WhatsApp: Feature in Beta Simplifies Protection Against Cyber Attacks

In the current beta version of the popular messenger WhatsApp, some users can activate advanced security settings with a single click.

listen Print view

(Image: BigTunaOnline/Shutterstock.com)

2 min. read
By
  • Andreas Floemer

WhatsApp can serve as an entry point for malware. In recent months, reports have circulated that iPhones as well as Samsung Galaxy devices have been attacked via the Meta Messenger. To offer attackers as little attack surface as possible, Meta is integrating a new feature into its messenger that activates extended data protection and security functions with a single click. The feature is called "strict account settings".

As Meta writes in the support document for the feature, it was developed for users "who may be targets of such attacks." Users should only activate the settings if they see a reason to do so, the company emphasizes – for example, if they believe they are the target of a "sophisticated cyber campaign." "Most people are not affected by such attacks," it continues. Users who want to use WhatsApp with the broadest possible protection can still use the feature, but the setting is not prominently placed.

Deeply hidden in the settings: WhatsApp's new "Strict Account Settings" feature.

(Image: Andreas Floemer / heise medien)

Currently, the feature is only available to registered users of the beta versions of the messenger for Android and, according to WABetaInfo for iOS. Users of the beta will find the button to activate "strict account settings" in the future under "Settings" > "Privacy" > "Advanced."

Videos by heise

After activating "strict account settings," the feature blocks all media from unknown senders. It also deactivates link previews and silences calls from unknown numbers. However, these are displayed in the call overview. Furthermore, the function restricts group invitations and enforces two-step verification. In addition, the "strict account settings" limit the visibility of profiles. They also forward calls via WhatsApp servers to disguise your IP address.

WhatsApp "Strict Account Settings": The settings are not yet localized in the beta.

(Image: Andreas Floemer / heise medien)

According to Meta, the "Last seen" timestamp and the "Online" status, profile picture, and user info are only visible to your contacts or a previously defined, more restricted list of people. Meta also advises users with active backups to use the end-to-end encrypted backup feature.

According to WhatsApp, users can only turn strict account settings on and off via the main device. It further states that users can view all settings locked against changes under "Settings" > "Privacy" > "Advanced" > "Strict Account Settings" > "Locked Settings."

It is currently unclear when WhatsApp will move the feature out of the beta version and make it available to all users.

(afl)

Don't miss any news – follow us on Facebook, LinkedIn or Mastodon.

This article was originally published in German. It was translated with technical assistance and editorially reviewed before publication.