Is WAexport safe?

Question

Is WAexport safe?

Accepted Answer

WAexport is high risk. Each time you open WhatsApp Web, the extension sends your license key to a remote AWS Lambda server and receives back an encrypted payload. The server's response—decrypted locally using AES-CBC—determines how the extension behaves during your session. The server can change that behavior at any time without an extension update. When the extension's content script loads on WhatsApp Web, it sends your license key to a remote AWS Lambda server and receives back an encrypted payload. That payload is decrypted locally using AES-CBC and stored as the `mods` configuration object that governs the extension's export behavior. The server can change what the extension does at any time without issuing an extension update.

Is WAexport: Export WhatsApp Chats and Contacts safe?

Findings