In an increasingly interconnected and digitalized world, the protection of personal information and the security of communications have become indispensable pillars of everyday life. Instant messaging applications such as WhatsApp, used by billions of people worldwide, not only facilitate daily communication but also contain sensitive data, personal memories, and even strategic information in the case of individuals in positions of responsibility.
Last January 2026, WhatsApp, the popular messaging platform owned by Meta Platforms, announced one of its most significant security updates: the introduction of an extreme security mode called “Strict Account Settings.” This new feature represents a milestone in how digital platforms address advanced cyber threats and demonstrates the growing importance of offering more robust protection tools for certain types of users, without sacrificing the ease of use that characterizes modern communication services.
A More Dangerous World: Why Cybersecurity Matters
Over the past decade, cybersecurity has become a central axis of digital life, as global society has witnessed a sustained increase in the sophistication of cyberattacks. Cybersecurity is challenged by ransomware attacks that paralyze hospitals and by digital espionage campaigns, reinforcing the importance of cybersecurity for users and organizations. In this context, cybersecurity ceases to be merely a technical issue and becomes a social, political, and economic matter. The scale and diversity of current threats have placed cybersecurity at the center of public debate, turning cybersecurity into an essential element for any user connected to the internet.
However, cybersecurity does not affect all users in the same way. While for most people cybersecurity is related to protecting photos or private conversations, for certain groups cybersecurity takes on a critical dimension. In the case of public figures, human rights defenders, investigative journalists, or government employees, cybersecurity is key to preventing the loss of sensitive information. The lack of cybersecurity can lead to blackmail, serious violations of privacy, or even physical risks, demonstrating that cybersecurity is a fundamental pillar of personal and professional security in the digital age.
What Are “Strict Account Settings”?
Aware of the growing importance of cybersecurity, WhatsApp introduced the so-called Strict Account Settings, a cybersecurity feature designed to offer an additional level of protection. WhatsApp directs this cybersecurity enhancement toward users who believe they may be at risk of suffering sophisticated or targeted attacks. This new WhatsApp feature is presented as a reinforcement of cybersecurity, complementing the cybersecurity measures already existing in WhatsApp, among which end-to-end encryption stands out. Thanks to this cybersecurity foundation, WhatsApp ensures that third parties—including WhatsApp itself—cannot access message content.
One of the most relevant characteristics of this cybersecurity initiative in WhatsApp is the consolidation of multiple cybersecurity mechanisms into a single button within WhatsApp’s settings menu. By activating Strict Account Settings, WhatsApp automatically applies a series of changes aimed at strengthening cybersecurity at the account and privacy level. In this way, WhatsApp simplifies cybersecurity management, allowing users to adopt advanced cybersecurity measures without the need for specialized technical knowledge.
These cybersecurity measures in WhatsApp include, among others, a series of functions designed to reinforce account cybersecurity and user privacy in WhatsApp:
The automatic blocking of multimedia files and documents from unsaved contacts is a key cybersecurity measure in WhatsApp. Thanks to this cybersecurity function, WhatsApp prevents photos, videos, or potentially harmful files sent from unknown numbers from reaching the device without the user’s explicit consent, thereby reinforcing cybersecurity.
The silencing of calls from unknown numbers is another essential layer of cybersecurity integrated into WhatsApp. This cybersecurity function reduces the risk of attacks that use WhatsApp calls as a vector to download spyware or compromise devices, strengthening user cybersecurity.
The deactivation of link previews is also part of WhatsApp’s cybersecurity strategy. These previews can reveal sensitive information, such as the user’s IP address, or act as tracking mechanisms. By limiting this function, WhatsApp improves cybersecurity and reduces exposure to threats.
The restriction of who can add the user to groups is another relevant cybersecurity measure in WhatsApp. By allowing only saved contacts to manage this action, WhatsApp reinforces cybersecurity and decreases the likelihood of being included in groups for malicious or automated purposes.
Limiting the visibility of status and profile information is a key cybersecurity feature in WhatsApp. By restricting data such as the profile photo, last seen status, or description, WhatsApp protects the user’s digital identity and improves cybersecurity.
Finally, the forced activation of two-step verification and notifications of security code changes represents one of the strongest cybersecurity measures implemented by WhatsApp. These cybersecurity functions help prevent the takeover of WhatsApp accounts and alert the user to any potentially suspicious activity.
Taken together, these cybersecurity settings in WhatsApp not only improve protection against advanced attacks but also significantly reduce the attack surface. By reinforcing cybersecurity, WhatsApp minimizes any vulnerable point that could be exploited by malicious actors to compromise the account.
Comparison with Other Security Options in the Technology Sector
WhatsApp’s commitment to strengthening cybersecurity does not arise in a vacuum. In recent years, other major technology corporations have adopted similar cybersecurity strategies in response to the constant increase in digital threats. In this context, WhatsApp joins a global trend in which cybersecurity becomes a central axis of digital product design.
For example, in 2022 Apple launched its Lockdown Mode for iPhone and macOS, an advanced cybersecurity feature aimed at users who believe they are at risk of sophisticated digital attacks. This cybersecurity initiative, like WhatsApp’s proposal, limits certain system functions that, while convenient for the average user, can become attack vectors. In this way, Apple strengthened its cybersecurity approach by reducing vulnerable surfaces.
For its part, Alphabet, Google’s parent company, introduced an Advanced Protection Mode for Android devices in 2025, once again focused on raising cybersecurity standards for users exposed to elevated risks. This approach confirms that cybersecurity has ceased to be an option and has become a structural necessity.
With the incorporation of Strict Account Settings, WhatsApp positions itself as the third major technology actor to offer a tool of this kind, reinforcing its commitment to cybersecurity. In doing so, WhatsApp helps consolidate a trend that goes beyond simple technical updates and points toward a new standard in individual digital cybersecurity protection.
