WhatsApp’s New Lockdown Mode Boosts Security Against Cyberattacks
▼ Summary
– WhatsApp is launching “Strict Account Settings” to protect high-risk users like journalists by automatically blocking unknown media and silencing unknown calls.
– The new setting also limits functionality by disabling link previews, restricting group adds, and hiding profile details from non-contacts.
– WhatsApp advises that most people do not need this feature, as it is intended for those targeted by sophisticated cyberattacks.
– The company has previously enhanced security following incidents like the Pegasus spyware attack, resulting in a lawsuit and damages against the NSO Group.
– Meta denies a lawsuit’s claim that it can access private WhatsApp chats, stating the platform uses the secure Signal protocol for encryption.
A new security feature from WhatsApp is designed to provide an extra layer of protection for users who face heightened risks of targeted digital attacks. The “Strict Account Settings” mode, often called a lockdown feature, automatically blocks media and attachments from unknown senders and silences calls from contacts not saved in your phone. This tool is specifically built for individuals like journalists, activists, and public figures who might be singled out by sophisticated cyber campaigns. The company itself advises that most everyday users will not need to activate these stringent protections.
When enabled, this setting significantly alters the app’s functionality to minimize potential attack vectors. It turns off link previews, which can sometimes be used to deliver malicious code. It also restricts group additions by allowing only your contacts to add you to WhatsApp groups, a common method for initiating contact in phishing attempts. Furthermore, it blocks non-contacts from viewing your profile photo, “about” information, and online status, reducing the amount of personal data visible to strangers. The overarching goal is to create a digital fortress that severely limits how unknown entities can interact with or gather intelligence on a targeted user.
This development is part of WhatsApp’s ongoing effort to strengthen its security posture, particularly following high-profile incidents involving spyware. The app has long employed end-to-end encryption for messages, but its defenses were scrutinized after users were reportedly targeted by tools like the NSO Group’s Pegasus spyware, which could exploit phone calls to gain device access. Meta, WhatsApp’s parent company, subsequently filed a lawsuit against the NSO Group, securing a substantial monetary award. Just last year, WhatsApp also disrupted a separate spyware operation that was focusing on journalists and members of civil society.
Despite these security measures, Meta is currently contending with a legal challenge that alleges the company has the ability to access private WhatsApp conversations. A Meta spokesperson has vehemently denied these claims, labeling the lawsuit as baseless and emphasizing that WhatsApp relies on the robust Signal protocol for its encryption, which is widely respected in the security community.
The Strict Account Settings are scheduled to become available globally in the next few weeks. Users who wish to enable it can navigate through their settings: open WhatsApp, go to ‘Privacy,’ select ‘Advanced,’ and then activate the option. It is important to note that this feature can only be turned on from a user’s primary smartphone and cannot be activated through the WhatsApp Web or desktop applications, ensuring the security change is initiated from a trusted device.
(Source: The Verge)
