WAHA 2025.6 - Security in WAHA Core, Message Edit Event, and Media Conversion

🆕 What’s New?

🔒 Security in WAHA Core

WAHA Core now comes with robust, built-in security features!
You can protect your API with an API Key - and now, for even greater security, you can store only the hash of your key using WAHA_API_KEY=sha512:{HASH}.
This means your API key is never stored in plain text, reducing the risk if your environment variables are exposed.

🔒 Security →

✏️ Message Edit Event

You can now track when a message is edited!
The new message.edited event is available in WEBJS, GOWS, and NOWEB engines.

• NOWEB note: Edited protocol messages are now only available via message.edited (not in message or message.any).

🖼️ Media Conversion for WAHA Plus (Voice/Video)

Sending voice or video files just got easier!

WAHA Plus now supports built-in media conversion - no more manual ffmpeg setup required.

• Voice: Send any audio file, set "convert": true, and WAHA will convert it to WhatsApp’s required OPUS/OGG format.
• Video: Send any video file, set "convert": true, and WAHA will convert it to WhatsApp’s required MP4 format.
• APIs:
  • POST /api/{session}/media/convert/voice
  • POST /api/{session}/media/convert/video

🆕 Changelog

Check out the full list of updates in the 🆕 WAHA 2025.6 Changelog and stay tuned for more!