Where to Find WhatsApp Privacy Settings

On an Android phone, open WhatsApp, tap the three-dot menu in the upper-right corner, choose Settings, and then select Privacy. On an iPhone, open WhatsApp, tap the Settings tab at the bottom, and choose Privacy.

The exact wording or location of an option can vary slightly depending on your operating system, app version, region, and whether a feature is still being rolled out. Updating WhatsApp before beginning will save you from spending 15 minutes looking for a switch that your three-year-old app has never heard of.

Start With Privacy Checkup

Inside the Privacy menu, look for Privacy Checkup or Start Checkup. This guided tool walks through several categories, including who can contact you, what personal information other people can see, how chats are protected, and which account-security options are enabled.

Privacy Checkup is useful because WhatsApp has accumulated many separate privacy controls over the years. Instead of hunting through menus like a detective searching a badly organized filing cabinet, you can review the most important settings in one sequence.

Control Who Can See Your Personal Information

Your profile may reveal more than you realize. A profile photo, online status, biography, and recent activity can help strangers confirm that your phone number is active or learn details about your job, family, routines, and location.

Hide Your Last Seen and Online Status

Go to Settings > Privacy > Last Seen and Online. Depending on your app version, the available audiences may include:

• Everyone: Any WhatsApp user who can find your number may see the information.
• My Contacts: Only people saved in your address book can see it.
• My Contacts Except: Your contacts can see it except for selected people.
• Nobody: Your last-seen time is hidden from everyone.

You can usually set your online visibility to Everyone or Same as Last Seen. For most users, “My Contacts” or “My Contacts Except” provides a sensible balance. Choose “Nobody” when you do not want anyone auditing your response time like an unpaid attendance manager.

Remember that privacy is often reciprocal. When you hide certain activity information, WhatsApp may also limit your ability to view the same information about other users.

Limit Your Profile Photo and About Information

Under Privacy, open Profile Photo and select who can see it. Repeat the process for About. A public-facing profile photo can help customers recognize a business account, but a personal account usually does not need to display a family portrait to every stranger who obtains the phone number.

Consider using “My Contacts” for your profile photo and “Nobody” or “My Contacts” for the About section. Avoid including your home address, employer, daily schedule, travel dates, or other details that could assist impersonators.

Choose Who Can View Your Status Updates

WhatsApp Status works somewhat like a temporary social media story. Before posting, review Settings > Privacy > Status. You can generally share updates with all contacts, exclude selected contacts, or share only with specific people.

The “Only Share With” option is especially useful for family photos, travel updates, or workplace announcements. It prevents your plumber, former classmate, and the person who sold you a used desk in 2019 from receiving a front-row seat to your vacation.

Decide Whether to Use Read Receipts

Turn off Read Receipts when you do not want blue check marks to reveal that you opened a message. Disabling the setting generally means you also lose access to other people’s read information in applicable conversations and status views.

Read receipts are mainly a social privacy control rather than a major security feature. Turning them off can reduce pressure to respond immediately, but it will not conceal every form of activity across every WhatsApp feature. Treat it as a boundary-setting tool, not an invisibility cloak.

Stop Unwanted Group Invitations and Calls

Control Who Can Add You to Groups

Open Settings > Privacy > Groups. Choose My Contacts or My Contacts Except to prevent random people from directly adding you to groups.

When someone is not permitted to add you automatically, WhatsApp may allow that person to send a private invitation instead. You can then decide whether “Amazing Investment Winners 47” sounds like a useful community or an excellent place to lose both money and patience.

Silence Calls From Unknown Numbers

Go to Settings > Privacy > Calls and enable Silence Unknown Callers. Calls from unfamiliar numbers will not ring, although they may remain visible in your call list so you can review them later.

This is one of the best WhatsApp privacy settings for reducing spam, scam calls, and unwanted interruptions. It does not block every unknown caller permanently; it simply prevents those calls from demanding immediate attention.

Protect Your IP Address During Calls

Within the Calls privacy settings, look for Protect IP Address in Calls. When enabled, WhatsApp routes calls through its servers so the other participant cannot directly see your IP address and use it to estimate your general location or internet provider.

Relaying calls may slightly affect call quality in some circumstances, but it adds useful protection when speaking with unfamiliar people. WhatsApp states that the call remains end-to-end encrypted even when it is routed through its servers.

Add More Privacy to Individual Chats

Use Disappearing Messages

Open a chat, tap the contact or group name, and select Disappearing Messages. Available timers commonly include 24 hours, seven days, and 90 days. You can also open Settings > Privacy > Default Message Timer to apply a timer automatically to new conversations.

Disappearing messages reduce the amount of old conversation history sitting on devices. They work well for routine coordination, temporary addresses, travel plans, and conversations that do not need to become permanent digital archaeology.

They are not perfect. A recipient may copy a message, photograph the screen, forward information before it disappears, or save included media. Use disappearing messages to reduce retention, not to create magical evidence-destroying smoke.

Send Sensitive Media as View Once

When attaching a photo, video, or supported voice message, tap the 1 icon to send it as View Once. The media disappears from the chat after the recipient opens it.

