WhatsApp Introduces Strict Account Settings for High-Risk Users
- Securityish
- Privacy & Personal Security
Quick Summary
WhatsApp has launched a new security feature called ‘Strict Account Settings’ aimed at protecting journalists and public figures from sophisticated cyber threats, including spyware attacks. This feature enhances existing end-to-end encryption by implementing strict privacy controls, such as mandatory two-step verification and blocking media from unknown senders. The rollout follows a history of targeted spyware attacks, notably involving the NSO Group’s Pegasus, which has affected many high-risk individuals.
The Securityish Brief
WhatsApp, a Meta platform, has begun rolling out the ‘Strict Account Settings’ feature to enhance security for high-risk users, including journalists and public figures. This feature adds extreme privacy controls on top of the existing end-to-end encryption, designed to protect against sophisticated cyber threats such as spyware attacks.
Users can enable these settings from their primary device under Settings > Privacy > Advanced. Once activated, it automatically enforces strict measures, including two-step verification, blocking media from unknown senders, and silencing calls from unknown contacts.
Meta’s announcement comes in response to a concerning trend where journalists and activists have been targeted by spyware like NSO Group’s Pegasus, which exploits vulnerabilities in messaging apps. This is particularly relevant given the recent history of zero-click exploits that allow hackers to infiltrate devices without user interaction.
In August, WhatsApp addressed a zero-day vulnerability that was exploited in targeted attacks, highlighting the ongoing risks faced by users. Additionally, in November 2024, court documents revealed that the NSO Group continued to deploy zero-day exploits even after legal actions were taken against them.
WhatsApp’s new feature is a proactive measure to safeguard users who may be targets of sophisticated cyber campaigns. However, it is advised that only those who believe they are at risk should enable these settings, as most users are not typically targeted by such attacks.
Understanding the Risks
The introduction of ‘Strict Account Settings’ reflects a growing recognition of the need for enhanced security measures for high-risk individuals. As cyber threats evolve, users must remain vigilant about their privacy settings and the potential risks associated with their online presence.
Organizations and individuals should consider the implications of such targeted attacks, particularly in sensitive sectors where privacy is paramount. Regularly updating security settings and being aware of potential vulnerabilities can help mitigate risks.
- Strict Account Settings: A new feature by WhatsApp that enhances privacy for high-risk users.
- End-to-End Encryption: A security measure that protects messages from being accessed by anyone other than the sender and receiver.
- Two-Step Verification: An additional security layer that requires a second form of identification to access an account.
- NSO Group: A surveillance firm known for developing spyware, including Pegasus, which targets messaging apps.
- Zero-Day Exploit: A vulnerability that is exploited before the vendor has released a fix.
Key Takeaways
- Enable Strict Account Settings in WhatsApp if you are a journalist or public figure at risk of cyber attacks.
- Regularly review and update your privacy settings to enhance your security on messaging platforms.
- Be cautious about sharing personal information and media with unknown contacts.
- Stay informed about the latest cybersecurity threats and vulnerabilities that may affect your devices.
- Consider using two-step verification on all accounts to add an extra layer of security.
Key Terms & Concepts
- Strict Account Settings: In this article, Strict Account Settings refers to WhatsApp’s new feature that provides enhanced privacy controls for high-risk users.
- End-to-End Encryption: End-to-End Encryption is a security measure that ensures only the sender and receiver can access the content of messages.
- Two-Step Verification: Two-Step Verification is an additional security feature that requires a second form of identification to access an account.
- NSO Group: NSO Group is a surveillance firm known for creating spyware, including Pegasus, which targets messaging applications.
- Zero-Day Exploit: A Zero-Day Exploit is a vulnerability that is exploited before the software vendor has had a chance to fix it.
Read the original article here: https://www.bleepingcomputer.com/news/security/whatsapp-gets-new-lockdown-feature-that-blocks-cyberattacks/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
