Secure WhatsApp Flows E2EE Encryption Workflow

This n8n workflow provides a complete solution for secure, encrypted interactions within WhatsApp Flows. It receives encrypted payloads from WhatsApp—including AES-encrypted data, RSA-encrypted AES keys, and initialization vectors—via a webhook endpoint. The workflow decrypts the AES key using your RSA private key, then decrypts the payload to process JSON data routed by screen parameters. Responses are generated, re-encrypted with the same AES key and inverted IV, and returned as base64-encoded data, fully compliant with WhatsApp Business Encryption specs.

Key benefits include unbreakable end-to-end security for sensitive information like booking details or logistics updates, preventing data interception in transit. It saves development time by handling complex crypto pipelines (RSA/AES-GCM) and GraphQL integration out-of-the-box, reducing custom coding risks. Ideal for businesses needing compliant, scalable WhatsApp apps without exposing private keys client-side.

Use cases span travel and logistics: secure ride bookings with payment flows, real-time driver tracking with location shares, or itinerary management with PII protection. Deploy in minutes for production-grade encrypted chatbots, enhancing trust and compliance (e.g., GDPR) while boosting user engagement through native WhatsApp interactivity.