WhatsApp Privacy Settings You Should Change Today
WhatsApp works out of the box. You install it, verify your number, and start chatting. The problem is that the default settings are built for convenience, not for privacy. Out of the box, strangers can see your profile photo, add you to groups, and view your status. Most people never change a single setting, and they have no idea how much of themselves they are showing to the world.
This guide walks you through every privacy setting that matters. For each one, you will learn where to find it, what it does, and what the safest choice is. You do not need to be technical. Every change takes less than a minute, and by the end, your WhatsApp will be noticeably harder for strangers, scammers, and snoopers to exploit.
One quick note before we start. Almost everything in this guide lives in the same place. Open WhatsApp, tap Settings (on iPhone it is the gear icon at the bottom, on Android it is the three dots at the top), then tap Privacy. Keep that path in your head, because we will be going there a lot.
Profile Photo: Who Can See Your Face
Your profile photo is the first thing anyone sees. In a group, every member can see it. In a one-to-one chat, anyone who messages you sees it. And if it is set to Everyone, even people who have never spoken to you can look you up and see it.
Where to find it: Settings, Privacy, Profile photo.
You have three choices: Everyone, My Contacts, and Nobody. The safest choice for most people is My Contacts. That way only people you have saved in your phone can see your photo. If your photo shows your children, your workplace, or anything you would not want a stranger to save and reuse, My Contacts is the right call.
Nobody is the strictest option. With Nobody selected, no one sees a photo at all. Some people use this temporarily, for example when they are leaving a bad group, and switch back later.
Practical advice: if your profile photo is a clear picture of your face, My Contacts is the minimum. Strangers use profile photos to check whether an account looks real before targeting it. A blank or generic image gives them nothing to work with.
Last Seen and Online: Stop Broadcasting Your Habits
Last seen tells people the last time you opened WhatsApp. The online indicator shows when you are active right now. Together, they paint a picture of your daily routine. A stranger can watch your last seen over a few days and figure out when you sleep, when you work, and when you are free to be targeted.
Where to find it: Settings, Privacy, Last seen and online.
You have four options for last seen: Everyone, My Contacts, My Contacts Except, and Nobody. For the online indicator, you can choose Everyone or Same as last seen. The safest choice is to set last seen to Nobody, or at least My Contacts. If you set last seen to My Contacts, set online to Same as last seen so strangers cannot see when you are active either.
Practical advice: many people worry that hiding last seen looks rude to friends. It does not. Most people will not notice, and the ones who do will understand. Your daily routine is not information a stranger needs.
About: The Line Everyone Forgets
The About line is that little sentence under your name, things like “Busy” or “Available” or your business hours. People forget it exists, which is exactly why it is a risk. Some people write their real details there, their city, their job, even their other phone number.
Where to find it: Settings, Privacy, About.
The options are the same as profile photo: Everyone, My Contacts, Nobody. Set it to My Contacts. There is no reason a stranger needs to read your About line.
Practical advice: take a look at what your About line actually says right now. If it contains anything personal, change the text as well as the setting. A privacy setting cannot hide words you typed into a field that scammers screenshot in seconds.
Status: Your Stories Are Public by Default
WhatsApp Status works like stories on other apps. You post a photo or video, and it disappears after 24 hours. The default audience is My Contacts, which sounds safe, but think about it. Every contact includes people you added years ago and barely know, the plumber from 2019, a colleague from an old job, a number you do not even remember.
Where to find it: Settings, Privacy, Status.
You can choose My Contacts, My Contacts Except, or Only Share With. If you post personal photos, family moments, or anything with location clues, use My Contacts Except to exclude people you do not fully trust, or Only Share With to limit it to close friends and family.
Practical advice: before you post a status, ask yourself who in your contacts list should not see it. If the answer is anyone, adjust the audience. Status posts often reveal your location, your home, your children, and your routines. Treat them with the same care you would give a public social media post.
Groups: Stop Strangers Adding You
This is the most important privacy setting on WhatsApp, and the one most people have never opened. By default, anyone, including complete strangers, can add you to any group. You wake up in a group of two hundred people you have never met, and every one of them can now see your number and photo.
Where to find it: Settings, Privacy, Groups.
The options are Everyone, My Contacts, and My Contacts Except. Change it to My Contacts today. Now strangers cannot add you directly. They can only send you an invite link, and you decide whether to accept it. If even some of your contacts are people you would not trust with group invites, use My Contacts Except and exclude them.
Practical advice: this one setting prevents the most common WhatsApp headache, being pulled into scam groups, spam groups, and groups full of strangers. If you change nothing else in this guide, change this.
Read Receipts: The Blue Ticks Question
Read receipts are the blue ticks that show you have read a message. Turning them off means others cannot tell when you have read their messages, and you cannot tell when they have read yours. It goes both ways.
Where to find it: Settings, Privacy, Read receipts.
There is no middle ground here, it is on or off. Turning it off gives you breathing room. Nobody can pressure you with “I saw you read my message.” The trade-off is that you lose the same information about others.
