WhatsApp has rolled out some of its biggest privacy and security changes in 2026, and most users haven’t even noticed them yet. From a completely upgraded two-step verification system to a lockdown mode built for high-risk users, these updates aim to make your account harder to hack and your chats harder to leak. Here’s a complete breakdown of the latest WhatsApp privacy and security updates, what each one actually does, and how to turn it on.
1. Two-Step Verification Now Uses a Full Password
WhatsApp has replaced its old six-digit PIN with a full alphanumeric password for two-step verification. This password can include letters, numbers, and special characters, making it significantly harder for attackers to guess or brute-force.
Two-step verification acts as a backup lock. Even if someone gets your one-time SMS code, they still can’t get into your account without this password. You can update it from Settings > Account > Two-step verification.
2. More Context Before You Answer Unknown Calls
Scam calls on WhatsApp have been rising, and this update directly targets that problem. On Android, when you receive a call from a number that isn’t saved in your contacts, WhatsApp now shows extra context, such as whether the number is registered in a different country and whether you share any groups with the caller.
This small addition gives users a moment to pause before answering, instead of picking up out of instinct or urgency, which is exactly what scammers rely on.
3. Multiple Passkeys Per Account
Passkeys let you log into WhatsApp using your fingerprint, Face ID, or your phone’s screen lock, removing the need for SMS codes or PINs entirely. Meta says more than one billion people have already set one up.
The newest update allows users to add more than one passkey to a single account. This matters for anyone who owns both an Android and an iOS device, since each device can now have its own passkey linked to the same WhatsApp account. Passkeys can be managed from Settings > Account > Passkeys.
4. Strict Account Settings (Lockdown Mode)
Strict Account Settings is a lockdown-style protection mode aimed at users who may face targeted, sophisticated attacks, such as journalists, activists, or public figures. When turned on, it locks several account settings to their most restrictive state.
This includes automatically blocking media and attachments from people outside your contacts, which reduces exposure to spyware often delivered through malicious files or links. It’s an opt-in feature, so regular users won’t see any change unless they enable it themselves.
5. Advanced Chat Privacy
Advanced Chat Privacy adds an extra layer of protection for sensitive one-on-one chats and groups, especially ones where you may not personally know every member, such as a support group or a community discussion.
Once turned on for a specific chat, it blocks other participants from:
- Exporting the chat
- Auto-downloading shared media to their device
- Using messages in that chat with AI features
It’s worth noting what this feature does not do: it can’t stop someone from taking a screenshot. It only closes automated ways of pulling content out of a chat, not manual ones. You can enable it by tapping the chat name and selecting Advanced Chat Privacy.
6. Usernames – Hiding Your Phone Number
WhatsApp is rolling out usernames as a privacy-first way to connect with people without sharing your phone number upfront. Once set up, people can message you using your username instead of needing your number.
This is particularly useful for anyone who deals with new contacts regularly, such as sellers, freelancers, or community admins, and wants to avoid handing out their personal number to strangers.
7. Incognito Chat with Meta AI
For users who chat with Meta AI inside WhatsApp, Incognito Chat adds a private mode built on WhatsApp’s Private Processing system. This is meant to limit what’s visible or retained when you’re asking Meta AI something sensitive, keeping that interaction more contained than a regular AI chat.
How to Turn On the Most Important WhatsApp Security Features
- Open WhatsApp and go to Settings > Account.
- Tap Two-step verification and set a strong alphanumeric password.
- Tap Passkeys and add one for each device you use.
- For sensitive chats, tap the chat name and turn on Advanced Chat Privacy.
- If you’re a high-risk user, enable Strict Account Settings from the same Account menu.
Frequently Asked Questions
Is WhatsApp still end-to-end encrypted?
Yes. End-to-end encryption remains the default for personal messages and calls, meaning only the sender and recipient can access the content. These new features add extra layers on top of that existing protection.
Do I need to update the app to get these features?
Yes. Most of these updates are rolling out gradually through app updates, so keeping WhatsApp updated on both Android and iOS ensures you get access as soon as it’s available in your region.
What is Strict Account Settings meant for?
It’s designed for users at higher risk of targeted cyberattacks, such as journalists or public figures, rather than everyday users. It locks the account into its most restrictive, safest configuration.
Can Advanced Chat Privacy stop screenshots?
No. It blocks automated methods like chat exports, auto-downloads, and AI use of messages, but it cannot prevent someone from manually taking a screenshot.
WhatsApp’s direction in 2026 is clear: give users more control over their own account security, without requiring technical know-how to use it. Turning on even two or three of these settings, like a stronger password and passkeys, meaningfully lowers your risk of getting hacked or scammed.
