[lawnchair_larry]

I see what you are trying to do, but I think it would work better if you requested the MAC address instead of the password. The way it's written now, it looks like you're asking for the password.

I support this though, because WhatsApp has known about this for a couple years now and refuse to do anything about it.

The short version is, anyone can steal your messages if they have your mac address. Anyone on the same network as you, or within wifi range -- even if not connected to a wifi network, but with the radio on -- has your mac address. And you can never change it, so once someone snarfs it once, they get your account for life.

Edit: From the README on the GitHub page:

Password Overview

    Android: MD5 hash of reversed IMEI (Credit: WhatsAPI Original Authors)
    iOS: MD5 hash of the MAC address repeated twice (Credit: Ezio Amodio)
    Windows Phone: MD5 hash of reversed DeviceUniqueId (Credit: Robe Fernández)*

[0x0]

I had the impression that iOS apps that use any API to retrieve the MAC address is banned from the store, similar to the way calls to retrieve the UDID are.

Maybe they are grandfathered in? Would they be banned if they pushed an update? Are Apple afraid of kicking out an iMessage competitor?