How to configure WhatsApp to be more secure

WhatsApp is, undeniably, the messaging app we use most often. Besides being fast and convenient, it encrypts all your conversations end-to-end , so no one intercepting the traffic (not even the platform itself) can read your messages. Even so, there are a number of settings and habits you should activate to further protect your account and personal data.

In this practical and comprehensive guide, you'll find everything you need to configure the app like a pro: from privacy and two-step verification to encrypted backups, chat locking, and control of linked devices . You'll see it's not complicated, and with a little tweaking, your WhatsApp will be much more secure.

The basics you should know about WhatsApp security

The foundation of WhatsApp's security is end-to-end encryption based on the Signal Protocol, an open standard audited by the community . This means that messages, audio, photos, videos, documents, and calls are encrypted on your phone and only decrypted on the recipient's.

This approach prevents unauthorized access during data transmission and also makes it impossible for third parties to eavesdrop on your conversations from the servers. It's a stricter approach than other apps where encryption isn't the default , so you're better protected from the start.

Visible privacy: decide what you show and to whom

First, it's a good idea to check what others can see about you. Go to Settings > Account > Privacy (on iPhone , from WhatsApp Settings) and review these sections. The goal is to limit the information shared without sacrificing convenience.

• last time once and onlineYou can choose Everyone, My contacts, My contacts except… or Nobody. Additionally, you can set the "Online" status to "Same as last seen time". The less visible your online habits are, the fewer clues you'll give away..
• Profile picture and infoConfigure these fields as “My contacts” or “Nobody”. You prevent strangers from downloading your image or collecting personal data.
• Status: filter with “My contacts”, “My contacts, except…” or “Only share with…”. Very useful for excluding those who shouldn't see your stories.
• Groups: sets “My contacts” or “My contacts, except…”. This prevents anyone from adding you to groups without your permission..

If you change these settings to hide your last seen time or check-ins, remember the mirror effect: you won't see the same information on others either . It's a reasonable trade-off for your privacy.

Confirm readings and manage the famous double blue tick

In Settings > Privacy, you'll find "Read receipts." Turn it off if you don't want the blue ticks to appear when you read a message. Note: Read receipts will still appear in group chats, even if you have this option disabled.

This preference also affects what you see: if you don't send confirmations, you won't receive them from others in individual chats either . Consider what you prefer; many people disable this feature for peace of mind.

Strengthen your account: two-step verification, passkeys, and linked devices

The biggest risk to your account is that someone could get hold of your number (SIM cloning, theft, line recycling) and try to register it on another phone. Two-step verification stops that attempt in its tracks.

Go to Settings > Account > Two-step verification and create a 6-digit PIN. Also, enable a recovery email : if you forget your PIN, WhatsApp can send you a message with a link to reset it. If you don't use it, your account could be locked for up to 7 days as a security measure. If that happens, see how to unlock your account.

In addition to your PIN, WhatsApp offers "passkeys" to confirm logins. You can enable them in Settings > Account > Passkeys to log in using modern methods that are more resistant to phishing.

It's a good idea to frequently check your connected devices: Settings > Paired devices. If you see anything unusual, select the device and sign out immediately . Regularly checking your devices is a good habit. Learn to view and close open sessions to maintain control.

Screen lock and app lock: the physical barrier

Start by protecting your phone: activate a secure passcode, fingerprint, or Face ID within the system itself. Remove message previews from the lock screen in your phone's notification settings so no one can read them at a glance.

Next, protect the WhatsApp app itself: Settings > Privacy > App Lock (iPhone) or Fingerprint Lock ( Android ). On iOS, you can choose when to request Face ID/Touch ID: immediately, after 1 minute, 15 minutes, or 1 hour . On Android, set the fingerprint unlock to activate when opening the app.

This double barrier is key if you often leave your phone on the table or move around a lot on public transport. A moment of inattention without locking it could expose all your chats.

Chat lock, secret codes, and hidden folder

For sensitive conversations, you can lock chats. Tap and hold a chat and select "Lock Chat." The chat will be moved to a separate folder and will require your fingerprint or Face ID to access.

You can create your own secret code (on iOS you can also assign a different code than your phone's). If you prefer, hide the locked chats folder so it only appears when you type your secret code into the WhatsApp search bar.

Important: Locked chats are not protected on linked devices. And if you forget your secret code, you'll have to go to Privacy Settings > Chat Lock > "Unlock and clear all" ; you'll regain access, but you'll lose previous messages in that folder.

If you need to delete all your locked chats at once, WhatsApp lets you do so from Settings > Privacy > Locked Chats. The "Unlock and delete locked chats" option clears the content and settings from that folder.

Security notifications and code verification

Encrypted chats have a unique security code. From the contact's information (enter the chat, tap their photo, and tap "Encryption"), you can compare it with the code your conversation partner received via phone call or another channel. If it matches, you can confirm that there is no impersonation in that conversation.

To go a step further, enable "Security notifications" in Settings > Account > Security. The app will alert you if a contact's security code changes , which can happen when reinstalling WhatsApp or switching phones. This is a useful warning against potential scams.

Control who can be added to your WhatsApp (groups, calls, and blocking)

Groups can be a breeding ground for spam or unknown people. In Privacy > Groups, adjust "My contacts" or "My contacts except…" to decide who can invite you. Reducing random invitations minimizes risks.

To stop the barrage of calls from unknown numbers, go to Privacy and turn on "Mute unknown calls." They'll still come in, but they won't ring or vibrate , and you'll see them in the call log in case any are legitimate.

