WhatsApp Launches New Security Feature to Shield Users from Spyware

WhatsApp is taking a bold step to protect its users from sophisticated cyberattacks by introducing a new security feature called “Strict Account Settings.” This feature, designed for individuals at higher risk—such as journalists, activists, and public figures—aims to limit the exposure of accounts to spyware and other malicious software. Rolling out in the coming weeks, it allows users to block attachments, media, and other interactions from people not in their contact list, giving them tighter control over their digital footprint.

The announcement comes amid ongoing legal battles between WhatsApp’s parent company, Meta, and NSO Group over the infamous Pegasus spyware, which targeted an estimated 1,400 WhatsApp users in 2019. Meta has achieved several legal victories in this fight, highlighting the company’s commitment to defending user privacy. WhatsApp emphasized that end-to-end encryption remains a cornerstone of its privacy protection, but recognizes that some users need “extreme safeguards” against highly sophisticated attacks.

Security experts are optimistic about the addition. Natalia Krapiva, senior tech legal counsel at digital civil rights group Access Now, described it as a “welcome expansion” of protections similar to Apple’s Lockdown Mode and Google’s Advanced Protection. She pointed out that while litigation can help combat spyware, it is often expensive and complex, leaving most victims unprotected. Features like WhatsApp’s new lockdown-style setting, free and easy to use, could provide critical security to millions of users worldwide.

The feature can be enabled in WhatsApp by navigating to Settings > Privacy > Advanced, making it accessible to all users who want an extra layer of protection without needing technical expertise.

What Undercode Say:

WhatsApp’s new Strict Account Settings represents a significant evolution in consumer cybersecurity. While end-to-end encryption has long been a default protection, it does little against advanced spyware specifically targeting high-risk individuals. By enabling users to block unsolicited media and attachments, WhatsApp is adopting a proactive approach rather than relying solely on reactive defenses like litigation.

This move also signals a broader trend in the tech industry: major platforms are increasingly prioritizing high-risk user protection. Apple’s Lockdown Mode and Google’s Advanced Protection have already set a precedent, and WhatsApp’s entry reinforces the importance of multi-layered defenses. Unlike complex corporate security protocols, this feature is user-friendly, lowering the barrier to strong personal cybersecurity.

From an operational standpoint, the feature can limit the attack surface significantly. Spyware often relies on hidden vectors—attachments, links, or unsolicited messages—to infiltrate devices. Restricting interactions to trusted contacts reduces the number of potential entry points, effectively shrinking the risk pool. Furthermore, the accessibility of this setting encourages adoption among non-technical users who may not have the skills to implement advanced defenses manually.

There is also a legal and reputational dimension. Meta’s ongoing battle with NSO Group underscores the high stakes of spyware attacks. Introducing technical safeguards enhances the company’s public image as a privacy advocate while potentially reducing future litigation exposure. For journalists, activists, and human rights defenders, this feature could mean the difference between operational security and compromise.

Critically, the rollout of Strict Account Settings may also inspire a new standard across messaging platforms. As spyware threats continue to evolve, proactive, easily deployable defenses are likely to become a baseline expectation for users. If widely adopted, this could pressure competitors to follow suit, raising the overall security posture of the industry.

Despite these advantages, the feature is not a silver bullet. Users must still remain vigilant about phishing attempts, device integrity, and account hygiene. Advanced persistent threats may still find ways to bypass even strict account controls. However, combined with existing encryption and device-level protections, WhatsApp’s update adds a meaningful layer to a multi-tiered defense strategy.

Overall, WhatsApp is bridging the gap between accessibility and security, making advanced protections available without requiring technical expertise or financial resources. In doing so, the company is helping to democratize digital safety for millions of high-risk users globally.

Fact Checker Results:

✅ WhatsApp confirmed the rollout of the Strict Account Settings feature.
✅ The feature allows users to block attachments and media from non-contacts.
✅ Legal context: Meta has been in court against NSO Group over Pegasus spyware since 2019.

Prediction:

📌 Adoption of WhatsApp’s new security settings will likely increase user confidence, especially among journalists and activists.
📌 Competitors like Signal or Telegram may introduce similar lockdown-style protections, driving an industry-wide shift toward advanced user-level security.
📌 Over the next 12–18 months, we could see a reduction in successful spyware attacks on high-profile users due to these more accessible technical safeguards.

If you want, I can also create a short, punchy social media version of this article optimized for clicks and shares, while keeping all key insights. Do you want me to do that next?