Act this weekWhat happenedA bug in WhatsApp on iPhone let people view 'View Once' photos and videos again after they were supposed to disappear.
Who is affectediPhone users of WhatsApp, which is owned by Meta, who send or receive View Once photos and videos.
What to do- 1Open the App Store on your iPhone and update WhatsApp to version 25.2.3 or newer.
- 2Turn on automatic app updates so future fixes arrive quickly.
- 3Avoid sending highly sensitive photos or videos, even with View Once turned on.
- 4Remember that the recipient can still screenshot or photograph the screen.
WhatsApp's View Once feature promises that a photo or video disappears after the person you sent it to has looked at it. On iPhone, that promise did not hold. A bug let the recipient view the content as many times as they wanted. WhatsApp has since fixed it, but only if the app is up to date.
What happened
View Once is meant for moments when you want to share something without it sticking around. Cybersecurity researcher Ramshath described the bug in a blog post. It was extremely easy to use and needed no technical knowledge.
If someone had sent you a View Once image or video, you could go to Settings, then Storage and Data, then Manage Storage. From there you found the sender's chat and sorted the storage by Newest. The View Once content was still sitting there, ready to open.
Who it affects
The bug only hit iPhone users. That is still a very large group, which makes this a significant privacy slip for WhatsApp and its parent company, Meta. The people most exposed are those who sent private photos or videos using View Once, trusting they would vanish.
What Meta did
Ramshath says he reported the problem through Meta's bug bounty program, which pays researchers who find security flaws. Meta replied that it already knew about the issue and was working on a fix. The fix came fairly quickly, in WhatsApp version 25.2.3 on iOS.
Not the first time
This is not the first View Once problem. In September 2024, security researchers found that the supposedly gone content could still be reached by entering the exact web address of the media file, because it was stored insecurely on WhatsApp's servers. Another similar problem followed. WhatsApp has fixed both.
What to do
The alert box above lists the steps. The short version is to update WhatsApp on your iPhone and treat View Once as a convenience, not a guarantee.
What to keep in mind
Two bugs of this kind in two years suggest the feature can fail in ways users cannot see. Even when it works, the person who receives a photo can still capture it by other means. If an image would cause real harm in the wrong hands, the safest choice is not to send it at all.
The takeawayUpdate WhatsApp on your iPhone to version 25.2.3 or newer, and do not rely on View Once to protect truly private photos.