WhatsApp has announced a new privacy-focused feature called Strict Account Settings, designed for users who may face a higher risk of targeted cyberattacks. While the platform already offers default end-to-end encryption for messages and calls, WhatsApp says certain users—such as journalists and public-facing individuals—may require stronger safeguards against rare but sophisticated threats.
The new feature adds another layer of protection by automatically applying the most restrictive account-level security controls.
What Are Strict Account Settings?
Strict Account Settings is a lockdown-style security feature that limits how a WhatsApp account operates when enabled. Once turned on, select privacy and security options are locked to their most restrictive settings.
This includes:
- Automatically blocking attachments and media from unknown senders
- Silencing calls from people you don’t know
- Restricting other account settings that may limit how the app works
By reducing exposure to unknown contacts and risky interactions, the feature is designed to protect users against highly sophisticated threats.
How the Feature Protects Users
When enabled, Strict Account Settings:
- Locks certain privacy and security settings at maximum restriction
- Limits media and attachment sharing from unknown contacts
- Silences calls from unknown senders
- Reduces attack surfaces commonly used in targeted cyber attacks
WhatsApp says the feature is intended for rare, sophisticated threats rather than everyday spam or phishing attempts.
Who Should Enable It
According to WhatsApp, Strict Account Settings is particularly useful for:
- Journalists and researchers
- Activists and civil society members
- Public-facing figures
- Users who believe they may be targeted by advanced cyber threats
For most users, WhatsApp’s existing default protections remain unchanged.
Rust-Based Security Enhancements
In addition to this user-facing update, WhatsApp continues to strengthen its platform security using Rust, a memory-safe programming language. The company has adopted Rust in areas such as media handling to help reduce risks from maliciously crafted images, videos, and documents.
These protections work behind the scenes to prevent exploitation of software vulnerabilities and complement WhatsApp’s existing safeguards, including default end-to-end encryption.
Availability and How to Enable It
Strict Account Settings is rolling out gradually over the coming weeks.
- Users can enable the feature by going to: Settings > Privacy > Advanced > Strict Account Settings
Once activated, the protections apply automatically.