The option adds an additional layer of protection against cyber attacks and is especially intended for high-risk users such as journalists, activists or public figures.
Once activated, the feature automatically blocks attachments and media files received from unknown people and stops calls from contacts not in the phonebook, writes The Verge.
What changes when you enable “Strict Account Settings”
Enabling this security mode restricts several features of the app:
- link previews are disabled;
- only certain people can add you to groups;
- users who are not in the contact list can no longer see the profile photo, description (“About”) or online status.
WhatsApp warns that this option is not intended for all users. “It should only be activated if there is suspicion that you could be the target of a sophisticated cyber attack. Most people do not face such risks,” the company states.
Why is WhatsApp introducing this feature now?
WhatsApp has used end-to-end encryption for years, but security measures were strengthened after the app was targeted by spyware attacks, including the notorious Pegasus, developed by Israeli company NSO Group. This software allowed access to the victim’s phone even with a simple call.
WhatsApp’s parent company Meta sued NSO Group and won over $167 million in damages. Last year, WhatsApp also announced the dismantling of another spying campaign targeting journalists and members of civil society.
WhatsApp and the privacy controversies
Meta is currently facing a lawsuit alleging that WhatsApp may have access to users’ private conversations. The company strongly denies these allegations. Andy Stone, Meta’s director of communications, told Bloomberg that the lawsuit is “a baseless fiction,” pointing out that WhatsApp uses the Signal protocol for encryption.
When and how you can activate the feature
“Strict Account Settings” will be available gradually over the coming weeks. The option can be activated from: Settings → Privacy → Advanced → Strict Account Settings.
The feature can only be started from the main device, not from the web version of the app.
