Highlights
- WhatsApp is developing a one-tap ‘Strict Account Settings’ mode.
- The mode will enable IP address masking during calls, block media from unknown contacts, restrict chats to text-only, and disable link previews to prevent data leaks.
- It will mute calls from unsaved numbers, limit group additions to known contacts, hide profile info from strangers, and enforce two-step verification by default.
Caption – (Photo by Mariia Shalabaieva on Unsplash)
WhatsApp is reportedly working on a new ‘Strict Account Settings’ feature that aims to protect users from targeted cyberattacks. The upcoming security mode will introduce a lockdown-style setup, giving users tighter control over their privacy and communication on the platform. The feature was spotted by WABetaInfo in the latest beta version of WhatsApp for Android (v2.25.33.4). Here’s what we know about the feature based on the report.
What is WhatsApp’s ‘Strict Account Settings’ Mode?
According to the feature tracker WABetaInfo, the Strict Account Settings mode will allow users to enable advanced privacy protections with a single toggle. It’s designed for individuals who may be more vulnerable to cyber threats, making it easier to apply multiple security measures at once without manually adjusting each setting. Although still under development, the discovery indicates that WhatsApp plans to roll it out in a future Android update.
When activated, the new mode will automatically enable several enhanced safety features. One major addition is IP address protection during calls. WhatsApp will route voice and video calls through its own servers, preventing attackers from tracking users via IP-based location data.
The feature will also block media files and attachments from unknown contacts. This will stop automatic downloads of suspicious photos, videos, or documents that could contain malware or phishing links. Conversations with unfamiliar accounts will be limited to text-only messages, reducing exposure to potential threats.
📝 WhatsApp beta for Android 2.25.33.4: what’s new?
WhatsApp is working on a feature that lets users apply strict security settings to their accounts, and it will be available in a future update!https://t.co/9XI6BG4eyH pic.twitter.com/rQQZY4Fx9D
— WABetaInfo (@WABetaInfo) November 5, 2025
Added Privacy and Anti-Spam Controls
WhatsApp is also expected to include an option to disable link previews within chats. Since link previews typically require the app to connect to the linked site, disabling this feature will prevent unintended IP address leaks. Although already available under privacy settings, this control will now be automatically enabled as part of the new strict mode.
In addition, calls from unsaved numbers may be muted automatically to reduce spam and scam attempts including so-called “zero-click” attacks. The mode is also expected to restrict who can add users to group chats, limiting it to saved contacts only. Personal profile details like profile photo, status, and last seen timestamps will likely be visible only to contacts, ensuring greater privacy.
To further safeguard accounts, two-step verification will be turned on by default under this mode, adding a PIN-based security layer to prevent unauthorised access or identity theft. The system will also send security alerts whenever a contact’s encryption code changes, allowing users to confirm the authenticity of their chats.
FAQs
Q1. What is WhatsApp’s ‘Strict Account Settings’ mode?
Answer. It’s a new security feature under development that enables multiple privacy protections with a single toggle, designed to safeguard users from cyber threats.
Q2. What protections does WhatsApp’s ‘Strict Account Settings’ mode offer?
Answer. It includes IP address masking during calls, blocks media from unknown contacts, disables link previews, and restricts group additions to saved contacts only.
Q3. Will two-step verification be enabled in WhatsApp’s ‘Strict Account Settings’?
Answer. Yes, two-step verification will be turned on by default, adding a PIN-based layer of security to prevent unauthorised access.