WhatsApp guest calls are smart growth, but Meta owes us a privacy answer

What is the best way to get someone onto your platform? Maybe it's not getting them onto it at all. WhatsApp's new guest calling lets people without an account join a call from a browser, and that is a quietly clever piece of strategy. It's also a feature that raises questions Meta hasn't fully answered yet.

Meta announced the feature on October 14, and as Techlicious reports, says the calls are free, end-to-end encrypted and have no time limit. Only someone with an account can create the link, from the Calls tab. The guest opens it in a browser, types a name and waits in a virtual waiting room until the host lets them in.

Once inside, guests can share their screen, raise a hand and react. According to the same report, they can't send messages, see other participants' phone numbers or add people. Calls can be one-on-one or groups of up to 32 people, including the host.

It's growth disguised as generosity

We think the real story is not convenience but funnel design. Anyone who has tried to get a relative, a contractor or a teacher to install yet another app knows that friction kills the call. WhatsApp removes that friction, and the host, who already lives inside the app, gets the benefit. The guest gets a pleasant first taste of the product without signing anything.

That is generous, but it isn't charity. Every guest session is a demonstration of WhatsApp's calling quality to someone who may not have the app today. Whether Meta intends it as a recruiting tool is our interpretation, not something the documentation says, but it would be naive to think the company hadn't considered it. Meta also says a plugin will arrive later this year to add a call link to a Google Calendar or Outlook invite. That moves WhatsApp from personal chat toward the territory of work meetings.

The winners are clear: people who host calls with those who refuse to install things. The loser is the "just download it" excuse. Competing video call tools that already work from a browser may lose a differentiator.

The privacy question hides in the details

Here is where we'd slow down. Meta's headline promise is end-to-end encryption, and that matters. WhatsApp's own pages say that end-to-end encryption keeps calls between you and the person you're communicating with. But encryption protects the content of the call. It says little about everything around it.

A Cyberpress report from September, written while the feature was still in development, said WhatsApp Web reportedly generates a unique identifier for the guest's browser session and uses it to derive or establish encryption material. That's a neat design, since the guest has no persistent identity. It also leaves our questions unanswered: what does WhatsApp log about a guest, such as the name typed, the browser, the connection details? How long is that kept? Is it tied to the host's account? Nothing in the documentation we've seen says. These are not accusations. They are gaps, and a company that sells privacy as a feature should fill them without being asked.

Link abuse is the other half. The same report notes that WhatsApp can't verify who opens a guest URL, and that a link might reach unintended people through forwarding or social engineering. The mitigation is a human one: guests always need host approval, per WhatsApp's help page, and hosts can remove people. Reportedly they can also stop removed participants from rejoining, though that detail comes from the pre-launch report.

We think the waiting room is a good answer, but it relies on the host paying attention. In a busy group of 32, will someone really check that "Mike" is the Mike they expected? A name typed into a box proves nothing. Scammers don't need to break encryption when they can simply be waved in by a distracted host. Meta should say plainly how it handles reports of abusive links and guests, and whether hosts can see anything beyond a typed name.

Use it, but treat the link like a front door

Send the link only to the people you're inviting, as Techlicious advises, and check the name in the waiting room before admitting anyone. Don't reuse links for unrelated calls. For sensitive conversations, ask for a quick confirmation through another channel that the guest is who they say they are.

Our verdict: guest calling is a genuinely useful feature and a shrewd expansion move. But "no account needed" shouldn't mean "no questions asked" about data. Until Meta spells out what guests give up and how it polices links, the feature deserves enthusiasm with a raised eyebrow.