The most important WhatsApp privacy settings to change are: turn on two-step verification (a PIN that stops number hijacking), set who can see your last-seen, profile photo, about, and status to My Contacts, enable disappearing messages for sensitive chats, turn off read receipts if you prefer, control who can add you to groups, and review your linked devices. These take five minutes in Settings and dramatically improve your privacy and account security. Two-step verification is the single most important one.
WhatsApp is used by billions of people, which makes it a target — and out of the box, several of its privacy settings are more open than you might like. The good news is that WhatsApp gives you genuine control; you just have to know where to look. Spending five minutes in the privacy and security settings locks down who can see your information, protects your account from takeover, and gives you control over your messages. Here are the settings worth changing and why each one matters.
Start here: two-step verification
If you change only one setting, make it this one. Two-step verification adds a six-digit PIN that WhatsApp asks for when registering your number on a new device, which stops criminals from hijacking your account even if they manage to trick your carrier or intercept your SMS code. Account takeover — where a scammer steals your number and then impersonates you to your contacts — is one of the most common and damaging WhatsApp attacks, and this single setting is your best defence against it.
You will find it under Settings, Account, Two-step verification, where you set a PIN and optionally add an email address for recovery. Choose a PIN you will remember but that isn’t obvious, and store it safely. It takes under a minute to enable and is far and away the most valuable privacy and security step you can take on WhatsApp, so do it before anything else on this list.
- Open WhatsApp Settings, then tap Account, then Two-step verification.
- Tap Turn on and choose a six-digit PIN you’ll remember.
- Add a recovery email address so you can reset the PIN if you forget it.
- Confirm — your account is now protected against number-hijacking takeover.
Control who sees your information
By default, details like your last-seen time, profile photo, about text, and status can be visible to anyone who has your number, including strangers and businesses. WhatsApp lets you restrict each of these under Settings, Privacy, where you can change them to My Contacts — or even My Contacts Except for specific people. Setting your profile photo and last-seen to contacts only is a sensible baseline that stops random numbers from seeing your picture or tracking when you are online.
Your status updates deserve particular attention, since people often share more casual, personal moments there. Under the Status privacy setting you can limit who sees your updates to your contacts, or exclude specific people, so a work contact or acquaintance you would rather not share with doesn’t see your personal posts. Taking a moment to set each of these to your comfort level means your information is shared deliberately rather than by default.
If you hide your last-seen and online status from others, WhatsApp also hides theirs from you — it is reciprocal. Decide whether the privacy is worth losing the ability to see when others were last online; many people happily accept the trade.
Disappearing and view-once messages
For sensitive conversations, WhatsApp offers disappearing messages, which automatically delete after a set period — 24 hours, 7 days, or 90 days — so old messages don’t linger indefinitely on either phone. You can turn this on per chat, or set it as a default for new chats under Privacy. It is not a security guarantee, since the recipient could screenshot or copy content before it vanishes, but it sensibly reduces how much of your conversation history sits around to be seen if a phone is lost or snooped on.
For individual photos or videos you want seen once and not saved, the view-once feature sends media that disappears after the recipient opens it. Again, treat it as a convenience rather than ironclad protection — determined recipients can capture anything — but for reducing the digital footprint of routine sensitive sharing, both features are useful tools that cost nothing to use.
Group and message controls
One genuinely irritating default is that, depending on your settings, people may be able to add you to groups without asking. Under Privacy, Groups, you can restrict who can add you to My Contacts or My Contacts Except, so strangers and spammy broadcast groups can’t pull you in without an invite. This single change cuts down a lot of unwanted group spam and gives you control over which conversations you are part of.
You can also decide whether to send read receipts — the blue ticks that tell senders you have read their message. Turning them off gives you breathing room to read without feeling obliged to reply instantly, though as with last-seen it is reciprocal, so you also lose the ability to see others’ read receipts. Whether that trade is worth it is personal, but it is worth knowing the option exists.
| Setting | Recommended | Why |
|---|---|---|
| Two-step verification | On | Stops account takeover |
| Last-seen / photo / about | My Contacts | Hides info from strangers |
| Groups | My Contacts | Blocks unwanted group adds |
| Disappearing messages | On for sensitive chats | Limits lingering history |
Check your linked devices
WhatsApp lets you use your account on computers and tablets through linked devices, which is convenient but worth auditing periodically. Under Settings, Linked devices, you can see every device currently connected to your account and log out any you don’t recognise or no longer use. An unfamiliar linked device could mean someone else has access to your messages, so glancing at this list occasionally is a simple, important security habit.
It pairs naturally with the other steps here: two-step verification stops unauthorised registration of your number, while checking linked devices catches unauthorised access through the web and desktop apps. Together they close the two main doors through which someone could get into your WhatsApp, which is why reviewing linked devices belongs on any privacy checklist.
Set a reminder to run through these settings now: enable two-step verification, set your info to contacts only, restrict group adds, and check linked devices. Five minutes of setup buys you lasting privacy and meaningfully better account security.
FAQ
What is the most important WhatsApp privacy setting?
Two-step verification, without question. It adds a PIN that prevents criminals from hijacking your number and impersonating you, which is the most common and damaging WhatsApp attack. Enable it before anything else.
If I hide my last-seen, can I still see others’?
No. Last-seen, online status, and read receipts are reciprocal — hiding yours also hides others’ from you. Decide whether the privacy is worth that trade; many people find it is.
Are disappearing messages truly private?
They reduce lingering history but aren’t a security guarantee, since a recipient can screenshot or copy content before it disappears. Use them to limit your footprint, not as protection for genuinely secret information.
How do I stop being added to random groups?
Go to Settings, Privacy, Groups and set it to My Contacts or My Contacts Except. Then only people you know can add you, and others must send an invite you can accept or decline.
Spotting and avoiding WhatsApp scams
Privacy settings protect your account, but staying alert to scams protects you directly. Be wary of messages claiming to be from WhatsApp itself asking for your PIN or verification code — the company never asks for these, and anyone who does is trying to hijack your account. Never share the six-digit code you receive by SMS with anyone, even a contact, since a common scam involves a ‘friend’ whose account was stolen asking you to forward a code.
Treat unexpected messages about prizes, parcels, job offers, or urgent family emergencies with suspicion, especially if they push you to act fast or click a link. Scammers rely on urgency to bypass your judgement. Combined with two-step verification and tight privacy settings, a healthy scepticism toward these messages is what keeps your account and your money safe, so it belongs alongside the settings on any WhatsApp security checklist.
The Bottom Line
WhatsApp gives you real privacy control — you just have to switch it on. Start with two-step verification, the single most important setting for protecting your account from takeover, then set your last-seen, photo, about, and status to contacts only, restrict who can add you to groups, enable disappearing messages for sensitive chats, and review your linked devices. The whole audit takes about five minutes and leaves you with far better privacy and a much more secure account. There is no reason not to do it today.