WhatsApp introduces ‘Strict Account Settings’ to secure high-risk users from cyberattacks

WhatsApp has begun rolling out a new security feature designed to offer stronger protection for users who may face heightened digital threats due to their profession or public profile.

Meta announced on Tuesday that the messaging platform is introducing ‘Strict Account Settings’, a mode built to defend select users from sophisticated cyber attacks, including advanced spyware campaigns. The company said the feature is aimed at individuals such as journalists and other public-facing figures who may be more likely to be targeted.

The new protection works in a similar way to Apple’s Lockdown Mode on iOS and Android’s Advanced Protection features. By prioritising security over convenience, the setting limits certain functions of the app in exchange for tighter safeguards.

Also Read | Elon Musk vs WhatsApp: ‘Not secure’, says Tesla CEO as Meta faces explosive privacy lawsuit  

When enabled, WhatsApp automatically switches several account controls to their most secure configuration. This includes blocking media files and attachments sent by unknown contacts, silencing calls from people outside the user’s contact list, and restricting other settings that could potentially be exploited during targeted attacks. 

“We believe you should be able to have private conversations on your devices, just like you would in person. That’s why WhatsApp provides a private and secure experience for everyone, with default end-to-end encryption for your personal messages and calls. We’re always building more layers of security, and for the few people who may be targets of sophisticated and rare cyber attacks — like journalists or public figures — we’re adding a new extreme protection feature called Strict Account Settings,” Meta said.

“This lockdown-style feature bolsters your security on WhatsApp even further with just a few taps by locking your account to the most restrictive settings like automatically blocking attachments and media from unknown senders, silencing calls from people you don’t know, and restricting other settings that may limit how the app works,” Meta said in a statement.

Meta said the feature can be activated by heading to Settings > Privacy > Advanced, adding that availability will expand gradually over the coming weeks.

Also Read | WhatsApp device-linking vulnerability explained: How web version hijacks are happening 

Alongside the new security mode, the company also revealed major behind-the-scenes changes aimed at strengthening WhatsApp’s defence against spyware. Meta confirmed it is now using the Rust programming language within its media-sharing systems to improve protection for photos, videos and messages exchanged on the platform.

The firm described this move as the largest global deployment of any Rust-based library to date. The technology enables WhatsApp to run a secure, high-performance and cross-platform media framework — internally known as wamedia — across different devices.

Meta explained that its security strategy focuses on reducing vulnerabilities caused by memory-related flaws. This includes designing products to limit unnecessary exposure to attacks, reinforcing existing C and C++ code with stronger security reviews, and adopting memory-safe programming languages for new development.

“WhatsApp has added protections like CFI, hardened memory allocators, safer buffer handling APIs, and more. C and C++ developers have specialized security training, development guidelines, and automated security analysis on their changes. We also have strict SLAs for fixing issues uncovered by the risk identification process,” the company said.