WhatsApp's 'delete for everyone' feature isn't safe

Embarrassing Whatsapp messages sent to you and then recalled by the sender can STILL be read: Here's how to access them

Feature allows users to unsend messages within 7 minutes of sending them

Instead of seeing the message, recipients see 'this message was deleted'

On Android 7.0, 100 characters of a message are stored in the notification log

This can be accessed through the Setting widget, or through third party apps

Published: 15:22 GMT, 16 November 2017 | Updated: 19:18 GMT, 16 November 2017

It was one of WhatsApp's most highly-anticipated features, but it seems that the 'Delete for Everyone' tool isn't quite as reliable as you might think.

A new report claims that WhatsApp messages that are deleted are actually still on the device, and can easily be accessed through Settings.

The workaround appears to be available for Android 7.0 users, although it is unclear if a similar hack is available on iOS.

Scroll down for video

It was one of WhatsApp's most highly-anticipated features, but it seems that the 'Delete for Everyone' tool isn't quite as reliable as you might think.

HOW TO ACCESS DELETED WHATSAPPS

Whenever a notification comes in to an Android devices, it is stored in the notification log – whether or not it is subsequently deleted by the sender.

While the bulk of the data in the log is technical information, the first 100 characters of the notification message is also recorded.

So while users may not be able to see the message within WhatsApp after it is deleted, they can still see it in the notification log – which can be accessed in two ways.

The trick currently only works on Android 7.0.

Firstly, users can create a home screen Settings widget:

1) Press and hold home screen

2) Press widgets icon

3) Scroll down to Settings

4) Drag and drop onto home screen

5) Click on widget

6) Scroll down and click on the notification log

8) Click on the message you want to see

Alternatively users can download a notification history app, which displays a list of all your recent notifications.

The first 100 characters of the message will appear in the line starting with 'android.text.'

Last month, WhatsApp introduced a 'delete for everyone' feature, allowing users to unsend an embarrassing message within seven minutes of sending it.

But Android Jefe, a Spanish Android blog, noticed a workaround that allows Android users to view unsent messages.

Santiago S, the author of the blog, wrote: 'We have discovered a way to recover or see messages deleted by the other person in a WhatsApp chat.

'What we found is that the messages are stored in the notification register of the Android system.

'So, it's just a matter of entering that record to see the messages that the other person deleted.'

Whenever a notification comes in to an Android devices, it is stored in the notification log – whether or not it is subsequently deleted by the sender.

While the bulk of the data in the log is technical information, the first 100 characters of the notification message are also recorded.

So while users may not be able to see the message within WhatsApp after it is deleted, they can still see it in the notification log – which can be accessed in two ways.

Firstly, users can create a home screen Settings widget, in which a 'Notification Registration' option will appear, according to Android Jefe.

Alternatively users can download a notification history app, which displays a list of all your recent notifications.

The first 100 characters of the message will appear in the line starting with 'android.text.'

Android Jefe highlights some important limitations to retrieving messages.

While users may not be able to see the message within WhatsApp after it is deleted, they can still see it in the notification log. The first 100 characters of the message will appear in the line starting with 'android.text'

HOW TO UNSEND A MESSAGE

To delete a message, open WhatsApp and go to the chat containing the message you want to delete.

Tap and hold the message, then choose Delete from the menu.

Tap 'Delete for everyone' and the message will disappear.

Messages you successfully delete for everyone will now be replaced with 'This message was deleted' in your recipients' chats.

Similarly, if you see 'This message was deleted' in a chat, it means that the sender deleted their message for everyone.

Users will only be able to view the first 100 characters of deleted messages, and the notification log will clear every few hours, or any time the device is restarted.

Android Jefe also claims that only messages that have already been seen or interacted with can be retrieved.

However, during MailOnline's testing, the recipient had to have read the message before it was deleted for it to appear in the Notification Log.

And the technique will only work on Android 7 - it is unclear if it will work on higher versions.

The discovery raises important security issues with WhatsApp.

One of the main reasons people use WhatsApp over text messaging is that it uses end-to-end encryption, that is seen as a secure option.

But while message transmission may be safe, the discovery suggests that notification storage may be an issue.

A spokesperson for WhatsApp told Tech Republic that the message deletion option doesn't delete notifications.

MailOnline has contacted WhatsApp for further comment.