How Meta Is Strengthening End-to-End Encrypted Backups

Meta strengthens end-to-end encrypted backups through improvements to its HSM-based Backup Key Vault system.

• •Recovery codes are stored in tamper-resistant hardware security modules (HSMs) that Meta cannot access
• •Over-the-air fleet key distribution allows new HSM fleets without requiring app updates
• •Fleet keys are validated through bundles signed by Cloudflare and counter-signed by Meta
• •Audit logs provide transparency and evidence of secure fleet deployments

This summary was automatically generated by AI based on the original article and may not be fully accurate.