View Once is helpful for temporary information such as a Wi-Fi password, quick reference image, or document detail that does not need to remain in chat history. However, you should never send highly sensitive material solely because the feature has a reassuring name. Another device can still photograph what appears on the screen.

Protect Important Conversations With Chat Lock

Open a conversation, tap the contact or group name, and choose Chat Lock. Locked conversations are moved away from the regular inbox and require your device password, fingerprint, face scan, or another configured credential.

Chat Lock also conceals conversation details in notifications. This is useful when you share a device, occasionally hand your phone to a child, or work in an office where apparently everyone has developed professional-level peripheral vision.

Where available, set a separate Secret Code for locked chats and hide the Locked Chats folder. Use a code that is not obvious and not identical to your phone unlock code.

Enable Advanced Chat Privacy

For particularly sensitive individual or group conversations, tap the chat name and look for Advanced Chat Privacy. When enabled, the feature can restrict chat exports, automatic media downloads, and the use of conversation content with certain AI features.

Advanced Chat Privacy reduces casual sharing outside WhatsApp, but it does not prevent every possible leak. Participants may still take screenshots or manually preserve information in some situations. Use it for support groups, confidential planning, community organizing, or conversations involving people who do not all know one another well.

Secure Your WhatsApp Account

Turn On Two-Step Verification

Go to Settings > Account > Two-Step Verification and create a six-digit PIN. This PIN adds another barrier when your phone number is registered with WhatsApp on a new device.

Do not use your birthday, 123456, or the last six digits of your phone number. Those choices are less “secret security code” and more “helpful suggestion for the attacker.” Add a recovery email address that you control, protect that email with strong authentication, and keep the address current.

Set Up a Passkey When Available

In Settings > Account > Passkeys, you may be able to create a passkey tied to your device’s fingerprint, facial recognition, PIN, or screen lock. Passkeys can make account verification easier while reducing dependence on passwords that can be guessed or phished.

Your device and password manager must support the feature. Before replacing a phone, confirm that your passkey or recovery method will remain accessible.

Encrypt Your Cloud Backups

WhatsApp messages are protected while being sent, but backups require separate attention. Open Settings > Chats > Chat Backup > End-to-End Encrypted Backup and follow the setup instructions.

Depending on availability, you may protect the backup with a password, a 64-digit encryption key, or a passkey using your face, fingerprint, or screen lock. WhatsApp says an end-to-end encrypted backup cannot be read by WhatsApp or the cloud-storage provider without the required credential.

Store recovery information carefully. Strong encryption also means there may be no friendly “Oops, I forgot everything” button capable of restoring access.

Review Linked Devices

Open Settings > Linked Devices and examine every browser, computer, tablet, or companion phone connected to your account. Log out any device you do not recognize or no longer use.

Be suspicious when a website, stranger, supposed employer, contest organizer, or “customer support agent” asks you to scan a QR code or enter a device-linking code. Scammers can use this technique to connect their device to your account. WhatsApp introduced additional warnings for suspicious linking attempts, but your judgment remains the final security setting.

Lock the Entire WhatsApp App

Look near the bottom of the Privacy menu for App Lock, Screen Lock, or Fingerprint Lock. Enable biometric authentication and choose how quickly WhatsApp should lock after you leave the app.

This protects all conversations when another person gains access to your unlocked phone. For stronger protection, also use a secure device PIN and configure the lock screen to hide message previews.

Review Phone Permissions

WhatsApp privacy does not end inside WhatsApp. Open your phone’s system settings, locate WhatsApp under Apps or Privacy and Security, and review access to contacts, photos, camera, microphone, location, nearby devices, and notifications.

Allow only permissions you actually use. For example, location access is unnecessary when you never share live locations. Photo access may be limited to selected images on supported operating systems. Microphone and camera access are needed for calls and recordings, but you can still review whether the app has broader permission than necessary.

Privacy-focused guidance also recommends reviewing desktop sessions, biometric app locks, backup behavior, and app permissions regularly rather than treating privacy setup as a one-time project.

Consider Strict Account Settings for Maximum Protection

WhatsApp introduced Strict Account Settings for people facing a higher risk of sophisticated attacks, including journalists, public figures, activists, executives, and others handling sensitive information.

Where available, open Settings > Privacy > Advanced > Strict Account Settings. The lockdown-style mode applies highly restrictive protections, such as silencing unknown callers, blocking attachments or media from unknown senders, and limiting selected functionality that could increase exposure.

The mode may be excessive for an average user who frequently communicates with new customers or receives legitimate files from unknown numbers. For a person facing targeted spyware or advanced phishing attempts, however, inconvenience is a reasonable price for a much smaller attack surface.

