Messaging platforms such as WhatsApp, Signal, and Telegram have become an integral part of daily communication for millions of users worldwide. Originally designed to help people stay connected through instant messages, photos, videos, and file sharing, these platforms are now increasingly being exploited by cybercriminals as channels for spreading malware. This growing threat has prompted WhatsApp to introduce stronger security measures aimed at protecting its users.
WhatsApp, one of the most widely used messaging applications, allows users to exchange not only text messages but also multimedia content and various file formats. Unfortunately, hacking groups have taken advantage of these features by disguising malicious software as harmless attachments, which can be delivered through images, videos, or document files. Once downloaded automatically, such malware can compromise user privacy, steal sensitive data, or enable spyware attacks.
To counter this issue, Meta’s messaging subsidiary WhatsApp has announced a new security feature called “Strict Account Settings.” This enhanced protection mode is designed to prevent the automatic download of potentially malicious files and limit the spread of spyware. While the feature is currently being rolled out to a limited number of high-risk users, including journalists and public figures, WhatsApp plans to make it available to all users by the end of 2026.
The new feature is comparable to Apple’s iOS Lockdown Mode and Android’s Advanced Protection, both of which are built to safeguard users who are more likely to be targeted by sophisticated cyberattacks. Once enabled, Strict Account Settings restrict certain account functionalities unless explicit user consent is provided. One key change is that media files will no longer be automatically downloaded from unknown contacts, significantly reducing the risk of malware infections.
Users can enable this feature by navigating to Settings > Privacy > Advanced Features within the app. WhatsApp has also revealed that this security layer is being developed using the Rust programming language, which is known for its strong memory safety features and resistance to common software vulnerabilities. This move further strengthens WhatsApp’s defense against spyware and other advanced threats.
The introduction of this feature follows WhatsApp’s long-standing battle against spyware developers. Between 2021 and 2022, Meta engaged in a high-profile legal dispute with the NSO Group, the company behind the notorious Pegasus spyware. Pegasus was reportedly used to target more than 1,400 WhatsApp users in 2019, including journalists, activists, and prominent individuals such as Amazon CEO Jeff Bezos. After investigations confirmed the misuse of WhatsApp’s platform, Meta took legal action, which ultimately led to restrictions on NSO Group’s operations in the United States.
With Strict Account Settings, WhatsApp is taking another significant step toward strengthening user privacy and limiting the misuse of its platform for cybercrime.
