# WhatsApp Encrypted Messages API

**Canonical:** https://apis.io/apis/whatsapp/whatsapp-encrypted-messages-api/  
**Provider:** WhatsApp — https://apis.io/providers/whatsapp/  
**Base URL:** https://graph.facebook.com  
**Documentation:** https://developers.facebook.com/documentation/business-messaging/whatsapp/overview

WhatsApp Encrypted Messages API is one of 74 APIs that [WhatsApp](https://apis.io/providers/whatsapp/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 6 JSON Schema definitions. Tagged areas include Encrypted Messages. The published artifact set on APIs.io includes an OpenAPI specification, a GitHub repository, API documentation, and 6 JSON Schemas.

Payload encryption provides an additional layer of security on top of existing standard TLS/SSL that secures communication between Cloud API and businesses. When enabled, all message requests and message echoes webhooks will undergo encryption using JWE (JSON Web Encryption) format. ## Key Features - **Additional Security Layer**: Adds payload-level encryption on top of standard TLS/SSL - **JWE Format**: Uses JSON Web Encryption standard for encrypting message payloads - **Selective Encryption**: Only successful responses are encrypted; errors remain unencrypted - **Standard Compatibility**: Encrypted payloads contain the same structure as `/messages` endpoint - **Phone-Number Level**: Encryption is configured per phone number within a WABA ## Setup Requirements 1. **Enable Payload Encryption**: Use `POST /<Phone-Number-ID>/settings` to enable encryption 2. **RSA Key Pair**: Generate and provide a 2048-bit RSA public key (base64 encoded) 3. **Algorithm Support**: Multiple algorithms supported for content and key encryption 4. **Access Token**: User Access Token with `whatsapp_business_messaging` permission ## Supported Algorithms - **Content Encryption**: A128GCM, A256GCM, A128CBC-HS256, A192CBC-HS384, A256CBC-HS512 - **Key Encryption**: RSA1_5, RSA-OAEP - **WhatsApp Standard**: A256GCM + RSA-OAEP for responses and webhooks

## Operations (1)

| Method | Path | Summary |
|---|---|---|
| POST | `/{Version}/{Phone-Number-ID}/messages_encrypted` | Send Encrypted Message |

## Machine-readable artifacts (10)

- **OpenAPI** — https://artifacts.apis.io/whatsapp/openapi/whatsapp-encrypted-messages-api-openapi.yml
- **GitHubRepository** — https://github.com/meta/openapi
- **Documentation** — https://developers.facebook.com/documentation/business-messaging/whatsapp/overview
- **PostmanCollection** — https://raw.githubusercontent.com/WhatsApp/WhatsApp-Flows-Tools/main/postman/v1/whatsapp-cloud-api.postman_collection.json
- **JSONSchema** — https://artifacts.apis.io/whatsapp/json-schema/whatsapp-call-request-payload-schema.json
- **JSONSchema** — https://artifacts.apis.io/whatsapp/json-schema/whatsapp-whats-app-business-account-schema.json
- **JSONSchema** — https://artifacts.apis.io/whatsapp/json-schema/whatsapp-whats-app-business-profile-node-schema.json
- **JSONSchema** — https://artifacts.apis.io/whatsapp/json-schema/whatsapp-phone-number-info-schema.json
- **JSONSchema** — https://artifacts.apis.io/whatsapp/json-schema/whatsapp-call-permission-check-response-payload-schema.json
- **JSONSchema** — https://artifacts.apis.io/whatsapp/json-schema/whatsapp-whats-app-account-number-schema.json

## Other WhatsApp APIs (12)

- [WhatsApp Flows API](https://apis.io/apis/whatsapp/flows-api/)
- [WhatsApp On-Premises API](https://apis.io/apis/whatsapp/on-premises-api/)
- [WhatsApp Analytics API](https://apis.io/apis/whatsapp/whatsapp-analytics-api/)
- [WhatsApp Assets API](https://apis.io/apis/whatsapp/whatsapp-assets-api/)
- [WhatsApp Assigned Users API](https://apis.io/apis/whatsapp/whatsapp-assigned-users-api/)
- [WhatsApp Business Accounts API](https://apis.io/apis/whatsapp/whatsapp-business-accounts-api/)
- [WhatsApp Business Profile API](https://apis.io/apis/whatsapp/whatsapp-business-profile-api/)
- [WhatsApp Lifecycle API](https://apis.io/apis/whatsapp/whatsapp-lifecycle-api/)
- [WhatsApp Media API](https://apis.io/apis/whatsapp/whatsapp-media-api/)
- [WhatsApp Message Templates API](https://apis.io/apis/whatsapp/whatsapp-message-templates-api/)
- [WhatsApp Messages API](https://apis.io/apis/whatsapp/whatsapp-messages-api/)
- [WhatsApp Phone Numbers API](https://apis.io/apis/whatsapp/whatsapp-phone-numbers-api/)

## Tags

Encrypted Messages

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/whatsapp/whatsapp-encrypted-messages-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/whatsapp/.