Last updated: October 2026
- What Does It Mean to Secure Your WhatsApp?
- Which 10 Settings Should You Change First?
- How Do You Lock the Account Itself?
- How Do You Control Who Sees You?
- How Do You Cut Unwanted Contact?
- How Do You Make Chats Leave Less Behind?
- What Is the 15 Minute Secure WhatsApp Checklist?
- Worked Example: Secure WhatsApp in 15 Minutes
- How Do You Check a Single Chat Is Really Private?
- What Should You Do If You Think Someone Else Has Access?
- Key Takeaways
- Frequently Asked Questions
WhatsApp holds your family chats, work messages, photos, and voice notes. Most people never change its default settings. That leaves more visible than they expect, and it leaves the account easier to take over.
Quick answer: Turn on two-step verification, check Linked devices, set Last seen, Profile photo, About, Status, and Groups to My contacts, silence unknown callers, protect your IP address in calls, and set a default disappearing message timer. Then lock the app. This guide gives the exact path for each setting.
What Does It Mean to Secure Your WhatsApp?
To secure your WhatsApp means to control who can reach you, who can see your details, and who can sign in as you. It also means you limit what stays on your phone and in backups. Encryption alone does not do all of that work for you.
WhatsApp messages are end-to-end encrypted by default. That means only you and the person you message can read them in transit. But a linked computer, an unlocked phone, or a weak account setting can still expose your chats. Your settings close those gaps.
This guide covers only your own account and your own devices. Do not use these steps on someone else’s phone or account. If you share a phone, set up your own screen lock first, then change WhatsApp settings on your own account.
Which 10 Settings Should You Change First?
Change the 10 settings in the table below before you worry about advanced tools. They take about 15 minutes in total. Start at the top, because the first two settings protect the whole account.
| Setting | Where to find it | Change it to | Why it matters |
|---|---|---|---|
| Two-step verification | Settings, then Account | Turn on, add a PIN and email | Stops a new phone from registering your number easily |
| Linked devices | Settings, then Linked devices | Remove any device you do not recognize | Ends hidden access from a computer or second phone |
| App lock | Settings, then Privacy | Turn on fingerprint, face, or passcode lock | Blocks casual access if someone picks up your phone |
| Last seen and online | Settings, then Privacy | My contacts | Hides your activity pattern from strangers |
| Profile photo and About | Settings, then Privacy | My contacts | Keeps your photo and status text away from strangers |
| Status privacy | Settings, then Privacy | My contacts, or a smaller list | Stops strangers from viewing your daily updates |
| Groups | Settings, then Privacy | My contacts | Stops strangers from adding you to spam groups |
| Silence unknown callers | Settings, then Privacy | Turn on | Cuts scam and spam calls, while messages still arrive |
| Protect IP address in calls | Settings, then Privacy, then Advanced | Turn on | Hides your IP address during calls |
| Default message timer | Settings, then Privacy | 24 hours, 7 days, or 90 days | Limits how long new chats stay on devices |
On Android, open WhatsApp, tap the three dots, then tap Settings. On iPhone, tap Settings at the bottom right. The setting names below match the names WhatsApp uses in its official help center. Some screens may look slightly different by phone model or app version.
If you feel rushed, use Privacy checkup first. Open Settings, then Privacy, then Privacy checkup. It walks you through the main choices in one guided list. Then return to this guide for the account settings it does not cover.
How Do You Lock the Account Itself?
Start with account access, because it decides whether anyone else can use your number. Three settings matter most here. They are two-step verification, linked devices, and app lock.
Setting 1: Turn on two-step verification
Two-step verification adds a six digit PIN that WhatsApp asks for when your number is registered on a new phone. Open Settings, then Account, then Two-step verification, then Turn on. Choose a PIN you can remember, then add an email address you control.
The email address matters. WhatsApp can send a reset link to that email if you forget the PIN. Use an email you can still open if you lose your phone. Do not use a work email you may lose access to later.
Never share your PIN or any WhatsApp registration code with anyone. WhatsApp support will never ask for your code in a chat or call. If someone asks for it, treat the request as a scam, even if the person claims to be a friend in trouble.
WhatsApp may also offer a passkey on supported phones. A passkey links your account to your phone fingerprint, face, or screen lock. It can make sign in faster when two-step verification is on. You can still keep the PIN as a backup.
For a full account protection plan beyond WhatsApp, read our two-factor authentication guide for every account. It explains backup codes and hardware keys in plain steps.
Setting 2: Check linked devices
Linked devices let you use WhatsApp on a computer, tablet, or second phone. Open Settings, then Linked devices. Look at every entry, including the device type and the last active time. If you do not recognize a device, tap it and choose Log out.
