Passkey Link Helper Privacy Policy

WSAPI Passkey Link Helper (the "extension") completes one step of linking a WhatsApp account to a WSAPI instance. Some WhatsApp accounts require the owner's passkey before a new device can be linked, and WhatsApp only accepts that passkey on web.whatsapp.com. When the WSAPI dashboard asks for it, the extension opens web.whatsapp.com in a new tab, shows a "Continue with passkey" button and, when you click it, asks your browser to use your passkey. It hands the result back to the dashboard and closes the tab.

• The passkey request (a one-time challenge issued by WhatsApp), which it receives from the WSAPI dashboard page.
• The passkey response (a WebAuthn assertion: a signature over that challenge, produced by your device after you approve it). It is returned to the dashboard page, which sends it to WSAPI to finish linking your account. It is single-use and cannot be used again.
• Technical diagnostics: timings of each step, error messages, and whether your browser supports passkeys or Bluetooth. They are returned to the dashboard page to help troubleshoot a failed attempt. They never include your passkey, the signature, or anything from your WhatsApp account.

Your passkey itself never leaves your device: the browser and your authenticator (phone, computer or security key) produce the signature. The extension never sees the private key.

• It does not read, store or send your WhatsApp messages, contacts, chats or WhatsApp Web session.
• It does not store anything on your device and has no storage permission.
• It does not run on any site other than the WSAPI dashboard and web.whatsapp.com.
• It does not include analytics, ads or tracking, and does not load remote code.
• It does not sell or share data with third parties.

• Access to wsapi.chat: to receive the passkey request from the dashboard and return the result.
• Access to web.whatsapp.com and "scripting": to open that page and run the passkey request there, the only place WhatsApp accepts it.

The extension is made by WSAPI. It is not affiliated with, endorsed by or sponsored by WhatsApp or Meta. WhatsApp is a trademark of its respective owner.

Questions about this policy: privacy@wsapi.chat. How WSAPI handles the rest of your data is described in our Privacy Policy.