New WhatsApp Security Feature Launched
On January 27, 2026, WhatsApp quietly rolled out one of its most powerful security upgrades to date: Strict Account Settings, also referred to as Lockdown Mode.
This feature is designed as a high-risk protection layer for users who may be targeted by advanced cyberattacks, including journalists, activists, politicians, lawyers, and public figures. Unlike regular privacy settings, this mode sacrifices convenience in favor of maximum account security.
What Are “Strict Account Settings”?
Strict Account Settings is a one-tap extreme security mode.
When activated, WhatsApp automatically enforces the most restrictive privacy and security rules possible, closing common attack vectors used by spyware, phishing groups, and surveillance tools.
Think of it as WhatsApp’s equivalent of Apple’s Lockdown Mode.
How Strict Account Settings Protect Your Account
Once enabled, multiple protections activate simultaneously.
1. Media From Unknown Senders Is Blocked
- Photos, videos, documents, and voice notes from non-contacts are blocked
- Prevents “zero-click” spyware hidden inside media files
- Files are never downloaded or previewed
This is one of the most important protections, as modern spyware often exploits image and video decoders.
2. Unknown Calls Are Silenced
- Calls from numbers not saved in your contacts are automatically silenced
- The call still appears in the log, but your phone never rings
- Reduces tracking attempts and social-engineering attacks
3. Link Previews Are Disabled
- WhatsApp stops generating preview thumbnails for URLs
- Prevents the app from automatically contacting malicious websites
- Blocks hidden tracking pixels and metadata leaks
This protects users from invisible surveillance triggered simply by receiving a link.
4. Privacy Is Locked to Contacts Only
These settings are enforced and cannot be loosened while the mode is active:
- Profile Photo → Contacts Only
- Last Seen & Online Status → Contacts Only
- About Info → Contacts Only
This minimizes exposure and prevents unknown users from profiling your activity.
5. Group Add Restrictions
- Only people in your contacts (or a pre-approved list) can add you to groups
- Blocks forced additions to scam or surveillance groups
6. Mandatory Two-Step Verification (2FA)
- Two-step verification is automatically enabled
- It cannot be turned off while Strict Account Settings are active
- Protects against SIM-swap attacks and account hijacking
How to Enable Strict Account Settings
The feature is rolling out gradually worldwide.
Activation Steps
- Open WhatsApp
- Go to Settings
- Tap Privacy
- Select Advanced
- Toggle Strict Account Settings ON
Important Notes
- This can only be enabled or disabled from your primary mobile device
- It cannot be managed via WhatsApp Web or Desktop
- Some convenience features will feel more restrictive by design
Why WhatsApp Launched This Now
The update follows a sharp rise in:
- Spyware attacks on journalists
- Phishing campaigns using media files
- State-level surveillance targeting activists
- Deepfake-assisted social engineering
WhatsApp confirmed the feature was developed after internal threat research and coordination with global security teams.
The Hidden Upgrade: Rust-Based Security
Behind the scenes, WhatsApp has migrated critical media-handling components from C++ to Rust, a modern memory-safe programming language.
Why This Matters
- Memory bugs are a common way hackers inject spyware
- Rust prevents entire classes of exploits at the code level
- Even malicious files fail silently instead of compromising the device
This change dramatically reduces the risk of invisible attacks through images or videos.
Who Should Use Strict Account Settings?
This mode is not required for everyone, but it is strongly recommended for:
- Journalists & reporters
- Human rights activists
- Lawyers & investigators
- Politicians & public officials
- Influencers facing harassment
- Anyone under targeted digital threats
Casual users may find it restrictive, but high-risk users gain meaningful protection.
Final Takeaway
Strict Account Settings is not a cosmetic privacy toggle.
It is WhatsApp’s strongest defense ever released, designed for real-world digital threats.
If your safety, sources, or identity matter more than convenience, this feature is worth enabling.
