WhatsApp Boosts Security with ‘Strict Account Settings’ Amid Malware Concerns
Meta is rolling out a new security feature for WhatsApp designed to shield users from increasingly sophisticated cyberattacks, including those targeting both iPhones and Samsung Galaxy devices. Dubbed “strict account settings,” the function activates advanced data protection measures with a single click, though at the cost of some convenience.
Recent months have seen reports circulating about WhatsApp being exploited as a vector for malware. In response, Meta developed this feature primarily for high-risk users – such as journalists and public figures – who may be targets of targeted attacks. According to a company release, enabling “strict account settings” elevates account security to its highest levels.
Navigating the New Security Options
Users can locate the “strict account settings” within WhatsApp by navigating to Settings > Privacy > Advanced. Once activated, the feature implements a series of restrictions designed to minimize the potential attack surface.
Among the key changes, the feature blocks all media received from unknown senders. Link previews are disabled, and incoming calls from numbers not in the user’s contacts are silenced, though still visible in the call log. Group invitations are also limited, and two-step verification is enforced for an added layer of protection. Furthermore, the feature limits the visibility of a user’s profile, making it harder for malicious actors to gather information.
“The goal is to provide a heightened level of security for those who need it most,” stated one analyst.
To further enhance privacy, WhatsApp will also route calls through its own servers when “strict account settings” are enabled, effectively masking the user’s IP address. Additionally, the “last online” status, profile picture, and user information are restricted to only the user’s contacts or a pre-defined, limited list. Meta also strongly recommends that users with enabled backups utilize the end-to-end encrypted backup feature for maximum security.
A Hidden Feature for Targeted Protection
While offering robust protection, Meta emphasizes that “strict account settings” are not intended for the average user. The company notes that most individuals are not the target of such advanced cyber campaigns. However, for those seeking the highest level of security, the function is available, albeit intentionally placed in a less prominent location within the app’s settings.
According to WhatsApp, users can only toggle the “strict account settings” on or off from the primary device linked to their account. A complete list of settings locked by the feature can be reviewed under Settings > Privacy > Advanced > Strict Account Settings > Locked Settings.
The rollout of this feature underscores the growing need for robust security measures in messaging apps, as they increasingly become targets for malicious actors. While the feature may introduce some friction for everyday use, it provides a critical safeguard for those facing the highest levels of risk.
