What is the CRYPT file format?
Files with a .crypt extension are encrypted backup files created by WhatsApp (owned by Meta), containing archives of message exchanges, voice messages, shared documents, and other chat data. The underlying backup is a SQLite database that WhatsApp encrypts with AES before writing to storage, so the file's contents cannot be read directly. Over the years WhatsApp has issued successive backup formats distinguished by a versioned extension - .crypt7, .crypt8, .crypt12, .crypt14, and .crypt15 - with each generation using a stronger encryption configuration. The current standard, .crypt15, introduced end-to-end encrypted cloud backups in 2021. Files are typically named msgstore.db.crypt15 (messages) or wa.db.crypt15 (contacts).
How to retrieve data from a .crypt file
There are two methods for decrypting a .crypt file:
- WhatsApp can restore the backup automatically if you are logged into the same Google account (Android) or iCloud account (iOS) that was active when the backup was created.
- The alternative method involves the AES key stored in a separate key file generated on the device at backup time. Third-party utilities can use that key file to decrypt the archive and expose the underlying SQLite database for direct inspection.
.crypt files and ransomware
In 2016, a ransomware trojan known as CryptXXX was reported to encrypt files on infected Windows computers and append a .crypt extension to them. Unlike genuine WhatsApp backups, these files are not restorable through WhatsApp. Kaspersky's RannohDecryptor tool was one of the utilities created to recover data encrypted by that malware family.
Security & safety
RISK: MEDIUMThe .crypt file is encrypted and safe to store/move, but the topic carries real risks. (1) Privacy: a decrypted backup exposes your entire chat history, so guard the backup AND any extracted key. (2) Scams: most 'WhatsApp crypt reader/ decryptor' websites and paid apps are fake or harvest your data - they cannot bypass the encryption without the key. (3) Account safety: never share your 64-digit crypt15 key or backup password; anyone with them can read your chats. (4) Forensic/decryption tools require root, which itself weakens device security. The safe path for almost everyone is WhatsApp's own restore on the same number.
Format details
in a nutshellFULL NAMEWhatsApp Encrypted Message Database Backup
DEVELOPERWhatsApp Inc. (Meta)since 2012 (original .crypt); evolved through crypt5..crypt15 (E2E backups, 2021)
CATEGORYEncoded Files
MIME TYPEapplication/octet-stream
TYPEAES-encrypted SQLite message database backup (binary)
Programs that open CRYPT files
Android1 app
WhatsApp for Android
Free Reinstall WhatsApp, verify the SAME phone number, and tap Restore when prompted - it reads the local/Drive .crypt backup automatically.
iOS1 app
WhatsApp for iPhone
Free On iPhone WhatsApp backs up to iCloud (not .crypt files); reinstall, verify the same number, and Restore from iCloud. Technical details
deep spec| Encryption algorithm | AES-256 (crypt12 and later); AES-192 used in crypt8 and older variants |
| Underlying data structure | SQLite 3 database (msgstore.db), encrypted in full and stored with a .crypt* extension |
| Format versioning | Successive numbered variants: .crypt5, .crypt7, .crypt8, .crypt12, .crypt14, .crypt15 - each generation uses a stronger cipher configuration |
| Filename convention | msgstore.db.crypt15 (chat messages), wa.db.crypt15 (contacts); base name is fixed by the app |
| Header / magic bytes | No stable file-wide signature; crypt12 and later prepend a small unencrypted protobuf metadata header before the AES ciphertext |
| Decryption key storage | Android: separate key file at /data/data/com.whatsapp/files/key, requiring root access to extract; crypt15 uses an account-linked end-to-end key |
| End-to-end encrypted backups | Introduced with .crypt15 in 2021; protected by a 64-digit password or a device-stored key, ensuring the backup is unreadable even to Google or Apple |
| Cloud storage target | Google Drive (Android) or iCloud (iOS); backup files are not listed as ordinary cloud files and require WhatsApp to restore |
| Backup scope | Chat message history, group metadata, call logs, and media file references; actual media (photos, audio, video) are stored separately in the WhatsApp/Media folder |
| MIME type | application/octet-stream - no format-specific MIME type is registered for .crypt files |
| Platform | Primary format for Android WhatsApp; iOS uses iCloud backup with a different internal layout and key management model |
| Key derivation (crypt12-crypt14) | PBKDF2-HMAC-SHA1 combining a device-unique key with the Google account credentials |
| Ransomware overlap | .crypt extension is also appended by the CryptXXX ransomware family (2016) to encrypted Windows files - entirely unrelated to WhatsApp backups |
| Released | 2012 (original .crypt); evolved through crypt5..crypt15 (E2E backups, 2021) |
| Specification | faq.whatsapp.com |
CRYPT conversions
Possible
.CRYPT .TXTGUIDE
Yes, but only if you have the encryption key - or you skip the .crypt file entirely and use WhatsApp's…
How to convert
.CRYPT .DBGUIDE
Yes, conversion is possible - but only if you have the matching decryption key; the fastest method is…
How to convert
.CRYPT .HTMLGUIDE
Yes, possible -- but only if you have the matching decryption key. The tool is whatsapp-chat-exporter, which…
How to convert
Community Q&A
asked by users
A
M
Frequently asked questions
How do I restore a WhatsApp .crypt backup?
Don't open the file - reinstall WhatsApp on a phone using the SAME phone number, and when prompted tap Restore. WhatsApp finds the local (WhatsApp/Databases) or Google Drive / iCloud backup and restores your chats automatically.
Can I open a .crypt file to read my chats directly?
Not without the key. The backup is AES-encrypted; you need the 'key' file from the phone (usually root access), and for crypt15 your password or 64-digit key. With the key, tools like wa-crypt-tools decrypt it to a SQLite database. Without it, the chats can't be read.
Can I restore a WhatsApp backup to a different phone number?
No. WhatsApp ties the backup to the phone number that made it. You can move to a new phone, but it must use the same number to restore that backup.
What do crypt12, crypt14 and crypt15 mean?
They are successive versions of WhatsApp's backup encryption. crypt15 is used when you turn on end-to-end encrypted backups and adds a password or 64-digit key. The right WhatsApp app version restores each; you don't convert between them.
Are online 'crypt to txt' or 'crypt decryptor' tools real?
Almost always no. Decryption is impossible without the matching key, so sites promising to read your .crypt by upload are scams or data-harvesters. To get text, use WhatsApp's built-in Export chat instead.
I lost my phone - can I still recover chats from the .crypt?
Only if you also have the key (and, for crypt15, the password/64-digit key). The honest answer is that without the key, a .crypt backup from a lost phone usually cannot be decrypted. Your best chance is restoring from your Google Drive/iCloud backup on a new phone with the same number.
References
1WhatsApp Help - Restore your chat history (Android)faq.whatsapp.com
2WhatsApp Help - About end-to-end encrypted backupfaq.whatsapp.com
