Meta is rolling out a new security feature for WhatsApp that couldn't come at a more critical time. Just days after facing a lawsuit alleging false privacy claims, the company unveiled Strict Account Settings - a lockdown-style protection layer that automatically blocks media from unknown senders, silences calls from strangers, and locks down user profiles. The timing raises questions about whether this is a response to mounting privacy scrutiny or a long-planned security enhancement.
Meta just handed WhatsApp users a nuclear option for privacy protection. The company's new Strict Account Settings feature acts like a digital fortress, automatically blocking media and attachments from anyone not in your contacts, silencing calls from unknown numbers, and locking down your profile visibility to contacts only.
The rollout comes at a delicate moment for Meta. According to Bloomberg, a lawsuit filed just days ago accuses the company of making false claims about WhatsApp's privacy protections. The complaint alleges that Meta "stores, analyzes, and can access virtually all of WhatsApp users' purportedly 'private' communications" - a direct challenge to the app's end-to-end encryption promises.
WhatsApp head Will Cathcart quickly pushed back, calling it a "no-merit, headline-seeking lawsuit" in a post on X. But Meta's rapid deployment of enhanced security features suggests the company is taking the privacy scrutiny seriously, even if publicly dismissing the legal claims.
The new feature works like a lockdown protocol for your account. When users enable Strict Account Settings through Settings > Privacy > Advanced, WhatsApp automatically activates two-step verification and security notifications that alert you when someone's security code changes - a potential sign of account compromise or surveillance attempts.
Link previews get disabled entirely under the strict mode, eliminating a common vector for malicious code delivery. The setting also blocks a high volume of messages from unknown senders, a tactic often used in spam campaigns and phishing attacks targeting high-value individuals.
Profile information gets locked down to contacts only. Your last seen status, online indicator, profile photo, about section, and profile links become invisible to anyone outside your contact list. Group additions require explicit permission, with only your contacts - or a pre-selected subset - able to add you to group chats.
Meta is positioning this as a tool for "journalists and public figures" who face elevated cyber attack risks. That's a smart framing given the current geopolitical climate and increasing reports of surveillance software like Pegasus targeting activists, reporters, and political figures through messaging apps.
But there's a catch. Users can only toggle this setting from their primary device, not from companion platforms like WhatsApp Web or Windows desktop apps. Meta says this restriction prevents unauthorized changes if someone gains access to a secondary device, though it also adds friction for users who rely on multi-device workflows.
The feature represents a significant shift in how messaging platforms balance usability with security. While Signal has long offered similar privacy-first defaults, WhatsApp's massive user base - over 2 billion people globally - makes this kind of optional lockdown mode more complicated. Too strict by default, and it breaks the app's core utility for everyday communication. Too lax, and it exposes vulnerable users to real threats.
The timing also coincides with broader industry conversations about privacy and surveillance. Apple recently expanded its Lockdown Mode for iPhones after researchers discovered sophisticated attacks targeting human rights defenders. Google has rolled out enhanced protections for high-risk users in Gmail and Chrome.
Meta's move suggests the company is trying to get ahead of regulatory pressure while defending against legal challenges to its privacy claims. The lawsuit alleges WhatsApp's end-to-end encryption doesn't prevent Meta from accessing message metadata and other user information - claims that could undermine user trust if they gain traction.
For now, the feature remains optional, rolling out over the coming weeks according to Meta's announcement. Power users and those facing genuine security threats will likely enable it immediately. But for the average WhatsApp user, the question becomes whether the added friction is worth the enhanced protection - or if it's overkill for everyday messaging needs.
Meta's timing reveals the pressure cooker environment for messaging privacy. Whether this is a genuine security enhancement or crisis management in response to the lawsuit, it signals that user expectations around privacy are forcing platforms to offer more granular control. For journalists, activists, and anyone facing elevated cyber threats, Strict Account Settings provides a much-needed option. But the broader question remains unanswered - can Meta convince users and regulators that WhatsApp's privacy protections are real, not just marketing claims? The next few months of legal discovery in that lawsuit might provide answers neither side wants.