---
title: "Get Business Encryption Public Key"
method: GET
path: "/{Version}/{Phone-Number-ID}/whatsapp_business_encryption"
tags: ["Flows", "Setup Endpoint Encryption", "Business Encryption"]
---

# Get Business Encryption Public Key

`GET /{Version}/{Phone-Number-ID}/whatsapp_business_encryption`

## Request

- Base URL: `https://graph.facebook.com`
- URL: `https://graph.facebook.com/{Version}/{Phone-Number-ID}/whatsapp_business_encryption`
- Auth: HTTP bearer

Retrieve the current business public key and its signature verification status.

This endpoint returns the public key that is currently configured for encrypting
message payloads and indicates whether the stored signature is valid or has a mismatch.

**Use Cases:**
- Verify current encryption configuration
- Check public key signature validation status
- Retrieve public key for client-side encryption setup
- Monitor encryption key status for security compliance

**Rate Limiting:**
Standard Graph API rate limits apply. Use appropriate retry logic with exponential backoff.

**Caching:**
Public key information can be cached for moderate periods, but signature status
may change and should be checked regularly for security validation.

## Path parameters

- `Version` string, required
- `Phone-Number-ID` string, required

## Query parameters

- `fields` string

## Headers

- `User-Agent` string
- `Authorization` string, required

## Response `200`

Successfully retrieved business encryption public key information

- object
  - `data` WhatsAppBusinessEncryptionInfo[]
    - `business_public_key` string, required: The business public key used for encrypting message payloads. This key is used to encrypt data channel requests and responses.
    - `business_public_key_signature_status` 'VALID' | 'MISMATCH', required: Status of business public key signature verification

## Other responses

- `400`: Bad Request - Invalid parameters or malformed request
- `401`: Unauthorized - Invalid or missing access token
- `403`: Forbidden - Insufficient permissions or access denied
- `404`: Not Found - Phone number ID does not exist or is not accessible
- `422`: Unprocessable Entity - Request parameters are valid but cannot be processed
- `429`: Too Many Requests - Rate limit exceeded
- `500`: Internal Server Error - Unexpected server error

---

[API](https://skmtc.dev/meta/apis/whatsapp-business-messaging.md) - [All operations](https://skmtc.dev/meta/apis/whatsapp-business-messaging/llms.txt) - [OpenAPI document](https://skmtc.dev/meta/apis/whatsapp-business-messaging/revisions/5c1973265369?raw)