WhatsApp's decision is likely to have a more significant impact on people and governments overseas, analysts said, as most of its 600-million-plus users are outside the United States. The company already has begun encrypting instant messages sent on Android devices, according to Open Whisper Systems.
"We have a ways to go until all mobile platforms are fully supported, but we are moving quickly towards a world where all WhatsApp users will get end-to-end encryption by default," Open Whispers said in a blog post.
Moxie Marlinspike, a San Francisco-based technologist who founded Open Whisper Systems, said the group's goal is to make simple the sometimes cumbersome process of ensuring communications stay private.
"From celebrity nudes to Iranian dissidents, private communication is valuable for everyone," Marlinspike said.
Read also:
• Apple issues security warning for iCloud
Founded in 2009 by two former Yahoo employees and now owned by Facebook, WhatsApp is used on a wide range of mobile phones, from the iPhone to Nokia to BlackBerry to Windows Phone.
Open Whisper Systems received grants from the US government, including from Radio Free Asia, and from a number of foundations to help the group develop the TextSecure encryption protocol. The encryption is open-source, free and available online.
Such tools align with a major goal of US foreign policy, which is Internet freedom. In 2010, then-Secretary of State Hillary Rodham Clinton urged countries to respect privacy and speech rights online. Since then, the State Department has funded the creation of privacy tools, including encryption technology, to allow people to hide their communications from oppressive governments.
"Encryption is the single-most important cybersecurity tool," said Peter Swire, a former White House privacy official who teaches law at the Georgia Institute of Technology. "We can't begin to have effective cybersecurity unless we have wider use of encryption."
Andrew Weissmann, a former FBI general counsel who now teaches at New York University School of Law, said network security issues are not the only consideration. "You also have law enforcement and national security issues," he said. "There's no perfect solution." The issue, he said, is "how can each side minimise the risk?"