Restoring from backup: Google Drive and iCloud
WhatsApp chat backups go to Google Drive on Android and to iCloud on iPhone. Under Settings, in Chats and Chat backup, you can see the date of the last backup. If the message was sent before that date and deleted after the backup, restoring is very likely to bring it back.
- Check the backup date: See whether the last backup was made before or after the message was deleted.
- Temporarily turn off auto backup: A new automatic backup can overwrite the older one.
- Protect your current chats: A restore does not include messages newer than the backup; export important chats first.
- Same number and account: Restoring requires the same phone number and the same Google or Apple account.
- Reinstall: When WhatsApp is uninstalled and reinstalled, you are offered the option to restore the backup after verification.
If you enabled the end-to-end encrypted backup, you need the password or key you set to restore it; without it, nobody can open the backup's contents.
Main service page for this topic: digital evidence examination
Local backups and computer backups
On Android devices, WhatsApp also keeps encrypted local backup files in the phone's storage, independently of Google Drive. These files may contain a copy from before the deletion, but because they are encrypted they can only be restored through the same account and device.
If you backed up your iPhone to a computer with Finder or iTunes, the WhatsApp database is inside that backup too. An older computer backup may hold the deleted chat as it was before deletion. In an expert examination these backups are analysed with open-source tools such as iLEAPP and ALEAPP on a working copy, without restoring anything to the phone.
For deleted files outside WhatsApp, such as photos and videos, see recover deleted data from a phone.
The other person's device and app database traces
If you deleted a message only for yourself, the same message is most likely still on the device at the other end of the chat. The other person can export the chat or share screenshots of their own free will. Their device is likewise examined only with its owner's explicit consent.
When there is no backup, WhatsApp's SQLite database on the device is examined. Fragments of deleted records can remain for a while in the database's WAL journal file and free pages. These traces disappear as the device is used, and finding them can never be guaranteed. Because of encryption on modern phones, this analysis is only possible on a device unlocked by its owner, using supported methods.
- Use WhatsApp as little as possible after the message is deleted.
- Do not uninstall the app, and preserve the current state before restoring any backup.
- Note the chat date, the contact and when the message was deleted.
The risks of apps that read "deleted for everyone" messages
Apps in the stores that promise to "show deleted WhatsApp messages" usually request notification access and save the text of incoming notifications to their own logs. This only works if the app was installed before the message arrived and the message text appeared in the notification; it does not bring back messages deleted in the past.
- Notification access exposes your personal messages from every app to a third party.
- Some contain adware, data harvesting or malware.
- Apps that ask for payment or a subscription and deliver nothing are common.
If you installed such an app and see unusual activity on your account, the WhatsApp account hacked and Android spyware detection pages can help.
Authorisation, evidence integrity and safety
Requests to access someone else's WhatsApp account, secretly read the messages of your partner, employee or an acquaintance, crack passwords or bypass a lock are refused. Examinations are carried out only with the device owner's explicit consent, under company policy and data protection rules (KVKK in Türkiye) for company devices, or by order of a competent authority.
If recovered messages will be used in a dispute, the SHA-256 hash of the backup files is recorded, work is done on a working copy and every step is logged. On request the findings are turned into an expert opinion report; the court decides its evidential weight. Data is kept confidential, handed over when the job is done and then deleted.
If you suspect you are being tracked and are in danger, removing the app straight away can alert the person monitoring you; first get support from a safe phone. In an emergency call your local emergency number (112 in Europe, 911 in the US), or contact a domestic abuse helpline in your country.
What I offer
Backup analysis
Google Drive, iCloud and computer backups
Phone left untouched
Backups examined on a working copy
Database traces
SQLite WAL and free-page analysis
SHA-256 hash
Chain of custody and step-by-step log
Honest limits
Case-specific assessment, not guarantees
Authorised only
Owner consent required, no covert access
Technologies I use
Example projects
A selection of live projects serving real users.
iPhone Security Scan — Spyware Detection
iOS app that scans for state-grade spyware, hidden tracking apps and jailbreak traces.
View
MobilEksper — Phone Inspection & Repair Shop Software
AI-assisted device inspection, IMEI and parts checks, repair service and inventory management.
ViewHow we work
Free intro call
We clarify needs, existing systems and goals together.
Quote & roadmap
Scope, technology, timeline and budget within 24 hours.
Staged development
Weekly demos and a live test environment.
Launch & support
Go-live, training and ongoing maintenance.
Free pre-analysisThe first meeting and roadmap are completely free, with no obligation.
Staged delivery and approvalYou review each module on a test environment before we move on.
Written scope and rightsScope, delivery and source code rights are defined in the contract.
Frequently asked questions
Can deleted WhatsApp messages be recovered?
If a Google Drive, iCloud, local or computer backup was made before the message was deleted, restoring it is very likely to bring the message back. Without a backup, traces may remain in the app database, but this is not certain and they fade as the device is used.
Can deleted WhatsApp messages be recovered without a backup?
In some cases, fragments of deleted records can be found in the WhatsApp database's WAL file or free pages. Encryption on modern phones limits this; your case is assessed realistically in the initial consultation.
Can I read a message the other person deleted for everyone?
The content of a message deleted for everyone is normally removed from the chat on your device. Notification-logging apps can only capture partial text if installed beforehand, carry serious privacy risks and do not bring back past messages.
Will I lose my current chats if I restore deleted messages?
A restore brings back the state at the time of the backup; messages newer than the backup are not in it. That is why exporting important chats and temporarily turning off auto backup before restoring is recommended.
Can you recover my partner's or employee's WhatsApp messages?
Requests for covert access to an account or device that belongs to someone else are refused. On company devices, examinations follow company policy, data protection rules and employee notification; otherwise they require the device owner's explicit consent or an order from a competent authority.
Can recovered WhatsApp messages be used as evidence?
The examination is documented with hash values and step logs and, if requested, turned into an expert opinion report. The court decides the evidential weight of the messages and the report; no guarantee is given on this.