WhatsApp Introduces One-Tap Strict Account Settings for Stronger Privacy

WhatsApp has announced the rollout of a new security feature called Strict Account Settings, designed to help users protect their accounts with the strongest available safeguards using a single toggle. The feature is now gradually reaching users on both Android and iOS, starting with the latest app versions.

The new setting simplifies account security by automatically enabling a bundle of advanced protections, reducing the need for manual configuration. While it is especially aimed at users who face higher risks of targeted cyberattacks, WhatsApp says anyone can enable it for extra peace of mind.

What Are Strict Account Settings on WhatsApp?

Strict Account Settings introduce a one-tap security mode that activates WhatsApp’s most restrictive privacy and safety controls at once. Once enabled, the app automatically applies advanced protections and locks certain options at their safest levels.

WhatsApp says the feature is built on its long-standing commitment to privacy, which already includes default end-to-end encryption for messages and calls. The new setting goes a step further by addressing more sophisticated attack vectors.

Users can turn off Strict Account Settings at any time. However, some essential protections, such as two-step verification, will remain enabled to ensure baseline security.

Key Security Protections Enabled Automatically

When Strict Account Settings are turned on, WhatsApp enforces several high-level safeguards without requiring extra setup:

Stronger Privacy Controls

• Profile photo, last seen, and about info are limited to contacts only
• Group invitations are restricted so only saved contacts can add users
• Attachments and media from unknown contacts are blocked

Protection Against Advanced Attacks

• Link previews are disabled, preventing IP address exposure to third-party sites
• Calls from unknown numbers are automatically silenced, reducing the risk of zero-click exploits
• Calls are routed through WhatsApp servers, making location inference harder

Account and Encryption Safeguards

• Two-step verification is enforced
• Users receive in-chat alerts if a contact’s encryption key changes unexpectedly
• Security settings are locked at their most restrictive levels

Together, these measures aim to protect against rare but complex cyberattacks that can target individuals with public profiles or sensitive roles.

WhatsApp Also Moves to Rust for Better Security

Alongside the new account settings, WhatsApp has confirmed it is adopting Rust, a memory-safe programming language, to improve the security of its media handling systems.

By replacing older C++ code with Rust-based libraries, WhatsApp aims to reduce vulnerabilities that could allow malware to hide inside seemingly harmless files such as images or videos. The company says this shift adds another layer of defense against file-based attacks.

Availability and Rollout Timeline

The Strict Account Settings feature is available to users who install the latest versions of WhatsApp for Android and iOS from official app stores. The rollout is gradual, meaning some users may not see the option immediately.

WhatsApp says the feature will reach all users over the coming weeks, allowing them to enable the most secure configuration with just one tap from the Advanced Privacy Settings menu.

As messaging apps become increasingly central to personal and professional communication, attacks on high-value accounts are becoming more sophisticated. WhatsApp’s new Strict Account Settings reflect a growing industry shift toward security-by-default, making advanced protection accessible without technical complexity.