WhatsApp says you should check linked devices regularly. That advice matters after you use a shared computer, a hotel computer, or a friend’s tablet. A forgotten login can stay active even when your phone is safe in your pocket.
Do not link WhatsApp Web on a computer you do not trust. If you must use one, log out before you leave, and check the list again from your phone. You can link up to four devices in addition to your primary phone, so an old entry is easy to miss.
Setting 3: Turn on app lock
App lock adds a second lock inside WhatsApp itself. Open Settings, then Privacy, then App lock. Turn it on and choose fingerprint, face, or your phone passcode, depending on your device. Then choose how quickly it locks, such as immediately.
App lock does not replace your phone lock. It adds one more barrier if someone borrows your unlocked phone for a moment. Set your phone to lock quickly too, and do not share your phone passcode with people who do not need it.
How Do You Control Who Sees You?
Privacy settings decide what strangers can learn from your profile, even if they never message you. WhatsApp offers four main choices for most items: Everyone, My contacts, My contacts except, and Nobody. My contacts is a strong default for most people.
Note one trade off. If you hide your last seen, you also cannot see other people’s last seen. If you turn off read receipts, you also cannot see read receipts from others, except in group chats. Choose the balance that fits your daily use.
Settings 4 and 5: Last seen, profile photo, and About
Open Settings, then Privacy, then Last seen and online. Choose My contacts, and choose whether to show the same setting for online status. This stops strangers from tracking when you are active. It also stops them from building a routine around your online hours.
Next, open Settings, then Privacy, then Profile photo. Choose My contacts. Then open About in the same Privacy screen and choose My contacts. Your photo and About text can reveal your face, workplace, or travel plans, so keep them inside your contact list.
If you use a photo of your child or your home, think twice before you set it to Everyone. A simple photo or a first name only gives strangers less to work with. You can still share a fuller photo inside a trusted family chat.
Setting 6: Status privacy
Status updates feel private, but by default your contacts can see them. Open Settings, then Privacy, then Status. Choose My contacts, or choose My contacts except and exclude people who do not need daily updates. You can also share with only a small list.
Remember that a contact can screenshot a status. Do not post travel dates, ticket barcodes, school names, or house keys in a status, even for contacts only. Share sensitive details in a direct chat with the one person who needs them.
Setting 7: Groups
Open Settings, then Privacy, then Groups. Choose My contacts. This stops a stranger who has your number from adding you to a spam, scam, or adult group without your consent. Contacts can still add you, but strangers must send you an invite instead.
If a group invite looks odd, do not join it to see what it is. Check the sender, check the group name, and ask a trusted contact if needed. Leave any group that starts posting links, prizes, or urgent payment requests. Block the sender if the messages continue.
How Do You Cut Unwanted Contact?
Two more privacy settings reduce noise and risk without blocking real messages. They are silence unknown callers and protect IP address in calls. Both live in Privacy, and both are easy to reverse if they cause a problem.
Setting 8: Silence unknown callers
Open Settings, then Privacy, then Silence unknown callers, and turn it on. Calls from numbers that are not in your contacts will not ring. They will still appear in your Calls tab, so you can return a real call later.
This setting does not block messages. A stranger can still send a message, and you can block and report that number. Use silence unknown callers during busy weeks, and keep it on if scam calls are common in your area.
Setting 9: Protect IP address in calls
Open Settings, then Privacy, then Advanced, then Protect IP address in calls, and turn it on. WhatsApp then routes your calls through its servers. That hides your IP address from the other person on the call.
Your IP address can reveal your general location and your internet provider. Most callers will never use it, but hiding it costs little. Call quality may drop slightly on a weak connection. If a call sounds poor, you can turn the setting off for that call period, then turn it back on.
How Do You Make Chats Leave Less Behind?
Disappearing messages reduce the trail a chat leaves on phones and in backups. They do not make a chat secret from the other person. The other person can still screenshot, forward, or copy a message before it disappears.
Setting 10: Set a default message timer
Open Settings, then Privacy, then Default message timer. Choose 24 hours, 7 days, or 90 days. New individual chats will then use that timer by default. Existing chats keep their old setting until you change each chat.
To change one chat, open the chat, tap the contact or group name, then tap Disappearing messages and choose a timer. For a family group with daily planning, 7 days often works well. For a one time purchase or travel chat, 24 hours may be better.
As an extra step for sensitive chats, you can also lock a chat. Open your chat list, press and hold the chat, then choose Lock chat. Locked chats move to a Locked chats folder and need your fingerprint, face, or passcode to open. This is a useful extra, not a replacement for the timer.
