By 2026, digital security isn’t just about “entering a PIN and that’s it.” Sophisticated threats often exploit unexpected entry points—an innocuous-looking file, a call from an unknown number, or a link opened with too much trust.
In that context, WhatsApp has introduced a more extreme option: a setting that, with a single tap, reduces potential attack vectors—though the trade-off is a more restricted and less convenient experience.
What exactly is “Strict Account Settings”?
WhatsApp calls the new high-security option “Strict Account Settings.” It is described as a lockdown-style feature that sets your account to the most restrictive privacy and security configuration available. The idea is all-or-nothing: you either turn the feature on, or you don’t. There are no individual options to pick and choose from
This approach aligns WhatsApp with similar enhanced protection tools from other tech firms, such as Apple’s Lockdown Mode and Google’s Advanced Protection Mode, but tailored to messaging.
What changes when “Strict Account Settings” is enabled?
When this setting is turned on, WhatsApp automatically applies a set of restrictions designed to reduce exposure to advanced threats:
- Blocking media and attachments from unknown contacts: Files and multimedia from senders not in your contacts are blocked by default.
- Silencing calls from unknown numbers: Calls from numbers not in your address book are automatically muted.
- Disabling link previews: URLs shared by others no longer show visual previews, reducing the risk of indirect tracking or malicious content.
- Restricting profile visibility: Information such as your profile photo, “last seen,” and online status is limited to selected contacts.
- Other tightened privacy controls: Additional settings prioritise security over convenience and reduce automated interaction with unknown users.
In effect, the setting increases friction for anyone who is not in your contacts, trading some everyday features for stronger protection against sophisticated attacks.
Who the feature is for—and who might not need it
WhatsApp says Strict Account Settings is intended for users at elevated risk of targeted threats, such as journalists, activists, and public figures who may face sophisticated cyberattacks.
For most users, the default security—already protected by end-to-end encryption—is sufficient. Turning on this new setting could limit everyday messaging experiences, such as receiving media from people you don’t know.
How to activate it
The new feature is being rolled out gradually. To enable it, open WhatsApp and go to:
Settings > Privacy > Advanced > Strict Account Settings.
It must be activated from the primary device; it cannot be turned on through linked platforms like WhatsApp Web.
Behind the scenes: why WhatsApp mentions Rust
Alongside this user-facing feature, WhatsApp has highlighted a technical improvement: the use of the Rust programming language in key parts of its security stack. Rust is known for preventing common memory-related errors that can be exploited by malware and spyware. WhatsApp says this backend change strengthens protections for photos, videos, messages, and other data.
In simple terms, Strict Account Settings adds more external locks, and Rust reinforces the internal structure.