A Verifiable Record for Messenger Keys

Meta has turned on key transparency for end-to-end encrypted one-on-one chats in Messenger. The feature gives users a way to confirm that the public keys used to encrypt their conversations genuinely belong to their intended contacts, and have not been swapped by a compromised server.

Messenger already encrypts direct messages and calls so content is protected from device to device. Key transparency adds a verifiable and auditable record of public keys, so users—and third parties—can trust the key distribution process without manually comparing keys with contacts.

Why Manual Checks Fall Short

Users have long been able to manually inspect keys in Messenger, but that becomes impractical with multiple devices. Each device has its own key, and keys change whenever a device is added or re-registered, meaning a manual check would need to be redone each time. The new system automates verification, though manual checks remain available for anyone who prefers them.

The technical backbone is the same Auditable Key Directory (AKD) library that Meta uses for WhatsApp's implementation. On top of that, Cloudflare's key transparency auditor, already covering the WhatsApp directory, now also maintains a live log of the Messenger directory as an independent layer of verification.

Scaling Under a Heavy Key Load

The volume of key updates in Messenger presented a distinct engineering hurdle. Because Messenger indexes a key for every device a user has ever logged into, a single account can have multiple frequently changing keys. That translates to a high rate of updates sequenced into the transparency directory: roughly one epoch every two minutes, with hundreds of thousands of new keys added per epoch. The database already holds billions of key entries.

To keep lookups fast and verification real-time, Meta made two specific upgrades:

  • Smaller proofs: The AKD library's key lookup and verification operations were reworked to keep proof sizes compact even as the number of versions for a single key grows. Previously, proofs scaled linearly with the height of the transparency tree, which was unwieldy given the number of nodes involved.
  • Resilient infrastructure: Systems were updated to better handle temporary outages and to recover more cleanly from long delays in key sequencing, using lessons from two years of running WhatsApp's key transparency log.

With the feature live, Messenger users can automatically verify the authenticity of contacts' encryption keys in one-on-one chats without any extra manual steps.