Tech

WhatsApp Is Adding Up to 5 AI Agents to Chats: The Encryption Trade-Off for Malaysia

WhatsApp is testing up to five third-party AI agents in chats, and those conversations are not end-to-end encrypted. What it means for Malaysia's users.


News Editor · 22 Sep 2026, 11:21am
WhatsApp Is Adding Up to 5 AI Agents to Chats: The Encryption Trade-Off for Malaysia

WhatsApp is among the most used apps in Malaysia, sitting at or near the top of the platforms people here open every month in DataReportal's Digital 2026 Malaysia report. So a change to how it handles conversations is not a small thing here.

Meta is testing a way to connect third-party agents directly inside WhatsApp. As reported by WABetaInfo, which examined an early Android build of the app, and picked up by 9to5Mac, you can add up to five outside agents to your account, usually AI assistants though an agent need not use AI, name each one, give it a profile photo, and message it the way you would message a contact. WhatsApp generates an API key that you paste into whichever platform hosts the agent.

It is a gradual, limited rollout, reaching only a small number of users so far, and most people do not yet see the Agents section in their settings. From what those reports saw in the beta, an agent can only read what you send it in its own chat, and cannot reach your other conversations, your contacts or your media, and it works in one-to-one chats, not groups or communities. Those details come from early builds and could still change.

Used well, the feature is genuinely handy. You could keep a research assistant, a translation bot or a customer-service agent one tap away inside the app you already have open all day, without a separate app on your phone, though you still set the agent up through an outside service.

A person typing a message on a smartphone keyboard

There is one line worth reading twice. According to WABetaInfo, which examined the beta, chats with these agents are not treated as end-to-end encrypted. That does not mean the public or your other WhatsApp contacts can read them, and WABetaInfo reports the messages are still delivered securely. What it does mean, in the explanation shown in the app, is that the agent's developer can access the messages as part of running the service, because the chat is handled by a Meta service on the developer's behalf rather than sealed so that only you and one other person can read it. These agent chats are a separate kind of conversation, not your ordinary ones being unlocked, but in plain terms, treat one like messaging a company's support line rather than a private chat.

A smartphone screen showing a white padlock icon, representing end-to-end encryption

That is worth remembering precisely because WhatsApp is so central to daily life here. The sort of thing that can end up in a chat thread, say an identity card number sent to a landlord, bank details to a friend, or a photograph of a document, is exactly what does not belong in a conversation with an agent whose operator can read it by design. The discipline there has to be yours.

It also lands amid a run of privacy questions we have been following in Malaysia, from a new national immigration system to smart TVs that log what you watch and the security overhaul behind the new MyKad. Where those raised questions about who holds your data, this one is about who can read your chat, and the answer is worth knowing before you paste anything sensitive in.

For now the feature is reaching only that limited test group, so most Malaysians will not see it yet. When it does arrive, the practical rule is simple. Use an agent chat for questions and tasks that carry nothing you would mind a company seeing, and keep anything with a number, a name or a document in your ordinary end-to-end encrypted chats, and even there, mind who is on the other end.

WhatsApp has not said when the feature will reach everyone, let alone when it will land in Malaysia. Until it does, the setting that matters is the one that adds an agent in the first place. On the builds seen so far, an agent connects only after you generate a key and paste it in, so the first move stays yours to make.

Image(s) courtesy of Anton Be, freestocks and Franck on Unsplash.

More from ProductNation