Inside the IPA

WhatsApp

WhatsApp Inc.net.whatsapp.WhatsApp

← App page
Latest analyzed IPAv26.43.75
Build 1104102848Record 8942209532026-11-02
Uncompressed files382.3 MBSum of recorded file sizes
Recorded IPA size170.4 MBSelected build · archive size
Files inventoried1,6518 file categories
Embedded libraries3Frameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed

All 1,651 file sizes included. Select a category to explore its files. Categories are inferred from paths; archive and installed sizes differ.

Bundle structure

Space by folder

Top level
App root191.0 MB
162 files50.0% of measured size
Frameworks/114.9 MB
341 files30.1% of measured size
Watch/18.4 MB
93 files4.8% of measured size
PlugIns/6.5 MB
501 files1.7% of measured size
Other folders51.6 MB
554 files13.5% of measured size

Folders inside the app bundle, plus archive level files. “App root” groups files directly inside the .app.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

File / pathCategorySizeShare
WhatsAppPayload/WhatsApp.app/WhatsApp
WhatsApp
App executable169.7 MB44.4%
SharedModulesPayload/WhatsApp.app/Frameworks/SharedModules.framework/SharedModules
Frameworks/SharedModules.framework/SharedModules
Frameworks & libraries77.6 MB20.3%
Assets.carPayload/WhatsApp.app/Assets.car
Assets.car
Images & resources18.2 MB4.8%
PsiphonTunnelPayload/WhatsApp.app/Frameworks/PsiphonTunnel.framework/PsiphonTunnel
Frameworks/PsiphonTunnel.framework/PsiphonTunnel
Frameworks & libraries12.9 MB3.4%
WatchServiceExtensionPayload/WhatsApp.app/Watch/WhatsAppWatchApp.app/PlugIns/WatchServiceExtension.appex/WatchServiceExtension
Watch/WhatsAppWatchApp.app/PlugIns/WatchServiceExtension.appex/WatchServiceExtension
Other files8.4 MB2.2%
WhatsAppWatchAppPayload/WhatsApp.app/Watch/WhatsAppWatchApp.app/WhatsAppWatchApp
Watch/WhatsAppWatchApp.app/WhatsAppWatchApp
Other files8.3 MB2.2%
Assets.carPayload/WhatsApp.app/Frameworks/SharedModules.framework/Assets.car
Frameworks/SharedModules.framework/Assets.car
Frameworks & libraries7.5 MB1.9%
ServiceExtensionPayload/WhatsApp.app/PlugIns/ServiceExtension.appex/ServiceExtension
PlugIns/ServiceExtension.appex/ServiceExtension
Other files2.2 MB0.6%
Localizable.localite.valuesPayload/WhatsApp.app/bn.lproj/Localizable.localite.values
bn.lproj/Localizable.localite.values
Other files2.2 MB0.6%
Localizable.localite.valuesPayload/WhatsApp.app/mr.lproj/Localizable.localite.values
mr.lproj/Localizable.localite.values
Other files2.2 MB0.6%
Localizable.localite.valuesPayload/WhatsApp.app/hi.lproj/Localizable.localite.values
hi.lproj/Localizable.localite.values
Other files2.2 MB0.6%
Localizable.localite.valuesPayload/WhatsApp.app/gu.lproj/Localizable.localite.values
gu.lproj/Localizable.localite.values
Other files2.0 MB0.5%
Localizable.localite.valuesPayload/WhatsApp.app/th.lproj/Localizable.localite.values
th.lproj/Localizable.localite.values
Other files1.8 MB0.5%
Localizable.localite.valuesPayload/WhatsApp.app/el.lproj/Localizable.localite.values
el.lproj/Localizable.localite.values
Other files1.6 MB0.4%
Localizable.localite.valuesPayload/WhatsApp.app/ru.lproj/Localizable.localite.values
ru.lproj/Localizable.localite.values
Other files1.5 MB0.4%
Localizable.localite.valuesPayload/WhatsApp.app/ur.lproj/Localizable.localite.values
ur.lproj/Localizable.localite.values
Other files1.5 MB0.4%
Localizable.localite.valuesPayload/WhatsApp.app/uk.lproj/Localizable.localite.values
uk.lproj/Localizable.localite.values
Other files1.5 MB0.4%
Localizable.localite.valuesPayload/WhatsApp.app/ar.lproj/Localizable.localite.values
ar.lproj/Localizable.localite.values
Other files1.3 MB0.3%
Localizable.localite.valuesPayload/WhatsApp.app/fa.lproj/Localizable.localite.values
fa.lproj/Localizable.localite.values
Other files1.3 MB0.3%
CommonLibraryPayload/WhatsApp.app/Frameworks/CommonLibrary.framework/CommonLibrary
Frameworks/CommonLibrary.framework/CommonLibrary
Frameworks & libraries1.3 MB0.3%

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

14 binaries · 16 slices
arm64 / arm64_32No encrypted slicesParsed in 13.265s · 2026-11-04

Some structures are malformed or not fully decoded. Open a slice to inspect its specific warnings; missing records are not treated as absent.

