Listen to this Post
In a significant move to protect high-risk individuals, Meta has launched a new WhatsApp security feature called “Strict Account Settings”. This update is designed to provide journalists, activists, public figures, and other potential targets of cyberattacks with the highest level of protection against sophisticated threats, including spyware infections. By enhancing the app’s existing end-to-end encryption, WhatsApp now offers an “ultra-secure” mode that locks down nearly all points of potential vulnerability for those who need it most.
Enhanced Privacy for Vulnerable Users
The new feature allows users to enable extreme privacy controls directly from their primary device under Settings > Privacy > Advanced. Once activated, it automatically enforces the most restrictive privacy measures. These include:
Mandatory two-step verification
Blocking media and attachments from unknown senders
Silencing calls from unknown contacts
Disabling link previews
Hiding last seen/online status, profile photo, About information, and profile links
Limiting features that could inadvertently expose users to attacks
WhatsApp emphasizes that this feature is intended only for individuals who may be targets of sophisticated cyber campaigns. For the vast majority of users, these extreme measures are unnecessary.
A Response to Rising Threats
Meta’s announcement comes amid growing concerns over targeted spyware attacks, particularly from the NSO Group’s Pegasus software, which has previously exploited vulnerabilities in WhatsApp to compromise iOS and Android devices without user interaction. Notable incidents include zero-click attacks exploiting zero-day vulnerabilities, which allowed hackers—often state-sponsored—to access devices without any action from the victim.
WhatsApp’s new feature rollout coincides with the company’s gradual migration to the Rust programming language, which promises enhanced security and better defense against spyware targeting messages, photos, and videos. This move mirrors Apple’s 2022 introduction of Lockdown Mode, a similarly restrictive security option for iOS, iPadOS, and macOS devices, aimed at protecting journalists, activists, and human rights defenders.
Over the past few years, WhatsApp has patched multiple critical zero-day flaws and pursued legal action against NSO Group for spyware attacks, including a $167 million fine in 2025 for compromising 1,400 users in 2019. By providing this enhanced lockdown functionality, WhatsApp hopes to give at-risk individuals the tools they need to safeguard their communications against ever-evolving threats.
What Undercode Say:
WhatsApp’s “Strict Account Settings” is a clear acknowledgment of the evolving threat landscape for high-profile users. While standard end-to-end encryption offers robust protection for most users, targeted cyberattacks are becoming increasingly sophisticated. Zero-click exploits, such as those used by NSO Group, highlight that traditional security practices—passwords, two-factor authentication, cautious clicking—are not enough for high-risk profiles.
This rollout also signals a broader industry trend toward “security by default for high-risk users.” Apple led the way with Lockdown Mode, and WhatsApp is now catching up, demonstrating that mainstream messaging platforms are taking targeted attacks seriously. The gradual shift to Rust in WhatsApp’s backend is a strategic move, as Rust’s memory safety features reduce vulnerabilities that hackers often exploit.
However, these features are double-edged. While they dramatically reduce the attack surface, they also limit user functionality, potentially complicating day-to-day communication. For instance, silencing unknown calls or blocking unknown attachments may prevent legitimate contacts from reaching the user. Organizations and individuals need to weigh the trade-offs between usability and security.
Another critical point is the legal and ethical battle against spyware vendors. NSO Group’s repeated use of zero-day exploits, even after lawsuits and fines, shows that technology alone cannot fully solve the problem; legal deterrents, international cooperation, and responsible platform policies remain essential. WhatsApp’s new feature can be seen as part of a broader defensive ecosystem where technology, law, and user education must converge.
Overall, this feature is a strong step toward proactive cybersecurity for vulnerable users. By making such tools available, Meta signals that privacy is not one-size-fits-all and that advanced protections should be accessible to those who face real-world risks.
Fact Checker Results:
✅ High-risk users protected: WhatsApp confirms that “Strict Account Settings” targets journalists and public figures.
✅ Feature availability: Rolling out gradually and requires primary device activation.
❌ Not for general users: Meta warns most users do not need this level of security.
Prediction:
🔮 With spyware attacks increasing globally, WhatsApp’s new lockdown mode could become the standard for high-risk digital communications. Over the next 12 months, more messaging platforms may introduce comparable extreme-security features to attract professional and activist users. Adoption may also push governments and watchdogs to enforce stricter controls on spyware vendors like NSO Group.
If you want, I can also create a visually structured, SEO-friendly version of this article with bullet highlights and key takeaways for readers who scan instead of reading long paragraphs. It would look like a modern tech news post. Do you want me to do that next?
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: www.bleepingcomputer.com
Extra Source Hub (Possible Sources for article):
https://www.discord.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
Bing
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
