Profile and Last Seen Visibility
Open WhatsApp. Tap the three dots in the top right corner. Go to Settings > Privacy.
Under Last Seen, change from “Everyone” to “My Contacts” or “Nobody.” Choosing “Nobody” means you also lose the ability to see when others were last active. It is a two-way switch. Set Online to “Same as Last Seen.”
Set Profile Photo to “My Contacts.” If it is on “Everyone,” anyone with your number can download your photo. Scammers use stolen profile pictures to create fake accounts and message your contacts asking for money. Happens regularly in India.
Set About to “My Contacts.”
For Status, go to Status Privacy and pick “My Contacts Except...” or “Only Share With...” to control who sees your updates.
Read Receipts are the blue ticks. Toggle them off under Privacy > Read Receipts to read messages without the sender knowing. You will also stop seeing blue ticks on messages you send. Does not apply to group chats.
On iPhone, the path is almost identical: open WhatsApp, tap Settings (bottom right), then Privacy. Same options, same layout.
These six changes take about ninety seconds total. They control who can see your activity, your face, and your status updates. For women in India who report being monitored through online status by people they do not want hearing from, turning off Last Seen alone can make a noticeable difference in day-to-day peace of mind.
One thing worth knowing: even with Last Seen set to “Nobody,” WhatsApp still shows a brief “online” indicator when you are actively using the app if you have not also changed the Online setting. Both need to be restricted for full effect. People miss this because the two settings are listed separately in the menu, and changing one does not automatically change the other.
Two-Step Verification
Go to Settings > Account > Two-step verification > Enable.
Create a six-digit PIN. Not your birthday. Not 123456. Not your ATM PIN. WhatsApp asks for an email address as backup. Use one you actually check. If you forget the PIN and have no recovery email, you are locked out for seven days with no workaround.
What this does: if someone tries to register your phone number on a new device, they need this PIN on top of the SMS verification code. SIM-swapping attacks are a documented problem in India, where a scammer convinces a telecom operator to port your number to their SIM card. Two-step verification stops them from taking over your WhatsApp even if they intercept the SMS code. WhatsApp will prompt you to re-enter the PIN roughly once a week so you do not forget it.
Same path on iPhone: Settings > Account > Two-step verification > Enable. No difference in behaviour between Android and iOS here.
While you are in Account settings, tap Request Account Info. Takes about three days to generate. It produces a downloadable report of the data WhatsApp holds on your account. Worth doing once.
If anyone contacts you claiming to be “from WhatsApp” and asks for your verification code or PIN, that is a scam. WhatsApp will never ask you for those over chat or call. Block and report the number.
A related point: if you receive an SMS with a WhatsApp verification code that you did not request, that means someone is trying to register your phone number on their device. Do not share the code with anyone. If it keeps happening, enabling two-step verification is what prevents them from succeeding even if they somehow get hold of the code.
Disappearing Messages
Open any chat. Tap the contact name or group name at the top. Select Disappearing Messages. Pick a timer: 24 hours, 7 days, or 90 days. All new messages in that chat will auto-delete after the timer runs out.
To set a default for all new chats: Settings > Privacy > Default Message Timer. Pick your preferred duration. Every new conversation you start from that point will have disappearing messages enabled automatically.
The 7-day option works well for group chats that pile up thousands of messages nobody reads. For sharing sensitive information like an OTP or a temporary password, 24 hours is better. Keep in mind that the other person can screenshot or forward the message before it disappears. This is a cleanup tool, not a security guarantee.
View Once is separate. When sending a photo or video, tap the “1” icon (circle with a 1 inside it) before hitting send. The recipient opens it once, then it is gone. Cannot be forwarded, saved, or starred. Indian users share Aadhaar cards, PAN cards, and bank statements over WhatsApp constantly. Send these as View Once. Otherwise the document sits in the recipient’s gallery, gets backed up to their cloud, and stays there permanently. If their phone is lost or compromised, your identity documents go with it.
On iPhone, View Once works the same way. The “1” icon appears next to the send button when you are about to share a photo or video.
