WhatsApp has started implementing a new security layer designed to protect users against sophisticated cyber attacks. The functionality, called “strict account settings”, centralizes several privacy options at the most restrictive level, and can be activated with a single tap. The measure aims to hinder the action of malware and spying programs, known as spyware.
The distribution of the resource occurs gradually to the entire user base globally, with completion expected in the coming weeks. Activation is done directly in the application, without the need for updates to the device’s operating system. The initiative responds to the increase in digital threats targeting specific profiles, such as journalists and activists, but is available to anyone who wishes to reinforce their privacy.
With this new tool, the platform seeks to create a proactive barrier against common attack vectors, which exploit interactions with unknown contacts to compromise device security. Simplifying the activation process aims to democratize access to advanced digital security.
What changes with the new protection layer
The main advantage of strict settings is the convenience of applying a high security standard without the need for manual adjustments in different sections of the application. When activating the feature, the system automatically changes several permissions to the most restricted mode, creating a more controlled and secure communication environment. Essa approach is especially useful for users who are not familiar with all the nuances of privacy settings, offering robust protection in a simplified and immediate way.
This functionality changes the application’s default behavior regarding interactions initiated by numbers that are not in the user’s calendar. The rationale behind the change is that most threats, such as phishing scams and malware infection attempts, originate from unknown contacts. By drastically limiting what these contacts can do, WhatsApp reduces the so-called “attack surface”, making it much more difficult for an attacker to find a loophole to exploit, thus ensuring a safer user experience for everyone.
How the tool combats advanced threats
One of the most important techniques implemented by this new security mode to neutralize spying threats is routing calls from unknown numbers through WhatsApp servers. Conhecido as “call relaying”, this process acts as a shield that hides the user’s IP address from the caller. Cibercriminosos often exploit the direct connection between two devices to obtain the victim’s location or identify vulnerabilities for targeted attacks. By intermediating the connection, the platform prevents this direct exposure of data. Essa layer of defense is particularly effective against sophisticated commercial spyware, which in the past has exploited flaws in calling protocols to install malicious software without the target even needing to answer the call, in attacks known as “zero-click.” The combination of silencing the call and protecting it via the server creates a double barrier that significantly raises the user’s security and privacy standards.
The main automatic restrictions
When activating maximum security mode, one of the most impactful changes is the complete blocking of receiving media files, such as photos, videos, audios and documents, sent by contacts that are not saved in the address book. Essa measure prevents the delivery of disguised malicious content, one of the most common methods for spreading viruses.
Voice and video calls from unknown numbers are automatically silenced. Embora are recorded in the application’s call history, the phone will not ring, avoiding interruptions and reducing the possibility of exploiting vulnerabilities in the call protocol.
The system also disables the generation of previews of links (thumbnails) sent by strangers. Essa action is crucial to combat phishing campaigns, as it prevents users from being deceived by manipulated images or texts and prevents the execution of codes that could compromise the device.
Finally, the functionality prevents users from being added to groups by people who are not in their contact list. Essa limitation is a powerful tool against the spread of mass spam and the application of large-scale social engineering tactics.
Step by step to enable maximum protection
The process to activate the new layer of protection is straightforward and must be carried out in the main WhatsApp application on your cell phone. Primeiro, the user must open the application and tap the “Settings” menu.
Within the settings area, the next option is “Privacy”. Nesta section contains all the controls that define who can see your information and interact with your account.
When scrolling the privacy screen to the end, the user will find the “Advanced” section. Este menu groups the latest and most robust security tools offered by the platform.
On the “Advanced” screen, the “Strict Account Settings” option will be visible with a switch next to it. Basta slide the button to the activated position and confirm the choice. Todas security restrictions will be applied immediately.
Additional protective measures implemented
Enabling strict mode also strengthens account access security by requiring two-step verification to be enabled. Essa function requests a personal six-digit PIN whenever the phone number is registered on a new device, preventing third parties from taking control of the account even if they manage to clone the chip or intercept the verification code via SMS.
Another important change is automatic blocking that prevents additions to groups by administrators who are not in the user’s contact list. Essa restriction controls entry into unwanted collective conversations, which are often used to carry out scams or spread disinformation in a coordinated and massive way.
Availability of the new tool
The functionality is being rolled out progressively on a global scale, which means that not all users will receive it at the same time. The expectation is that, over the next few weeks, the entire WhatsApp community will have access to the new security option directly in their applications.
Impact on interactions with saved contacts
It is essential to note that activating strict security settings is designed not to affect communication with contacts that are already saved in the user’s phonebook. Exchanging messages, sending media files, making voice and video calls, and joining groups with friends, family, and co-workers continue to work exactly the same.
The user experience with the known contact network remains completely unchanged. Dessa way, the platform ensures that reinforced protection against external threats does not become an inconvenience for daily and legitimate interactions, focusing blocking exclusively on communications initiated by unknown numbers.
