WhatsApp introduces "strict account settings" for more security

WhatsApp can serve as an entry point for malware. In recent months, reports have circulated that both iPhones and Samsung Galaxy devices have been attacked via the Meta Messenger. To offer attackers as little attack surface as possible, Meta is integrating a new feature into its messenger that activates advanced privacy and security functions with a single click. The feature is called “strict account settings”.

WhatsApp locks down on demand

According to Meta, the new feature was primarily developed for users such as journalists or public figures who may rely on strict security measures against rare and extremely sophisticated cyberattacks. When the feature is activated, certain account settings are set to the strictest security levels, the company explains. This restricts some WhatsApp functions, for example.

After activating the “strict account settings” under “Settings” > “Privacy” > “Advanced,” the feature blocks, among other things, all media from unknown senders. Link previews are also turned off, and calls from unknown numbers are muted. However, these are displayed in the call overview. The feature also restricts group invitations and enforces two-step verification. Furthermore, the “strict account settings” limit the visibility of profiles. They also forward calls via WhatsApp servers to obscure one's own IP address.

Furthermore, the “last online” timestamp and “online” status, the profile picture, and the user info are only visible to one's own contacts or a previously defined, more restricted list of people, Meta explains. Meta also advises users with active backups to use the end-to-end encrypted backup function.

Well hidden

Users should only activate the settings if they have a reason to do so, the company emphasizes – for example, if they believe they are the target of a “sophisticated cyber campaign.” “Most people are not affected by such attacks,” it continues. However, users who want to use WhatsApp with the broadest possible protection can still activate the function, but the setting is not prominently placed.

According to WhatsApp, users can only turn the new strict account settings on and off via the main device. It further states that users can view all settings locked against changes under “Settings” > “Privacy” > “Advanced” > “Strict Account Settings” > “Locked Settings.”

(afl)