Meta's WhatsApp messaging service began rolling out advanced security settings on Tuesday, offering journalists and public figures stronger protections against sophisticated cyberattacks by restricting certain features in exchange for heightened security.

The new "Strict Account Settings" option activates a series of defences with a single click, automatically blocking media and attachments from unknown senders, disabling link previews that appear when URLs are entered into chats, and silencing calls from unknown contacts. All three have been identified as potential vectors for surveillance and advanced hackers, according to Reuters.

WhatsApp acknowledged in a blog post that whilst all users' conversations are protected by end-to-end encryption, "a few of our users – like journalists or public-facing figures – may need extreme safeguards against rare and highly sophisticated cyberattacks". The feature can be activated by navigating to Settings, then Privacy, then Advanced.

Meta Platforms becomes the third major technology firm to offer enhanced security for high-risk users. In 2022, Apple launched "Lockdown Mode" for iPhone and macOS, which the company describes as "an optional, extreme protection" designed for the "very few individuals" who might be targeted by advanced digital threats. The feature disables most message attachment types and link previews and includes restrictions on FaceTime calls and web browsing.

Last year, Alphabet's Android began offering "Advanced Protection Mode" for users with heightened security awareness. Like Apple's offering, the feature trades functionality for security, including restricting users from downloading potentially risky apps from outside its in-house Play Store.

John Scott-Railton from The Citizen Lab, a research group based at the University of Toronto, called WhatsApp's announcement "a very welcome development". He told Reuters the feature will help protect dissidents and activists whilst encouraging other technology firms to improve their security offerings. "My hope is that others follow suit," Scott-Railton said.

Meta also announced it is adopting the Rust programming language in its media sharing functionality to protect users' photos, videos and messages from spyware attacks. The company described the development as the "largest rollout globally of any library written in Rust".

The social media giant said it is investing in a three-pronged approach to combat memory safety issues: designing the product to minimise unnecessary attack surface exposure, investing in security assurance for remaining C and C++ code, and defaulting to memory-safe languages for new code.

---