WhatsApp Privacy Settings: A Simple Guide to Staying Safe

WhatsApp already encrypts every message and call you make, meaning nobody but you and the person you are talking to can read or hear them. That protection is switched on automatically and you cannot turn it off. What you can control are the settings that decide who sees your photo, your status, when you were last online, and whether strangers can add you to groups. Changing a few of these takes about five minutes and makes a real difference to your peace of mind.

Everything below lives in one place: the Settings screen inside WhatsApp. On an iPhone you reach it by tapping Settings at the bottom right of the app. On an Android phone you tap the three dots at the top right, then Settings. From there, tap Privacy and you will find each option described here.

Who can see your profile photo and information

Your profile photo is the little picture next to your name that other people see. By default, anyone who has your number can view it. Many people prefer to limit this so that only people in their contacts can see their face. Tap Privacy, then Profile Photo, and you get three choices: Everyone, My Contacts, or Nobody.

Choosing My Contacts is the sensible middle ground. People you have saved in your phone still see your photo, while a stranger who somehow has your number sees only a blank grey circle. The same three choices appear under About, which is the short line of text under your name, so you can set both the same way.

Hiding when you were last online

WhatsApp normally shows a "last seen" time, telling people the last moment you opened the app. Some find this convenient and others find it intrusive, because it lets people track when you are awake or active. You decide. Under Privacy, tap Last Seen & Online and pick who can see your last-seen time using the same Everyone, My Contacts, or Nobody choices.

There is a fair trade here worth knowing about. If you hide your own last-seen time, WhatsApp also hides everyone else's from you. For most people that is a price well worth paying for the privacy, and choosing Nobody or My Contacts is the right call.

Read receipts: the blue ticks

Those two small blue checkmarks beside a message mean the other person has read it. They appear by default, and they can create gentle pressure to reply at once. Turning them off gives you room to read a message and answer when you are ready, without anyone knowing you have seen it.

Under Privacy, find the switch labelled Read Receipts and tap it so it turns grey. From then on, others will not see blue ticks from you. There is one fair condition: you also stop seeing blue ticks from them. The single grey tick still confirms a message was delivered, so you always know it arrived.

Stopping strangers adding you to groups

One of the most common annoyances is being dropped into a group chat full of people you do not know. WhatsApp lets you shut this down. Tap Privacy, then Groups, and choose My Contacts. After that, only people saved in your phone can add you to a group, and a stranger who tries gets blocked from doing so.

For even tighter control, choose My Contacts Except... and pick certain people who still should not be able to add you. Anyone outside your permitted list must send you a private invitation instead, which you can accept or quietly ignore. That single change removes the large majority of unwanted group spam.

The two-step verification PIN

Two-step verification is the strongest single protection you can add, and it stops a scammer taking over your account even if they trick their way to your phone number. It works by asking for a six-digit PIN that only you know whenever your account is set up on a new phone. Without that PIN, a thief is stuck.

1. From the main Settings screen, tap Account.
2. Tap Two-step verification, then the green Turn on or Enable button.
3. Type a six-digit number you will remember but others cannot guess. Avoid your birth year or 123456.
4. Type it a second time to confirm, then add an email address. This email lets WhatsApp help you reset the PIN if you ever forget it.
5. Tap Save or Done. The PIN is now active and you are far safer.

Write the PIN somewhere safe, such as a notebook you keep at home, because WhatsApp occasionally asks you to re-enter it to make sure you still remember. This is a feature, not a fault, and it keeps the protection meaningful.

Blocking and reporting unwanted contacts

If a stranger or a scammer messages you, you never have to engage. Open the chat, tap the person's name at the top to open their info screen, scroll down, and tap Block. A blocked person cannot message or call you again, and they are not told they have been blocked. The same screen offers Report, which sends the conversation to WhatsApp to investigate.

Be especially wary of any message that asks for money, claims to be a relative who has lost their phone and needs cash, or sends a six-digit code and asks you to forward it. No legitimate contact ever needs your verification code. Block and report these without replying. Trusting that instinct is one of the best safety habits you can build.

Disappearing messages and a lock on the app

Two extra settings give you more control if you want it. Disappearing messages automatically delete what you send after a set time, which is useful if you share a one-off password or address and would rather it not sit in the chat forever. Open a chat, tap the person's name at the top, tap Disappearing messages, and choose 24 hours, 7 days, or 90 days. The other person sees the same vanishing applied, and old messages already sent stay put.

You can also lock WhatsApp behind your phone's fingerprint or face check, so that even someone holding your unlocked phone cannot open your chats. On an iPhone, go to Settings, then Privacy, then Screen Lock, and switch it on. On Android the same option is called Fingerprint lock under Privacy. It adds a second's pause when you open the app and keeps your conversations to yourself.

Neither of these is required, and neither affects your messages reaching people normally. They are simply there if your phone is sometimes within reach of others and you value the extra layer. You can switch both off again at any time from the same screens.

A five-minute setup worth doing today

You do not need to change everything at once. The four settings that matter most are Profile Photo set to My Contacts, Last Seen set to My Contacts or Nobody, Groups set to My Contacts, and two-step verification switched on. Together those take a few minutes and cover the situations that actually cause trouble.

None of these choices is permanent. Tap through them, see how the app feels, and adjust anything that does not suit you. Your messages were already private and encrypted before you started; what you have done now is decide who gets to see the rest, and that control belongs with you.