SECURITYWhatsApp Strict Account Settings: What It Blocks and How to Turn It On

Stop Unknown Files and Calls With WhatsApp Strict Account Settings

WhatsApp offers an optional feature called Strict Account Settings, launched in January 2026, to shield users from targeted cyberattacks, account hijacking and stealth spyware. When switched on, it takes a lockdown approach to untrusted communication.

What it changes

With the setting on, WhatsApp:

• blocks media and attachments from unknown senders
• silences calls from numbers you have not saved
• tightens other settings that could limit how the app works, as part of a lockdown-style mode

Cybercriminals use messaging apps to distribute malicious links and files, scrape data and take over accounts. Stopping media from people outside your contact list cuts off a common route for installing spyware. The trade-off is that non-contacts cannot freely send you files.

Who needs it most

Public figures and journalists face the heaviest exposure to tailored attacks, but ordinary users benefit too. Mass messages with bad attachments are a common way to breach accounts, so silencing strangers’ calls and blocking their files closes off easy entry points.

How to turn it on

1. Open WhatsApp and go to Settings > Privacy > Advanced.
2. Switch on Strict Account Settings.
3. Turn on two-step verification in your account settings for extra login protection.
4. Never share your PIN or one-time registration codes with anyone.

Meta says the feature is meant mainly for people who may face rare but sophisticated attacks, such as journalists and public figures. For other common scams to watch for, see our guide to cybersecurity in the UAE.