WhatsApp has been under fire recently over accusations that it fails to deliver adequate security protections for its users.
The Meta-owned messaging platform is currently facing a lawsuit claiming WhatsApp doesn't actually provide true end-to-end encryption.
More recently, WhatsApp chief Will Cathcart pushed back against allegations that Meta can secretly access users' private messages, dismissing them as 'totally false' and even firing shots at Tesla billionaire Elon Musk.
Now, as part of its latest security rollout, WhatsApp has introduced a new 'lockdown' mode called Strict Account Settings.
Advert
The feature essentially protects users from potential cyberattacks by automatically silencing unknown callers and blocking attachments and media from people who aren't in your contacts.
Strict Account Settings also change how your account appears to other WhatsApp users by restricting last seen and online status, profile photos and other account details.
When activated, the setting will also disable link previews, block high-volume messages from unknown accounts and limit who can add users to group chats.
"We will always defend that right to privacy for everyone […] but a few of our users – like journalists or public-facing figures – may need extreme safeguards against rare and highly-sophisticated cyber attacks," a Meta spokesperson told The Register.
According to Meta, the feature will roll out gradually over the next few weeks.
"We're always adding more layers of security on WhatsApp," added Cathcart. "For the few users – like journalists, or public–facing figures – who may find themselves needing extreme protections against sophisticated and targeted cyber attacks, we're rolling out a new feature called Strict Account Settings."
The setting is another step to cracking down on scams and unwanted communication. Certain types of 'rare and sophisticated malware' slip through the net when they're hidden inside innocuous file types like pictures, videos, and PDFs.
While they look normal to the receiver, they contain code that infects the target device to steal information or install tracking software.
Strict Account Settings defends against these attack methods by preventing high-risk users from receiving potentially dangerous messages in the first place.
Most notably, the Pegasus malware, developed by Israeli cyber-weapons firm NSO Group, was engineered to infiltrate devices by exploiting unpatched software vulnerabilities.
The software could simply be installed by receiving a text message or a call, even if it was never opened or answered. Meta took legal action against the NSO Group and was awarded £121.3 million ($167.25 million) in damages.
Strict Account Settings will soon be found in Settings > Privacy > Advanced in the iOS and Android versions of WhatsApp.