Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsWhatsApp’s Strict Account Settings adds an optional layer of protection for people who may face sophisticated cyberattacks. Turn it on at Settings > Privacy > Advanced. It blocks attachments and media from unknown senders, silences calls from people you do not know, and tightens other settings—but it cannot guarantee that spyware will not reach your device.
What Strict Account Settings does
Meta announced Strict Account Settings on January 27, 2026, describing it as a lockdown-style option for accounts that may be at risk from rare, sophisticated attacks. Rather than changing WhatsApp’s default protections for everyone, the optional setting applies a more restrictive set of privacy and security controls.
When enabled, it automatically blocks attachments and media from unknown senders and silences calls from people you do not know. It also restricts other settings, which can reduce convenience or limit how WhatsApp works. Meta’s announcement does not enumerate every restricted setting. Meta’s January 27 announcement describes the feature as particularly useful for people such as journalists and public figures who may be targets of rare but sophisticated attacks.
How to turn it on
- Open WhatsApp and go to Settings > Privacy > Advanced.
- Find and enable Strict Account Settings.
Meta said the feature would roll out over the following weeks after its January 27, 2026 announcement. If the option is not visible, availability may depend on your app version and region; check for an app update and look again later.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Does it stop Pegasus or other spyware?
No setting can promise that spyware is impossible. Strict Account Settings is an additional barrier, not a guarantee against a determined attacker. It limits some routes for unwanted contact and risky content, but device and operating-system vulnerabilities, malicious links, and social engineering remain relevant risks.
In a June 8, 2026 update, Meta said it had disrupted NSO-linked social-engineering attempts involving malicious links and test accounts or groups. The company recommended that people who believe they may be targeted enable Strict Account Settings, keep WhatsApp and their device software current, and report suspicious activity. The reported targeting of surveillance-for-hire operators included journalists, government officials, military personnel, and humanitarian organizations. Meta’s June 8 update provides its account of the disruption and recommendations.
How this fits with WhatsApp encryption and media defenses
WhatsApp personal messages and calls remain protected by default end-to-end encryption. That protects their contents in transit, but it does not remove risks at the endpoints—the phones or computers sending and receiving them—or prevent someone from being tricked into opening a malicious link or file.
Media files are one reason extra defenses matter: a maliciously crafted image or video may target a flaw in an operating system, system library, or app. Separately from the user-facing Strict Account Settings toggle, Meta says it has expanded Rust, a memory-safe programming language, in WhatsApp’s media-sharing path. Its Rust media library was rolled out to WhatsApp users across Android, iOS, Mac, Web, wearables, and other platforms.
Meta describes checks for malformed file structures, risky file types, spoofed extensions or MIME types, embedded files and scripts in PDFs, and known dangerous executable or application types. These measures are intended to reduce risk, not eliminate every possible attack. Meta Engineering says the rewrite replaced 160,000 lines of C++ with 90,000 lines of Rust, including tests. The company also says more than 3 billion people use WhatsApp’s default end-to-end encrypted messaging each day. Engineering at Meta’s explanation of the media library discusses the behind-the-scenes work.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Who should enable it?
Meta designed the setting for people who believe they may face elevated risk from sophisticated attacks, rather than presenting it as a necessary setting for every user. Journalists, public figures, and others who may be targeted are examples, not an exhaustive list. The decision comes down to whether the added restrictions are worth the loss of convenience: unknown senders’ attachments and media are blocked, and calls from unknown people are silenced.
For anyone who enables it, treat it as one part of a broader security posture: keep WhatsApp and the operating system updated, be cautious with unexpected links and files, and report suspicious activity.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
