details stay readable so memories come back on the right day, and our privacy page lists them. Encrypted before it leaves your device. Only you can read your memories.
Is EM end-to-end encrypted?
EM encrypts your messages on your own device before they're uploaded, and only you can unlock them. Rather than lean on a label that means different things at different companies, we'd rather tell you exactly what's encrypted and what isn't, and our privacy page does.
Does EM use AI to read my chats?
No. Your messages aren't sent to any AI model. EM gives back the real words from your conversations, never anything written in someone's name or any AI analytics of your messages.
What if I forget my password?
An emailed code and your recovery phrase let you set a new password. If you've lost both your password and your recovery phrase, EM can't recover your memories.
Should I delete my original export after uploading?
No, not if it's your only copy. Keep the export and any photos or videos that matter somewhere protected, especially when you're keeping messages from someone who has died. The missing messages guide can help you check everything important is there.
Can I delete my memories?
Yes. You can delete a chat or your whole account at any time. Deleted data can stay in EM's database backups for up to 14 days.
WhatsApp's menus and backup options, and cloud providers' settings, may change at any time. These details were checked in October 2026. EM is an independent app and is not affiliated with WhatsApp.