A note about disappearing messages in group chats: only group admins can turn them on or off for the group. If you are a regular member, you cannot change the group’s disappearing message setting. You can request it from the admin or use View Once for individual photos and documents you send to the group.
Also keep in mind that disappearing messages only affect new messages sent after the feature is turned on. Existing messages that were sent before you enabled the timer will stay in the chat permanently. If you want to clear old messages as well, you need to use the “Clear Chat” option separately, and that only clears them on your device, not on the other person’s phone.
Chat Backup Encryption
Go to Settings > Chats > Chat Backup > End-to-end Encrypted Backup > Turn On.
WhatsApp encrypts messages between phones by default. But backups to Google Drive (Android) or iCloud (iPhone) are stored unencrypted unless you specifically enable this setting. That means Google, Apple, law enforcement with a warrant, or anyone who breaks into your cloud account can read every message you have ever backed up. All the other privacy settings you just changed become meaningless if your entire chat history sits in plain text on a cloud server.
WhatsApp will ask you to create a password or a 64-digit encryption key. Pick the password option. Choose something strong that you do not use anywhere else. Write it down in a physical notebook or store it in a password manager. If you forget this password, the backup is gone permanently. WhatsApp cannot recover it because they do not hold your encryption key.
Once enabled, backups are encrypted before they leave your phone. Google and Apple cannot read them. Neither can WhatsApp.
While you are in Chat Backup, check the frequency setting. Daily, weekly, monthly, or manual. Daily means you lose at most one day of messages if you switch phones. Monthly saves storage but risks more data loss.
If you do not care about keeping chat history at all: Chat Backup > Back up to Google Drive > Never (on Android) or turn off iCloud backup for WhatsApp (on iPhone). Most private option. Also means if your phone dies, every conversation goes with it.
On iPhone specifically, you can also go to your device Settings > Apple ID > iCloud > Manage Storage > WhatsApp to see how much space your current backup uses. If it is several gigabytes and you never turned on encryption, that is several gigabytes of readable chat history sitting on Apple servers.
A common concern: does enabling encrypted backup slow down the backup process? Slightly, yes. The encryption step adds a few seconds to each backup cycle. On a phone with years of chat history and thousands of media files, the first encrypted backup can take significantly longer than usual because it needs to re-encrypt everything from scratch. Subsequent daily backups are incremental and much faster. The performance difference is not noticeable for most users after that initial backup completes.
Blocked Contacts
Go to Settings > Privacy > Blocked Contacts. Tap the add icon (top right on Android, “Add New” on iPhone) and select the contact you want to block.
Blocked contacts cannot send you messages, see your Last Seen, profile photo, About, or Status updates. They cannot call you through WhatsApp. Their messages will show a single tick (sent) on their end but will never reach your phone. They are not notified that you blocked them, but they can probably figure it out from the missing second tick and the absence of your profile photo.
You can also block someone directly from a chat. Open the chat, tap the three dots (Android) or the contact name (iPhone), and select Block. For numbers not in your contacts that message you, WhatsApp shows a Block button directly in the chat window.
Review your blocked list periodically. If you blocked someone years ago and forgot, they are still blocked. Unblocking is simple: go to the Blocked Contacts list, tap the contact, and confirm unblock.
If you are getting repeated messages from unknown numbers, blocking individually gets tedious. That is where the Group Privacy and Silence Unknown Callers settings (covered below) help more.
One more detail about blocking: if you block someone and then unblock them later, you will not receive any messages they sent during the time they were blocked. Those messages are lost permanently. WhatsApp does not deliver them retroactively. If you think you might want to hear from someone again, consider muting the conversation instead of blocking, which silences notifications but still lets messages come through.
Group Privacy
Go to Settings > Privacy > Groups. Change from “Everyone” to “My Contacts.”
Now only people saved in your contacts can add you to groups directly. Anyone else has to send you an invite link first, which you can accept or ignore. This single toggle stops the flood of random real estate groups, insurance spam groups, and political campaign groups that Indian WhatsApp users deal with every election season and, increasingly, every week.
