WhatsApp gets ‘Strict Account Settings’ to protect users from sophisticated hacks

The move aligns WhatsApp with similar high-security modes from Apple and Android, reflecting a growing industry focus on protecting vulnerable users from increasingly complex forms of digital espionage and abuse.

Meta has announced a new security feature for WhatsApp aimed at users who may be vulnerable to targeted cyberattacks. Called Strict Account Settings, the option introduces enhanced privacy controls designed to defend against rare but highly advanced forms of digital surveillance and account compromise.

The company said the feature is intended for a small subset of users—such as journalists, human rights workers, and public-facing individuals—who face a higher likelihood of being targeted by sophisticated threat actors. Meta stressed that the protections go beyond standard security settings and are not necessary for most users.

How Strict Account Settings works

Strict Account Settings applies a series of restrictive controls that significantly limit how WhatsApp functions. Once enabled, the feature blocks attachments and media files from unknown senders and disables link previews to reduce the risk of malicious content. It also tightens controls around who can initiate calls or add the user to group chats.

WhatsApp has described the setting as a form of “lockdown” for accounts under potential threat, cautioning that it may affect everyday usability. According to the company, enabling the feature could reduce the overall quality of messaging and calling, making it suitable only for users who genuinely believe they are at risk.

Alongside this update, Meta also revealed that it is increasingly using the Rust programming language across its platforms to strengthen protections for user data, including photos, videos, and messages, particularly against spyware and memory-related vulnerabilities.

Part of a wider industry trend

Meta’s move aligns with a broader industry push toward specialised security modes for vulnerable users. Apple introduced its own Lockdown Mode in 2022, offering extreme protections by disabling message attachments, limiting calls from unknown contacts, and restricting certain web technologies. Similarly, Google rolled out Advanced Protection features on Android devices, which enforce app verification, prevent sideloading, and enable theft and inactivity safeguards.

To activate Strict Account Settings on WhatsApp, users must update the app to the latest version, navigate to Settings > Privacy > Advanced, and enable the feature. A six-digit PIN is required to complete the setup.

With digital threats growing more targeted and sophisticated, Meta’s latest update signals a sharper focus on protecting users who operate in high-risk online environments, even if it comes at the cost of convenience.