Recommended WhatsApp Privacy Settings

Balanced Setup for Most Users

• Last Seen and Online: My Contacts
• Profile Photo: My Contacts
• About: My Contacts or Nobody
• Status: My Contacts Except selected people
• Groups: My Contacts
• Silence Unknown Callers: On
• Protect IP Address in Calls: On
• Two-Step Verification: On
• App Lock: On
• End-to-End Encrypted Backup: On

More Private Setup for Public-Facing Numbers

• Last Seen: Nobody
• Online: Same as Last Seen
• Profile Photo: My Contacts or Nobody
• About: Nobody
• Groups: My Contacts Except most people
• Read Receipts: Off, when appropriate
• Default Message Timer: Seven or 90 days
• Advanced Chat Privacy: Enabled for sensitive chats
• Linked Devices: Reviewed frequently

Privacy Settings Cannot Replace Good Judgment

No WhatsApp setting can determine whether a person claiming to be your bank manager is actually a scammer using a stolen profile photo. Privacy controls reduce exposure, but safe behavior still matters.

• Never share your registration code, two-step verification PIN, recovery key, or device-linking code.
• Do not send Social Security numbers, banking credentials, or identity documents after an unexpected message.
• Verify urgent requests for money through a separate communication channel.
• Do not click unfamiliar links or install files sent by unknown contacts.
• Block and report suspicious accounts rather than arguing with them.

The Federal Trade Commission has repeatedly warned that scammers use WhatsApp for fake jobs, impersonation, investment fraud, and conversations that begin with apparently harmless messages from strangers. A privacy menu can reduce interruptions, but it cannot make an impossible job offer paying $600 per day suddenly become real.

Real-World Experience: What Changes After You Tighten WhatsApp Privacy

In everyday use, the most noticeable improvement usually comes from changing group permissions and silencing unknown callers. Before those settings are adjusted, a public phone number can become an open invitation to promotional groups, investment schemes, fake recruitment messages, and late-night calls from numbers located several time zones away. After restricting group additions and silencing unfamiliar callers, WhatsApp becomes much quieter. Legitimate unknown callers still appear in the call log, so the user can return a call after checking the number.

Hiding Last Seen and Online status produces a different kind of benefit. It does not stop hacking or malware, but it reduces social surveillance. Friends, coworkers, and clients can no longer assume that seeing you online creates an immediate obligation to answer them. This is particularly helpful for people who use WhatsApp for both work and personal communication. The phone may still be in your hand, but that does not mean you have volunteered for a 24-hour customer-service shift.

Chat Lock is most valuable in ordinary, slightly chaotic situations. Imagine handing your phone to a relative so they can view a photograph. A message from your doctor, attorney, partner, or manager suddenly appears. Without additional protection, the notification may reveal the sender and part of the conversation. With Chat Lock and hidden notification details, the same moment becomes far less dramatic. The feature is not only for secret agents and people leading double lives; it is useful for anyone whose phone occasionally passes through another person’s hands.

Encrypted backups create less visible but more important protection. Many users assume that because WhatsApp chats are end-to-end encrypted, every copy of those chats receives identical protection automatically. Backups are a separate layer. Enabling end-to-end encrypted backups closes a gap that becomes relevant when a cloud account is compromised or a device is replaced. The main practical lesson is to preserve the recovery credential safely. Privacy becomes rather inconvenient when it successfully protects your messages from everyone, including you.

Disappearing messages also change the character of conversations. They are excellent for temporary plans, addresses, meeting details, access instructions, and routine discussions that have little value after a few days. They are less appropriate for receipts, contracts, medical instructions, warranties, or information that may be needed later. A good approach is to enable a default timer for casual chats and turn it off in conversations that function as important records.

Advanced Chat Privacy can improve confidence in sensitive groups because it discourages easy exporting and automatic collection of media. However, the feature should not create false trust. Every participant can still observe the conversation, and determined people may find other ways to preserve information. The safest assumption remains simple: never send something that would cause serious harm if the recipient intentionally disclosed it.

Finally, reviewing Linked Devices often produces surprises. An old laptop, office browser, hotel computer, or forgotten tablet may remain authorized long after the user stops thinking about it. Logging out unused sessions takes seconds and removes an unnecessary access point. This small habit is especially valuable after traveling, changing jobs, repairing a computer, or allowing someone else to use a shared device.

The best WhatsApp privacy setup is therefore not the one with every switch turned to maximum restriction. It is the setup that matches how the account is used. A business owner may need messages from new customers, while a private family account may have no reason to accept contact from strangers. Review the settings, understand the tradeoffs, and choose restrictions deliberately rather than accepting defaults forever.

Conclusion

Learning how to use WhatsApp privacy settings takes only a few minutes, but it can substantially reduce unwanted calls, random group additions, exposed profile information, unsecured backups, and casual access to sensitive conversations.

Begin with Privacy Checkup, restrict personal information to trusted contacts, silence unknown callers, review group permissions, enable two-step verification, encrypt backups, lock sensitive chats, and inspect linked devices regularly. Users with an elevated risk of targeted attacks should also consider Strict Account Settings where available.

WhatsApp privacy is not a single switch. It is a collection of small choices that determine who can reach you, what they can learn about you, and how easily your information can leave the app. Make those choices yourself instead of allowing default settingsand the internet’s most enthusiastic strangersto make them for you.