If a contact is bothering you, sending you suspicious links or ads, block them from the conversation (three dots > More > Block) or from Settings > Privacy > Blocked. Blocking cuts off contact, and you can also report them if you suspect malicious activity . If you later need to unblock a contact , here's how.

Temporary messages and one-time content

Disappearing messages help you reduce your digital footprint. Open the chat, tap "Disappearing messages," and choose the duration. You can also set a default duration for new chats in Privacy > Default duration.

Remember the limitations: even if the message disappears, the files you saved remain on your device , and anyone can take screenshots while the content is visible. Use it as a bonus, not as a substitute for good practices.

For sensitive content, you have the "View Once" option when sending photos, videos, or voice notes: tap the icon with the number 1 before sending. That file will open only once and won't remain in the chat.

Real-time location and IP protection on calls

WhatsApp lets you share your live location in individual or group chats. Check your active location sessions in Privacy > Live Location. Turn off any location sharing if you no longer need it.

By default, calls attempt to connect directly between devices to improve audio quality, which could expose your IP address. If you're concerned, go to Privacy > Advanced and enable "Protect IP address on calls ." You'll gain privacy with a potentially minimal impact on quality. You can also consider using a WhatsApp proxy to manage your IP address.

End-to-end encrypted backups

Backups are not stored on WhatsApp servers, but on iCloud (iPhone) or Google Drive (Android). To protect them, enable "End-to-end encrypted backup" in Settings > Chats > Chat backup. You'll need to create a password or save a 64-digit key. Keep it safe.

If you prefer, you can start the setup from “Privacy Review” (in Privacy > Privacy Review > “Add more privacy to your chats” > Encrypted backups). A step-by-step wizard will guide you through enabling encryption.

You can also transfer your chats between devices without relying on the cloud: on iPhone, go to Settings > Chats and use “Transfer chats to iPhone” or “Transfer chats to Android” ; on Android, you’ll find “Transfer chats” to move to another Android device.

Storage and data: automatic headless downloads

Avoid accidentally downloading malware by adjusting automatic downloads. In Settings > Storage and data, check which media is downloaded using mobile data, Wi-Fi, or while roaming. My recommendation: limit automatic downloads to photos over Wi-Fi and leave documents, audio, and videos on manual . If you're unsure about a file's safety, check if it's safe to download APK files on Android before opening executables.

In work chats or large groups, this measure makes all the difference. By manually checking before downloading, you reduce your exposure to malicious files and also control the space they occupy.

Request your account report

WhatsApp lets you request a report with your account details and settings: Settings > Account > “Request account info”. You'll receive the report to download in about three days . It includes information such as settings, groups, phone number, devices, operating system, IP address of your last connection, etc.

It's a quick way to see exactly what information the app has and save a copy of your settings. It's very useful for personal audits or migrations.

Best practices in chats, groups and video calls

No matter how many settings you activate, your judgment is paramount. In video calls, avoid showing intimate content or documents with personal information (ID cards, bills, addresses). Sextortion and identity theft often exploit this type of material.

In groups, don't share links that seem "too good to be true," and alert your contacts if you spot any suspicious campaigns. The more digitally savvy everyone is, the less likely anyone is to fall for it.

Update the app and be careful with third-party applications

Always keep WhatsApp updated to the latest version from the official store (App Store or Google Play). Updates include security patches and privacy improvements that you shouldn't miss.

Regarding third-party apps for setting passwords or locking apps (like "AppLock"), be very cautious. While they exist and can be useful on certain phones, they add an attack surface and sensitive permissions . If you decide to use them, install only from official app stores, check ratings and privacy policies, and be wary of unofficial WhatsApp features.

Quick steps for security emergencies

If you suspect someone has tried to register your WhatsApp account, that your SIM card has been duplicated, or you see unfamiliar devices in "Linked Devices," act immediately. Re-register your number, change your two-step verification PIN, check your devices, and block suspicious contacts . Also, check for keywords that could potentially lock your account if you receive strange messages that seem designed to trigger suspension.

And if you think your conversations might be at risk because your phone is unlocked and accessible to others, prioritize these measures: enable app lock, disable notification previews, and set a strong screen password . That alone significantly raises the bar.

Biometric lock on Android and Face ID/Touch ID on iPhone

On Android, go to Settings > Privacy > “Fingerprint lock” and follow the steps to register your fingerprint if you haven't already done so. The app will ask for your fingerprint when you open WhatsApp after the inactivity period you define.

On iPhone, Settings > Privacy > “Screen Lock” lets you require Face ID or Touch ID after a certain time frame: immediately, after 1 minute, 15 minutes, or 1 hour. Choose a comfortable balance; 1 minute is usually a good option.

Extra tips for your daily life

Avoid opening unexpected links, even if they're sent by a known contact; attackers compromise accounts and spread scams from them. Check the context through another channel if something seems suspicious.

When sharing locations, set short durations and turn it off when finished. Real-time sharing is useful, but it should only last as long as necessary.

If you handle professional or sensitive data, establish good habits: block relevant chats, use disappearing messages, and back up with encrypted copies. Combining multiple layers reduces the impact if something goes wrong.

With all of the above in place, WhatsApp becomes a much more robust tool for your personal and professional life. You've limited what you share, strengthened access, encrypted your backups, and added barriers against prying eyes ; now the key is to maintain discipline: check devices, update the app, and be wary of anything suspicious. This way, your privacy doesn't depend on luck, but on a well-thought-out configuration.

Isaac

Passionate writer about the world of bytes and technology in general. I love sharing my knowledge through writing, and that's what I'll do on this blog, show you all the most interesting things about gadgets, software, hardware, tech trends, and more. My goal is to help you navigate the digital world in a simple and entertaining way.