Also check your backup setting. Open Settings, then Chats, then Chat backup. If you back up chats to the cloud, turn on end-to-end encrypted backup where it is offered. That way a cloud copy is not readable without your password or 64 digit encryption key. Store that key or password somewhere safe and offline.
What Is the 15 Minute Secure WhatsApp Checklist?
Use this checklist in order, and tick each item as you finish it. The order matters. Account access comes first, visibility comes second, and cleanup comes last. If you only have five minutes, do the first three rows.
| Check | If you see this | Do this now | Time |
|---|---|---|---|
| Two-step verification | It is off, or no email is saved | Turn it on and add a recovery email | 2 minutes |
| Linked devices | An unknown computer or phone | Log it out at once | 1 minute |
| App lock | WhatsApp opens with no lock | Turn on fingerprint, face, or passcode lock | 1 minute |
| Privacy audience | Last seen or photo set to Everyone | Change them to My contacts | 3 minutes |
| Groups and calls | Anyone can add you, or unknown calls ring | Set Groups to My contacts and silence unknown callers | 2 minutes |
| Message timer | New chats never disappear | Set a default timer of 7 days | 1 minute |
| Backup | Cloud backup is not encrypted | Turn on end-to-end encrypted backup | 5 minutes |
Worked Example: Secure WhatsApp in 15 Minutes
Maya opens WhatsApp on a Saturday morning. She first turns on two-step verification and adds her personal email. Then she opens Linked devices and finds an old laptop from a library visit. She logs it out at once.
Next, Maya sets Last seen, Profile photo, About, and Status to My contacts. She sets Groups to My contacts and turns on silence unknown callers. She then sets a 7 day default message timer for new chats.
Finally, Maya turns on app lock and end-to-end encrypted backup. She writes the backup password on paper and stores it in a locked drawer. The whole task takes about 15 minutes, and she repeats the linked devices check once a month.
How Do You Check a Single Chat Is Really Private?
Open the chat, tap the contact name, then open Encryption. WhatsApp shows a security code and a QR code. If you and the other person are together, scan the code on their phone. If you are apart, compare the numbers by voice or in a separate trusted channel.
If the code changes, WhatsApp can alert you. Open Settings, then Account, then Security notifications, and turn the alerts on. A code change can happen when someone reinstalls WhatsApp or changes phones. It is not proof of spying by itself, but it is a reason to check before you share sensitive details.
What Should You Do If You Think Someone Else Has Access?
Act in this order on your own account. First, open Linked devices and log out every device you do not recognize. Second, turn on two-step verification or change your PIN. Third, change the password for the email linked to your two-step verification.
Next, check for warning signs in your own chats. If messages show as read when you did not read them, or if chats you did not send appear, review the WhatsApp spying signs guide. It explains which signs matter and which ones are normal glitches.
Also check your whole phone, not just WhatsApp. Strange battery drain, new apps, or changed settings can point to a wider problem. Read the guide to signs your phone is being tracked before you change many settings at once. If you find unwanted monitoring software on your own phone, follow the steps in how to remove stalkerware carefully.
Android owners should also run the checks in how to detect spyware on Android. Those checks cover unknown apps, device admin apps, and unusual permissions. Combine them with the WhatsApp steps above, and change your main passwords from a clean device if you find anything suspicious.
Key Takeaways
- Turn on two-step verification with a PIN and a recovery email you control.
- Check Linked devices often and log out any device you do not recognize.
- Set Last seen, Profile photo, About, Status, and Groups to My contacts.
- Silence unknown callers and protect your IP address in calls.
- Set a default disappearing message timer and use end-to-end encrypted backup.
- Lock the app, check security codes for sensitive chats, and repeat the check monthly.
Frequently Asked Questions
What is the most important WhatsApp security setting?
Two-step verification is the most important setting. It adds a PIN that is needed when your number is registered on a new phone.
How do I check if someone else is using my WhatsApp?
Open Settings, then Linked devices. If you see a device you do not recognize, tap it and choose Log out at once.
Should I set Last seen to Nobody?
My contacts is a good balance for most people. Nobody gives more privacy, but you also cannot see other people last seen.
Do disappearing messages make chats fully private?
No. The other person can still screenshot or forward a message before it disappears. Disappearing messages only limit how long chats stay on devices.
Does two-step verification replace my phone lock?
No. You still need a strong phone lock and app lock. Two-step verification protects account registration, while locks protect the phone itself.
Start today with two-step verification and linked devices. Those two steps take under five minutes. Then work through the rest of the list at your own pace.
Do a five minute check each month. Open Linked devices, confirm your privacy audience is still My contacts, and confirm your backup is still encrypted. Small, regular checks keep a strong setup strong.
Keep this page saved, because it shows how to secure your WhatsApp step by step whenever a setting changes.
