

If you have root access, Elcomsoft Explorer for WhatsApp can extract and decrypt the WhatsApp database from pretty much every Android smartphone running Android 4.0 through the latest 7.1.1 (up to 6.0.1 without root access).

If root access is available, we can use root privileges to access and extract the working database. WhatsApp encrypts its cloud backups, which makes acquisition far from trivial. The company does not keep a copy of those messages anywhere on its servers, which rules out direct cloud acquisition. WhatsApp employs peer-to-peer exchange of encrypted messages, making the man-in-the-middle attack unfeasible. Now it’s time to go Android! Extracting WhatsApp Communication History from Android Devices Elcomsoft Explorer for WhatsApp was an iOS exclusive for way too long. The company has client apps for all major mobile platforms including Android, iOS and Windows 10 Mobile, yet 73% of its user base are Android users. While the updated tool can now extract WhatsApp communication histories directly from Android smartphones with or without root access, how do you actually use it, and how does it work? In this blog post we’ll be looking into the technical detail and learn how to use the tool. As you may already know, we’ve added Android support to our WhatsApp acquisition tool, Elcomsoft Explorer for WhatsApp.