Select a Mach O file

Choose a binary and architecture. Detailed tables load on demand, not with the initial page.

Integer fields use hexadecimal, without locale separators or loss of 64 bit precision. JSON downloads preserve the original numeric data. Tables retain up to 10000 records each, with totals and truncation markers. Signing data is descriptive; trust and code page hashes are not verified. Not disassembly.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

3 embedded libraries

No engine identification recorded for this build. That does not mean the app has no game engine or runtime.

Framework sizes include their recorded resources, not just the executable. Library presence does not prove active use. A “+” indicates some constituent sizes are missing.

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded
Tracking declared
No
Non exempt encryption
Not declared
Permission descriptions
NSBluetoothAlwaysUsageDescription
This lets you connect to supported Bluetooth devices
NSLocationAlwaysUsageDescription
‎If you always allow access to your location, you can choose to share your live location, and it will update even when you're not using the app. This also lets you send your current location or a nearby place.
NSSiriUsageDescription
‎This lets you use Siri to quickly send and read messages and make calls.
NSCameraUsageDescription
‎This lets you make video calls, take photos, and record videos.
NSRemindersUsageDescription
‎This lets you set reminders to call your friends back.
NSBluetoothPeripheralUsageDescription
This lets you connect to supported Bluetooth devices
NSPhotoLibraryAddUsageDescription
‎This lets you save photos and videos to your library.
NSLocalNetworkUsageDescription
‎This will let you use WhatsApp to place and receive calls through devices that are on the same Wi-Fi or local access networks.
NSSpeechRecognitionUsageDescription
WhatsApp does on-device recognition for Voice Messages. In this mode, no voice data is sent to Apple despite this alert, which is unexpected. Select "Don't Allow" and report to WhatsApp.
NSLocationUsageDescription
‎This lets you send your current location or nearby places in chats.
NSCalendarsUsageDescription
‎This lets you create events on your calendar.
NSMicrophoneUsageDescription
‎This lets you make calls, send voice messages, and record videos with sound.
NSLocationWhenInUseUsageDescription
‎This lets you send your current location or nearby places in chats.
NSFaceIDUsageDescription
‎Use Face ID to authenticate on WhatsApp.
NSLocationAlwaysAndWhenInUseUsageDescription
‎If you always allow access to your location, you can choose to share your live location, and it will update even when you're not using the app. If you only allow access while using the app, you can only send your current location or a nearby place.
NSContactsUsageDescription
‎Upload your contacts to WhatsApp's servers to help you quickly get in touch with your friends and help us provide a better experience.
NSPhotoLibraryUsageDescription
‎This lets you send photos and videos from your library and save the ones you capture.
Tracking domains 0
[]
Accessed API types 6
[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryActiveKeyboards",
    "NSPrivacyAccessedAPITypeReasons": [
      "54BD.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1",
      "1C8F.1",
      "AC6B.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1",
      "3B52.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "E174.1",
      "85F4.1",
      "7D9E.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1"
    ]
  }
]
Collected data types 20
[
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeDeveloperAdvertising",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeOther"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeAdvertisingData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeDeveloperAdvertising",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePurchaseHistory",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePhoneNumber",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeOther"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherUserContent",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeOther",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeOther",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePaymentInfo",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeEmailAddress",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeContacts",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCustomerSupport",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeSearchHistory",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePaymentInfo",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePreciseLocation",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  }
]
Additional Info.plist declarations
App transport security
{
  "NSAllowsArbitraryLoads": true
}
Skadnetwork items
[
  {
    "SKAdNetworkIdentifier": "v9wttpbfk9.skadnetwork"
  }
]
Url schemes
[
  {
    "CFBundleTypeRole": "Editor",
    "CFBundleURLName": "net.whatsapp.WhatsApp",
    "CFBundleURLSchemes": [
      "whatsapp-consumer",
      "upi",
      "whatsapp",
      "fb306069495113",
      "im"
    ]
  }
]
Required capabilities
{
  "arm64": true
}

Static observations

1 recorded
ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record
Method
Stored static package extraction and inventory; not a live security test.
Coverage
Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times
2026-11-04 10:17:08, 2026-11-04T10:17:08.626152+00:00
Known version identifiers
589 (231 with metadata)

Browse version history on the app page →