The issue of recovering deleted messages on WhatsApp on someone else’s smartphone is one of the most controversial topics in the field of mobile security. On the one hand, the messenger actively promotes end-to-end key encryption, ensuring that even developers cannot read your correspondence. On the other hand, technical vulnerabilities, backups and third-party tools sometimes allow you to bypass these restrictions. But here lies the main trap: confidentiality and end-to-end encryption, ensuring that even developers cannot read your communications. On the other hand, technical vulnerabilities, backups and third-party tools sometimes allow you to bypass these restrictions. But here lies the main trap: any manipulations with someone else’s device without the owner’s consent may violate privacy laws (in Russia - Article 137 of the Criminal Code of the Russian Federation, in the EU - GDPR).

This article does not call for illegal actions, but talks about technical capabilities platforms Android i WhatsAppthat can are used to recover data - for example, if you have lost access to your account or are trying to return important information with the permission of the phone owner. We will analyze legal and semi-legal methods, their risks, and also explain why some “viral” methods from the Internet do not work.

⚠️ Attention: Using the described methods to access other people's data without consent is a violation of the law. The material is for informational purposes only.

Why does WhatsApp allow you to recover deleted messages?

At first glance, the function "Delete for everyone" in WhatsApp seems flawless: the message disappears from the chat for both interlocutors. However, in practice everything is more complicated. The messenger relies on three levels of data storage, each of which can become a "loophole" for recovery:

1. Local database on the phone (/data/data/com.whatsapp/databases/msgstore.db).

2. Cloud backups in Google Drive (if enabled).

3. Notification cache in the system Android (sometimes saves message text).

WhatsApp does not physically erase messages when you click “Delete for everyone” - it only marks them in the database as “deleted” and hides them from the user. Until new data is overwritten, old entries may remain in the device’s memory.
📊 Have you ever tried to recover deleted messages?
Yes, successfully
Yes, but it didn’t work
No, but I wonder how
No and I don’t plan to

Method 1: Restoring from a Google Drive backup

This is the only official methodwhich does not require root access or hack. It works if on the target phone:

- Enabled automatic backup in Google Drive.

- Account Google was not deleted or changed after deleting messages.

- You have access to the phone (at least temporary).

Step-by-step guide:

1. Remove WhatsApp from the phone via Settings → Applications.

2. Reinstall the messenger from Google Play and log in with the same number.

3. At the recovery stage, select last backup from Google Drive.

4. Wait for the process to complete (may take up to 30 minutes depending on the size of the chats).

⚠️ Attention: If more than 7 dayshave passed since the messages were deleted, the backup may have updated and overwritten the old data. In this case, the method will not work.

Make sure that there is enough space on the phone (at least 1 GB free)

Connect the phone to Wi-Fi (copies weigh tens of megabytes)

Know the login/password for the Google account linked to the phone

Disable two-factor authentication in WhatsApp (if enabled)

-->

Method 2: Analyzing the Android notification cache

System Android saves the notification text in a special database (/data/data/com.android.providers.telephony/databases/mmssms.db). If the message came in the form of a notification, a copy of it could remain there even after being deleted in the chat.

How to check:

1. Install a file manager with access to system folders (for example, FX File Explorer or Root Explorer).

2. Go to the path:

/data/data/com.android.providers.telephony/databases/mmssms.db

3. Open the file through the SQLite viewing application (for example, SQLite Editor).

4. Look for the table sms or pending_msgs —it can store text fragments.

Method limitations:

- Works only for SMS notifications (not for push messages from the messenger).

- Text can be trimmed to 160 characters.

- Required root access or ADB access.

Why does this method rarely work in new versions of Android?

Starting Since Android 10, Google has tightened its policy for access to system databases. Applications without root cannot read mmssms.db, and WhatsApp notifications hide the text of messages by default ("Confidential mode"). Android 12+ WhatsApp notifications hide the text of messages by default ("Private Mode").

Method 3: Using specialized apps (without root)

There are several applications that promise to recover deleted messages WhatsApp without root access. In practice, their effectiveness is close to zero, but we will look at the two most famous tools:

| app | Risks | cache and temporary files | Installs malware |

|--------------------|----------------------------------------|--------------------------------|-------------|

| Dr.Fone | Scans cache and temporary files | Installs malware | 10-20% |

| iMyFone ChatsBack | Analyzes backups | Requires payment ($39.95) |

| GT Recovery | Works only on older Androids apps

⚠️ Attention: Most of these apps requires you to disable Google Play protection or install APK from unknown sources. This can lead to infection of the phone with spyware.

💡

Before using third-party apps, check their reputation on forums like XDA Developers or 4PDA. Trojans are often distributed under the guise of "recovery agents."

Method 4: Manually extracting the WhatsApp database (requires root)

If your phone has root access, you can directly read the database data WhatsApp, where messages are stored in encrypted form. This method is the most reliable, but also the most risky - it requires technical skills and can lead to account blocking if done incorrectly.

