Elcomsoft Explorer for WhatsApp 2.77 fixes the ability to download WhatsApp backups stored in the user’s Google Account. The issue was caused by the change in Google’s authentication protocol, which has been identified and incorporated into the latest update.

Elcomsoft Explorer for WhatsApp 2.77 is a bugfix release, fixing the issue of failed authentication when attempting to obtain WhatsApp backups from the user’s Google Account. The issue was caused by the change in Google’s authentication protocol. We identified the change and fixed the authentication issue in this update.

We are working around the clock to monitor the latest developments in Google’s cloud ecosystem. Even the slightest change to Google’s proprietary authentication and communication protocols may break cloud-based mobile forensic tools, including Elcomsoft Explorer for WhatsApp. We are working hard to maintain our tools and restore cloud-related functionality as soon as possible.

Elcomsoft Explorer for WhatsApp provides the ability to obtain and decrypt WhatsApp backups stored in the user’s Google Account. For cloud acquisition from Google Drive, access to the user’s Google Account and their verified phone number (SIM card) is required to obtain the encryption key and decrypt the backup. Since November 2018, WhatsApp backups in Google Drive no longer count towards the user’s Google Drive storage quota. WhatsApp backups in Google Drive that haven not been updated in more than one year will be automatically removed from Google Drive.

The tool can also obtain iPhone users’ WhatsApp backups by processing local and cloud iOS backups. In addition, stand-alone WhatsApp backups can be obtained from the user’s iCloud Drive.

Release Notes

• Fixed the issue that prevented the downloading and decryption of WhatsApp backups from Google accounts