I have an encrypted iTunes backup containing WhatsApp data and want to convert or open it in a readable format, similar to how iMazing lets you browse messages. I've found the WhatsApp SQLite database file, but standard SQLite tools don't seem to recognize it. Is there a reliable way to decrypt or convert the database so I can read the messages and attachments?
2 Answers
The database is likely protected with SQLCipher rather than being a normal SQLite file. You generally need to decrypt the iTunes backup first and obtain its backup key, using a tool such as an iTunes-backup decryption script. After that, open the WhatsApp database with SQLCipher and provide the correct key; it should then be queryable from Python or another SQLCipher-compatible client.
Encrypted iOS backups are difficult because the WhatsApp database is usually wrapped in an additional encryption layer. Simply renaming the file or converting it to a regular .db file won’t help. You need to decrypt the backup and use the appropriate SQLCipher settings before the message tables will be readable.
I was able to extract the WhatsApp database file, but regular SQLite tools can’t open it. I’ll look into the SQLCipher and backup-key steps.