WhatsApp Rolls Out a Lockdown Mode to Fight Spyware

WhatsApp has announced a new privacy feature designed to protect users from highly targeted spyware attacks. Called Strict Account Settings, the update strengthens existing protections and gives people an extra layer of security if they believe their account could be at higher risk. The feature is rolling out gradually over the coming weeks.

For most users, WhatsApp already provides end-to-end encryption by default, meaning messages can only be read by the sender and recipient. However, encryption alone cannot stop every form of attack. Spyware often tries to exploit small weaknesses in how apps handle calls, attachments, or media, sometimes without users noticing anything unusual.

What Strict Account Settings Does

Strict Account Settings works by automatically locking certain privacy and security options to their safest possible levels. Once enabled, the app limits how some features work, reducing the chances that attackers can use them as entry points. For example, attachments and media from people not in your contacts are blocked by default.

The feature also silences calls from unknown numbers and restricts other behaviors that could be abused by spyware. While this may slightly change how WhatsApp feels day to day, the goal is to reduce unnecessary exposure to suspicious messages or files that could carry hidden threats.

This type of “lockdown-style” protection is designed with high-risk users in mind, such as journalists, activists, or people with a public profile. That said, any user can turn it on if they want extra peace of mind, especially during periods when scams and targeted attacks are on the rise.

Fig 1. Turning on Strict Account Settings. (Source: TheHackerNews)

Why Spyware Remains a Serious Threat

Spyware is among the most invasive forms of cyberattack. Once installed, it can secretly access messages, photos, calls, and even a phone’s microphone or camera. In many cases, victims never realize they are being monitored until long after the damage is done.

These tools are often expensive and used selectively, which makes them difficult to detect and stop. Past incidents have shown that even popular apps can be targeted. Features like Strict Account Settings aim to reduce these risks before an attack succeeds, rather than relying on users to spot warning signs afterward.

Security Improvements Behind the Scenes

In addition to new user-facing controls, WhatsApp is also improving security in ways most people will never see. The company has begun using a safer programming language behind the scenes to handle media like photos and videos, reducing hidden flaws that spyware commonly exploits.

Together, these changes reflect a broader push toward layered security. Users can enable Strict Account Settings by going to Settings > Privacy > Advanced. While not everyone will need it, the option gives people more control over their privacy in an increasingly hostile digital landscape.