# Using Device Linking to Eavesdrop on WhatsApp and Signal

DevFeed: [Using Device Linking to Eavesdrop on WhatsApp and Signal](<https://devfeed.tech/articles/using-device-linking-to-eavesdrop-on-whatsapp-and-signal-61777.md>)

Original publisher: [Read original article](<https://www.schneier.com/blog/archives/2026/09/using-device-linking-to-eavesdrop-on-whatsapp-and-signal.html>)

Author: Bruce Schneier

Published: 2026-09-29T11:02:19Z

Content type: article

Language: en

Sources: [Schneier on Security](<https://devfeed.tech/sources/schneier-on-security.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>)

Tags: [attack](<https://devfeed.tech/tags/attack.md>), [eavesdropping](<https://devfeed.tech/tags/eavesdropping.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [law-enforcement](<https://devfeed.tech/tags/law-enforcement.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [police](<https://devfeed.tech/tags/police.md>), [signal](<https://devfeed.tech/tags/signal.md>), [sms](<https://devfeed.tech/tags/sms.md>), [surveillance](<https://devfeed.tech/tags/surveillance.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>), [whatsapp](<https://devfeed.tech/tags/whatsapp.md>)

## AI overview

Modern messaging apps let users link phone accounts to desktop devices, and law enforcement can exploit this feature to receive messages without breaking encryption. The document describes access through physical phone access, intercepted verification codes, or intercepted SMS messages, and argues that users need a way to see devices connected to their accounts.

## Source excerpt

Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advantage of this capability: Apps such as WhatsApp Web and Signal Desktop allow people to use their accounts on other devices, such as laptops or desktop computers. Germany's Customs Office has been using these features to connect a police-controlled computer to a suspect's account. Once connected, messages can be delivered to that computer without the police having to crack the encryption protecting them. Netzpoltik details that police are able to gain access in this way either through physical access to someone's phone or by intercepting verification codes via a state-sanctioned phishing attack or intercepting SMS messages via telephone surveillance...