Instructions:

1. Connect your phone to the PC and activate USB debugging (Settings → For developers).

2. Use ADBcopy the database:

adb pull /data/data/com.whatsapp/databases/msgstore.db

3. Decrypt the database using the tool WhatsApp Key/DB Extractor (you need a file key from the same folder).

4. Open the decrypted database in SQLite Browser and search table messages.

What to look for in the database:

- Field key_remote_jid — chat identifier.

- Field data — message text (can be in JSON format).

- Field status —if the value 5, the message is deleted.

💡

Even with root access, you can only restore those messages that were not overwritten by new data. WhatsApp uses a “garbage collection” mechanism, which clears old entries when there is not enough space.

Method 5: Social engineering (without technical manipulation)

Sometimes it is easier convince the sender to send the message againthan trying to restore it using technical methods. This method does not violate the laws and works in 60-70% of cases if you act correctly.

Dialogue tactics:

- "I accidentally deleted our chat, don't you remember what you wrote about [topic]?"

Works if the message was important for both interlocutors.

- "My WhatsApp is glitchy, it doesn't show the latest messages. Could you repeat it?"

Suitable for informal communication.

- "I made a backup copy, but it was not restored. Can you tell me what was there about [detail]?"

Effective if you discussed a specific topic (for example, a meeting or document).

⚠️ Attention: If the message was deleted due to a conflict, this approach may make the situation worse. Use it only for neutral or positive topics.

Trying to access other people's messages without consent is not only ethical doubtful, but also punishable by law:

1. In Russia:

- Article 137 of the Criminal Code of the Russian Federation ("Violation of privacy") provides for a fine of up to 200 000 ₽ or correctional labor.

- Article 272 of the Criminal Code of the Russian Federation ("Illegal access to computer information") - up to 5 years imprisonmentif access was obtained using malware.

2. In the European Union:

- Violation GDPR (Data Protection Regulation) may result in a fine of up to €20 million or 4% of the company's global revenue (if the data was used for commercial purposes).

3. Technical risks:

- Installing hacked versions WhatsApp (for example, GBWhatsApp) leads to ban account.

- Using ADB or root can reset the phone to factory settingsif you make a mistake.

📊 How do you feel about restoring other people's messages without consent?
This is always incorrect
Acceptable in emergency cases
I don’t see a problem if the information is important
Difficult to answer

If you care your own correspondence (not someone else's phone), here 3 legal ways prevent data loss:

🔹 Enable daily backups:

Go to WhatsApp → ⋮ → Settings → Chat → Backup and select Daily. Copies will be saved in Google Drive.

🔹 Export important chats manually:

Open the desired chat → ⋮ → Export chat → select Without media (so that the file is compact). Messages will be saved in .txt.

🔹 Use third-party open source messengers:

- Signal —encryption by default, backups in encrypted form.

- Session —a decentralized messenger without reference to a phone number.

FAQ: Frequently asked questions about message recovery

Is it possible to recover messages deleted a year ago?

Theoretically, yes, if the phone has not been reset or updated backup copy in Google Drive. In practice, it’s unlikely: in a year, the database WhatsApp is overwritten hundreds of times, and old backup copies are stored in Google Drive maximum 1 year (if you do not change the storage settings).

Do apps like "WhatsDeleted" for reading deleted messages?

Applications like WhatsDeleted or Notification History track notifications, and not the database itself WhatsApp. They will only show the message if:

  • 📌 It came in the form of a notification (not all messages generate it).
  • 📌 You did not clear the notification log.
  • 📌 In settings Android Access to notifications for these applications is allowed.

For messages deleted before installing such software, the method is useless.

What to do if two-factor authentication is enabled on your phone in WhatsApp?

Two-factor authentication (2FA) blocks recovery from backup if you don't know the PIN. Bypass it impossible without access to the account owner's email or SMS. The only option is to reset WhatsApp to factory settings via Settings → Applications → Reset data, but this will delete all chatsincluding backups on the phone.

Can WhatsApp restore messages at the request of law enforcement agencies?

Officially WhatsApp states that it does not store messages on its servers and cannot provide them. However:

  • 🔍 During an active investigation, law enforcement may request metadata (sent time, IP addresses, device information).
  • 🔍 If the feature was enabled on the phone Backup to Google Drive, data can be seized from Google by court decision.
  • 🔍 In some countries (for example, India), authorities require WhatsApp to store messages for up to 90 days to “fight with misinformation."
How to permanently delete messages so that they cannot be restored?

To ensure that correspondence is erased:

  1. Delete chat messages via Delete for everyone.
  2. Clear backups to Google Drive (Drive.google.com → Trash).
  3. Delete the folder WhatsApp on your phone (/sdcard/WhatsApp/).
  4. Use a secure erase app (for example, Secure Eraser) to overwrite free space on the device.

Even after this message fragments can remain in the phone's memory until it is completely overwritten with new data.