Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Protection

WhatsApp Boosts Account Security for At-Risk Individuals

New Strict Account Settings allow users to block attachments and media and silence calls from unknown people.

WhatsApp security

Meta-owned communication service WhatsApp on Tuesday announced fresh security enhancements meant to improve the safety and privacy of at-risk users.

Called Strict Account Settings, the new lockdown-style feature is meant to prevent sophisticated cyberattacks that could be targeting journalists and public figures.

Set to roll out over the coming weeks, the new feature will allow users to block attachments and media from unknown senders, as well as to silence calls from people they don’t know.

Additional extreme protection settings will also be available when Strict Account Settings is enabled, limiting how the application works, WhatsApp says.

The feature will be accessible from WhatsApp’s Settings menu, by accessing the Advanced options in the Privacy tab.

“We’re always building more layers of security, and for the few people who may be targets of sophisticated and rare cyberattacks — like journalists or public figures — we’re adding a new extreme protection feature,” WhatsApp notes.

Advertisement. Scroll to continue reading.

WhatsApp has been offering end-to-end encryption for messages since 2014 and half a decade ago announced that backups would be encrypted when stored in the cloud.

The popular messaging service also provides other security and privacy features, allowing users to secure their accounts with two-factor authentication (2FA) and passkeys, to block messages from unknown accounts, protect their IP address in calls, and disable link previews.

“WhatsApp’s new Strict Account Settings feature is a sensible step towards making stronger security easier to adopt. By bundling multiple protections into a single toggle, it mirrors the philosophy behind Apple and Android’s Lockdown Mode and is clearly a response to the rise in targeted mercenary spyware attacks against messaging platforms,” Jamf senior enterprise strategy manager Adam Boynton said.

“With close to three billion users worldwide, WhatsApp’s scale is exactly what makes it such an attractive target for attackers. Features like this help strike the right balance by raising the baseline level of protection without significantly degrading the user experience,” Boynton added.

*Updated with comment from Jamf.

Related: Researcher Spotlights WhatsApp Metadata Leak as Meta Begins Rolling Out Fixes

Related: NPM Package With 56,000 Downloads Steals WhatsApp Credentials, Data

Related: New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages

Related: Vulnerability Allowed Scraping of 3.5 Billion WhatsApp Accounts

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.