It also keeps your phone number from being exposed to hundreds of strangers in those groups. Every member of a WhatsApp group can see every other member’s phone number. Getting added to a spam group with 200 unknown people means 200 unknown people now have your number.
If you are already stuck in unwanted groups: open the group, tap the group name at the top, scroll down, tap Exit Group, confirm, then delete the chat. Do not just mute it. As long as you are a member, your number is visible to everyone in that group.
Silence Unknown Callers: Go to Settings > Privacy > Calls > Silence Unknown Callers. Numbers not saved in your contacts get silenced automatically. The calls still appear in your call log so you can check if any were legitimate, but your phone will not ring. This setting exists on both Android and iPhone and works the same way on both.
For group management, there is one more thing. If you are a group admin, you can go to the group info and change Edit Group Info to “Only Admins” and Send Messages to “Only Admins” if you want to turn the group into an announcement-only channel. Useful for family groups, apartment society groups, or school parent groups where you want to control who can post. Regular members can still read messages but cannot send their own. This cuts down on spam, forwards, and irrelevant messages flooding the group.
Fingerprint Lock
On Android: go to Settings > Privacy > Fingerprint Lock. Toggle it on. Select how quickly the lock activates after you leave the app: immediately, after 1 minute, or after 30 minutes. “Immediately” is the most secure option.
On iPhone: the equivalent is Settings > Privacy > Screen Lock. You can use Face ID or Touch ID depending on your device. Same timer options.
This prevents someone from opening WhatsApp if they pick up your unlocked phone. Useful if you hand your phone to a child, a colleague, or leave it on a desk at work. The phone itself might be unlocked, but WhatsApp stays locked behind your fingerprint or face scan.
You can still answer calls and reply to messages from notifications without unlocking the app, depending on your notification settings. If you want full privacy, also go to Settings > Notifications and disable message preview in notifications, or set it to show the sender name without the message content.
This setting takes ten seconds to enable and adds a real layer of protection for anyone who shares their phone or works in a shared space. If your phone supports biometric authentication, there is no good reason to skip this.
On some Android phones, particularly older models or budget devices, the Fingerprint Lock option may not appear if the phone does not have a fingerprint sensor. In that case, WhatsApp does not offer an alternative PIN lock within the app itself. Your only option is to use a third-party app locker or rely on your phone’s built-in app lock feature, which most phones running Android 12 or newer include in their settings under Security or Biometrics.
For newer Samsung phones, the option is under Settings > Biometrics and Security > Secure Folder. You can add WhatsApp to the Secure Folder, which creates an entirely separate, encrypted copy of the app that requires authentication to access. This is more secure than the built-in WhatsApp lock but also more involved to set up.
Cloud Backup: On or Off?
This is a judgement call, and the right answer depends on what you value more: convenience or control.
Backup ON with encryption means your chats are saved to Google Drive or iCloud in encrypted form. If you lose your phone, you can restore everything on a new device using your encryption password. WhatsApp, Google, and Apple cannot read the backup. This is the recommended option for most people.
Backup ON without encryption (the default for most users) means your chats are saved in readable form. Convenient for phone switches but exposes your entire message history to the cloud provider, and to anyone who gains access to your cloud account. If you have been using WhatsApp for years with the default backup setting, there are potentially years of conversations sitting unencrypted on Google or Apple servers right now.
Backup OFF means nothing leaves your phone. Most private option. If your phone breaks, is stolen, or is factory reset, your WhatsApp history is gone permanently. Some people prefer this. If you do not, make sure encryption is on.
On Android: Settings > Chats > Chat Backup > Back up to Google Drive. Set frequency or select Never. On iPhone: Settings > Chats > Chat Backup > Auto Backup. Set frequency or select Off.
One thing to note: WhatsApp also creates local backups on your phone’s storage (Android only). These are stored in the WhatsApp/Databases folder. They are not encrypted by default. If someone has physical access to your phone and connects it to a computer, they could potentially extract these local backup files. Enabling the encrypted cloud backup does not affect these local files. If this concerns you, you can periodically delete the contents of that folder manually using a file manager.
That covers the settings that matter. Close this tab and go do it. Takes about five minutes total.
Comments (0)