WhatsApp Rolls Out “Strict Account Settings” to Counter Advanced Cyber Threats

WhatsApp has introduced a new security feature dubbed “Strict Account Settings”, part of a broader strategy to strengthen protection for users who face elevated digital threats, including journalists, activists, and public figures. While the platform already provides end-to-end encryption to more than three billion users worldwide, the company says certain users require additional layers of defence against advanced and state-level cyber attacks. The new lockdown-style feature is available under Settings > Privacy > Advanced and allows users to place their accounts into WhatsApp’s most restrictive security mode. Once activated, the setting automatically blocks all attachments and media sent by unknown contacts, eliminating a common attack vector where malicious code is embedded in files disguised as images, videos, or documents. WhatsApp confirmed the feature is being rolled out gradually and will be available to all users in the coming weeks. In parallel, WhatsApp has completed a major internal security overhaul by migrating significant portions of its media-handling codebase from C++ to the Rust programming language. Engineers replaced approximately 160,000 lines of C++ code with 90,000 lines of Rust, significantly improving memory safety and reducing vulnerabilities commonly exploited through memory-based attacks. The move reflects lessons learned from past incidents such as the 2015 Stagefright vulnerability, which exposed millions of devices to malware hidden in media files. To further harden its defences, WhatsApp has also deployed a new security layer called Kaleidoscope, designed to intercept malicious files before they reach a user’s device. Kaleidoscope identifies files masquerading as legitimate media, scans PDFs for embedded scripts, and validates file formats against global standards to prevent exploitation of underlying operating system libraries. Together, these changes reinforce WhatsApp’s long-term commitment to securing private communication not only through encryption, but across the entire software stack. Why This Matters Cyber threats are becoming more targeted, sophisticated, and politically motivated. WhatsApp’s move signals a shift from user-level privacy protection to platform-wide cyber resilience, addressing risks that encryption alone cannot mitigate. For high-risk users, the new settings significantly reduce exposure to spyware and zero-click exploits. At a broader level, this reflects how global tech platforms are adapting to rising cyber warfare, surveillance risks, and regulatory scrutiny. Opportunity Sector Cybersecurity & Digital Safety Privacy-Focused Software Development Secure Communications Infrastructure Rust-Based Enterprise Software Digital Risk Management #CyberSecurity #DigitalPrivacy #WhatsAppSecurity #SecureCommunication #TechInnovation #DataProtection #MotoSeenAfrica