

WhatsApp is testing a new security mode called “Strict Account Settings” to protect users who face a higher risk of hacking and cyberattacks. The feature appears in recent iOS and Android beta builds and focuses on quick, one-tap activation of stronger privacy and security controls.
The new mode targets users such as journalists, activists, public figures, and people who handle sensitive information. It aims to reduce the chance of account takeovers, phishing attempts, spyware, and other targeted attacks on WhatsApp.
In the latest iOS beta on TestFlight, WhatsApp places the Strict Account Settings option under Privacy > Advanced. Users can turn it on when they believe they face a higher cyber risk. This mode then applies a predefined set of restrictions without requiring users to change each setting manually.
The feature blocks media and file attachments from unknown numbers, which can reduce exposure to malicious links or infected files. It also limits who can message or call the user, with options to mute calls from unknown contacts and restrict group invitations to saved contacts only.
Reports on the Android beta indicate that the mode also disables link previews. This step helps prevent external servers from logging user metadata or IP details when they share URLs. The feature further tightens profile privacy by hiding details such as profile photo, status, and last seen from unknown numbers.
WhatsApp also builds in account-level protections. The mode enables two-step verification by default and alerts users when a contact’s encryption code changes. These measures help users detect suspicious activity and make it harder for attackers to hijack accounts through SIM swaps or device cloning.
The Strict Account Settings mode functions as a unified security profile. It groups many existing WhatsApp privacy and security tools into a single configuration. Users who may not understand every individual setting can still apply a high-security setup with one action.
Meta positions this development as part of a wider effort to improve protection on WhatsApp amid rising phishing and spyware incidents. The feature aims to address modern threats such as targeted surveillance, stalkerware, and high-volume spam from unknown accounts.
Reports also mention additional anti-spam controls in development. WhatsApp plans to limit how many messages users receive from unknown accounts, which can further reduce scam attempts and unwanted contact. These measures support a safer messaging environment for users who face repeated harassment or targeted campaigns.
WhatsApp has not announced a public release date for Strict Account Settings. The feature remains under development and may change before a broader rollout on Android and iOS. When it launches, the mode will remain optional; standard end-to-end encryption will still protect all users by default.
Also Read: How to Protect WhatsApp Web with a Password