Practical advice: in group chats, read receipts behave differently. Even with read receipts off, anyone can long-press a message they sent in a group and see who has read it. So turning this off protects you in one-to-one chats, not in groups. Worth knowing so you are not caught off guard.
Live Location: Share It Sparingly
Live location lets you share your real-time position with a chat for 15 minutes, an hour, or eight hours. It is useful when you are meeting someone. It is dangerous when it is shared carelessly or left running.
There is no single toggle for this. You control it per chat. To stop sharing, open the chat where you shared it and tap Stop sharing. To review everything you are currently sharing, go to Settings, Privacy, Live location.
Practical advice: never share live location in a group, only in one-to-one chats with people you trust. Check the Live location screen from time to time to make sure nothing is still running that you forgot about. A share you started hours ago might still be broadcasting your position.
Calls: Silence Unknown Callers
WhatsApp calls from unknown numbers are a growing problem. Scam call centers, spam callers, and people who got your number from a group can ring you directly. It is intrusive, and answering confirms your number is active.
Where to find it: Settings, Privacy, Calls. Turn on Silence unknown callers.
With this on, calls from numbers not in your contacts will not ring. They will still appear in your calls list, so you can call back if it turns out to be someone real. You lose nothing and gain quiet.
Practical advice: pair this with the Groups setting above. Most unknown WhatsApp callers got your number from a group you were added to. Blocking the source and silencing the calls together closes the loop.
Disappearing Messages: Useful, Not Magic
Disappearing messages automatically delete messages after 24 hours, 7 days, or 90 days. They are good for keeping chats tidy and reducing the amount of personal information sitting in old conversations.
Where to find it: Settings, Privacy, Default message timer. This sets the timer for all new chats. You can also set it per chat by opening the chat, tapping the contact or group name, and choosing Disappearing messages.
Practical advice: disappearing messages are not a security feature. The other person can screenshot, photograph, or forward anything before it disappears. Use it for tidiness and to limit old data, not as protection for truly sensitive information. Never send anything in a disappearing chat that you would not send in a normal one.
Two-Step Verification: Lock Your Account
This is the single most important security setting on WhatsApp, and it is not even in the Privacy menu. Two-step verification adds a six-digit PIN that anyone must enter when registering your phone number on a new device. Without it, someone who tricks your mobile carrier or intercepts one SMS code can take over your account.
Where to find it: Settings, Account, Two-step verification. Turn it on, choose a six-digit PIN you will remember, and add an email address.
The email address matters. If you forget your PIN, WhatsApp can send you a reset link at that email. Without an email on file, forgetting your PIN can lock you out of your own account for days.
Practical advice: pick a PIN that is not your birthday, not 123456, and not the same as your phone unlock code. Write it down somewhere safe if you need to. Account takeovers are one of the most common WhatsApp scams, and this one setting stops almost all of them.
Email Address: Your Recovery Lifeline
Tied to the setting above, your email address is how you recover your account if something goes wrong. WhatsApp lets you add it under Settings, Account, Email address.
If you already turned on two-step verification, you were asked for an email. If you skipped it, go back and add one now. Use an email you actually check and can access. A recovery email you cannot open is the same as no recovery email.
Practical advice: after adding it, WhatsApp will send a verification email. Open it and confirm. An unverified email may not work when you desperately need it.
Linked Devices: Check Who Is Logged In
WhatsApp lets you link up to four devices, like WhatsApp Web on a computer. Every linked device can read your messages. If someone got brief access to your phone, they could have linked their own laptop without you knowing.
Where to find it: Settings, Linked devices.
Look at the list. Every entry shows the device type, browser, and when it was last active. If you see anything you do not recognize, tap it and choose Log out. If everything looks familiar, you are fine.
Practical advice: check this list once a month. It takes ten seconds. Also, never scan a WhatsApp Web QR code on a computer you do not trust, like a shared office machine or a cyber cafe. Anyone with access to that browser session can read your chats.
Chat Lock and Screen Lock: Protect the App Itself
Privacy settings protect you from people outside your phone. These two protect you from people who pick up your phone.
Chat lock lets you lock individual chats behind your fingerprint, face, or phone passcode. Open the chat, tap the name at the top, and choose Chat lock. Locked chats move into a separate Locked chats folder.
Screen lock locks the entire WhatsApp app. Where to find it: Settings, Privacy, Screen lock (on iPhone) or Fingerprint lock (on Android). Turn it on and choose the shortest lock delay you can tolerate.
Practical advice: at minimum, turn on screen lock. It costs you one fingerprint tap each time you open WhatsApp, and it means a borrowed phone or a phone left on a table does not become an open book.
Blocked Contacts: Use the Block Button Freely
Blocking is quiet and powerful. A blocked contact cannot message you, call you, see your profile photo, see your status, or see your last seen. They are not notified that you blocked them. They might figure it out eventually, but WhatsApp never tells them.
Where to find it: open the chat with the person, tap their name, scroll down, and tap Block. To review everyone you have blocked: Settings, Privacy, Blocked contacts.
Practical advice: do not feel guilty about blocking. Strangers from groups, persistent spammers, anyone who makes you uncomfortable, block them. It is the fastest way to cut off contact, and it is completely silent on their end.