Why Now? The Context of Digital Threats
The introduction of this WhatsApp feature does not occur by accident. The pressure of increasingly complex threats in the field of cybersecurity has forced digital platforms, including WhatsApp, to evolve rapidly. In recent years, there has been a significant increase in the use of targeted spyware, one of the most serious threats to cybersecurity, with surveillance campaigns affecting both political leaders and human rights activists.
In addition, incidents of global scope have exposed critical cybersecurity flaws, such as exploits capable of compromising devices through seemingly harmless calls or messages. These vulnerabilities have directly impacted mass messaging applications, including WhatsApp, reinforcing the need to adopt advanced cybersecurity measures. WhatsApp’s response has included legal action against spyware-developing companies, as well as the continuous improvement of its encryption and threat detection systems, which are fundamental pillars of its cybersecurity strategy.
In this context, WhatsApp’s decision to offer a stricter security option not only responds to current cybersecurity trends, but also prepares the platform and its users for future challenges in the field of global cybersecurity.
How to Activate Extreme Security Mode on WhatsApp?
The activation of WhatsApp’s Strict Account Settings is designed to be intuitive, although it goes beyond what an average user usually needs in terms of cybersecurity. To enable this feature in WhatsApp, users simply need to access the Settings section, go to Privacy, and then to the Advanced submenu, where the switch that activates all advanced cybersecurity protections is located.
WhatsApp has indicated that this feature will be rolled out gradually, so not all devices or regions will receive it immediately. In addition, some cybersecurity measures may require the entry of a specific PIN, in order to ensure that only the account holder can activate or deactivate this option.
The company has also warned that this advanced cybersecurity mode restricts certain WhatsApp functions and is therefore not intended for all users. For example, blocking multimedia files from unknown contacts may prevent the receipt of legitimate content, a common situation in everyday WhatsApp use, but one that is sacrificed in favor of a higher level of cybersecurity.
The Role of Encryption and Other Recent Improvements
The introduction of Strict Account Settings is not the only cybersecurity-related improvement that WhatsApp has implemented recently. In 2025, WhatsApp also expanded its chat backup encryption system, a key cybersecurity initiative that allows users to protect their backups using secure mechanisms such as biometrics or automatically generated keys. This cybersecurity improvement added an additional layer of protection for data stored in the cloud and reinforced WhatsApp’s commitment to protecting personal information.
In addition, on the technical side, WhatsApp has progressively incorporated advanced cybersecurity strategies, such as the use of safer programming languages to reduce vulnerabilities arising from memory errors. Tools such as Rust, a language specifically designed to improve cybersecurity against common flaws in traditional languages like C++, are already being integrated into critical WhatsApp libraries that handle multimedia data. This cybersecurity-focused approach significantly reduces the likelihood that malicious files can exploit software weaknesses to infiltrate devices.
These technical cybersecurity improvements, combined with user-oriented features such as WhatsApp’s Strict Account Settings, reflect a holistic approach to cybersecurity. In this model, both the underlying infrastructure and the user experience on WhatsApp are adjusted in a coordinated manner to face increasingly complex digital threats.
Social and Ethical Implications of Cybersecurity
Beyond the technical level, these cybersecurity innovations driven by WhatsApp generate important social and ethical implications. On the one hand, they strengthen the cybersecurity of groups historically vulnerable to digital attacks—such as journalists, human rights defenders, opposition politicians, and social activists—by offering them cybersecurity tools capable of protecting their physical integrity, their communications, and their sources.
On the other hand, the expansion of advanced cybersecurity features in WhatsApp raises questions about mass surveillance, censorship, and the potential misuse of cybersecurity technologies to evade legitimate mechanisms of state or judicial oversight. Although WhatsApp states that its goal is to strengthen cybersecurity and individual privacy in high-risk environments, it cannot be ignored that these cybersecurity capabilities could also be exploited by actors with illicit purposes.
This dilemma highlights the need for solid legal and regulatory frameworks to accompany the advancement of cybersecurity, balancing the right to privacy with the obligation to prevent and detect criminal activities. Ultimately, the challenge of cybersecurity lies in ensuring that neither of these objectives is unduly compromised.
The introduction of Strict Account Settings by WhatsApp represents a direct and necessary response to the growth of increasingly advanced threats in the field of cybersecurity. In a context where digital attacks are evolving rapidly, WhatsApp reinforces its commitment to cybersecurity by offering mechanisms designed to protect users exposed to elevated risks, while at the same time raising the level of cybersecurity expectations within the global technology ecosystem.
From a broader perspective, this WhatsApp initiative highlights how cybersecurity has ceased to be a merely technical aspect and has become a fundamental pillar of digital trust. Although WhatsApp’s Strict Account Settings are not designed for all user profiles and involve certain sacrifices in terms of usability, their implementation demonstrates that advanced cybersecurity is already a real necessity to protect sensitive communications against increasingly sophisticated attacks.
As attack techniques continue to evolve, cybersecurity will need to rely on proactive, flexible, and adaptable solutions. In this scenario, WhatsApp takes an important step by integrating cybersecurity as a central part of its strategy, but it also shows that digital protection does not depend solely on a single platform, but on a comprehensive cybersecurity vision that encompasses technology, processes, and user awareness.
For this reason, strengthening cybersecurity requires relying on specialized partners capable of supporting organizations and professionals in the face of complex threats. In this regard, ITD Consulting offers advanced cybersecurity services to prevent, detect, and respond to digital incidents in increasingly demanding environments. If you wish to strengthen your cybersecurity strategy and protect your systems and communications, you can contact ITD Consulting by writing to [email protected].
EN 
ES