WhatsApp Introduces Strict Account Settings to Protect High-Risk Users

WhatsApp has begun rolling out a new optional security feature, Strict Account Settings, designed to protect users who may be targeted by sophisticated cyberattacks.

The feature is conceptually similar to Apple’s Lockdown Mode on iPhone and is designed primarily for journalists, activists, and public-facing individuals. Once enabled, Strict Account Settings automatically applies WhatsApp’s most restrictive privacy and security configurations.

Blocks Media From Unknown Senders

One of the key protections introduced with Strict Account Settings is the automatic blocking of attachments and media from senders who are not in a user’s contacts. This measure reduces the number of common entry points used to deliver spyware or other malicious files.

Security and Privacy Controls Are Locked In

According to WhatsApp, enabling Strict Account Settings automatically enables two-step verification and disables security notifications. Users with chat backups are also encouraged to enable end-to-end encryption.

Additional restrictions are applied across messaging and profile settings. Link previews are disabled, and protections against high volumes of messages from unknown accounts are activated.

Profile information, including Last seen status, online presence, profile photo, About details, and profile links, is limited to contacts only or to a smaller, pre-selected group of people.

Group privacy is also tightened, allowing only contacts or approved users to add someone to group chats.

Gradual Rollout, Mobile Only Access

Users can access Strict Account Settings from Settings → Privacy → Advanced. The feature is not available through WhatsApp Web. The company said availability will vary by region over the coming weeks.

Behind-the-Scenes Security Changes

Alongside the announcement, WhatsApp confirmed that parts of its app have been rewritten in Rust, a programming language known for memory safety. The company said the move helps protect user data, including photos, videos, and messages, from spyware-related exploits. More technical information has been shared on Meta’s engineering blog.

Do you plan to enable Strict Account Settings? Let us know in the comments.