WhatsApp is the world's most popular messaging app with over 2 billion users. Because it is tied to your phone number and used for personal conversations, financial discussions, and increasingly for business, securing your WhatsApp account is essential.
Enable Two-Step Verification
This is the most important security step for WhatsApp. It adds a PIN that is required whenever your phone number is registered on WhatsApp again.
- Open WhatsApp and go to Settings > Account > Two-Step Verification
- Tap Enable
- Create a 6-digit PIN that you will remember
- Add an email address for recovery (in case you forget your PIN)
- Confirm the email address
With this enabled, even if someone steals your phone number through a SIM swap attack, they cannot activate WhatsApp on their device without your PIN.
Important: Never share the 6-digit SMS verification code that WhatsApp sends when registering. Scammers often call or text pretending to be a friend or WhatsApp support, asking for this code. Sharing it gives them complete access to your account.
Lock Down Your Privacy Settings
- Go to Settings > Privacy
Profile Photo, About, and Last Seen
- Set Last Seen & Online to My Contacts or Nobody
- Set Profile Photo to My Contacts or Nobody
- Set About to My Contacts or Nobody
Status Privacy
- Set Status to My Contacts to prevent strangers from seeing your status updates
- Or choose My Contacts Except to exclude specific people
Read Receipts
- Turn off Read Receipts (blue ticks) if you do not want others knowing when you read their messages
- Note: this also hides read receipts for messages you send to others
Fingerprint or Face Lock
- Under Privacy > App Lock, enable biometric lock
- Set the lock to activate after 1 minute of inactivity
- This prevents someone from reading your messages if they have physical access to your unlocked phone
Control Group Additions
By default, anyone who has your phone number can add you to a group without your permission.
- Go to Settings > Privacy > Groups
- Change from Everyone to My Contacts or My Contacts Except
- When set to My Contacts, people not in your contacts must send you an invitation link instead of directly adding you
This is especially important for preventing spam groups and scam groups.
Protect Against WhatsApp Scams
WhatsApp scams are increasingly sophisticated. Here are the most common ones and how to avoid them:
Verification Code Scam
A scammer calls or messages you (often pretending to be a friend) asking you to forward a 6-digit code you just received via SMS. This code is your WhatsApp verification code. Never share it with anyone.
Impersonation / "Hi Mum" Scam
You receive a message from an unknown number claiming to be a family member with a new phone, urgently asking for money. Always verify by calling the person at their known number before sending money.
Fake Prize and Lottery Messages
Messages claiming you have won a prize and need to click a link or pay a fee. These are always scams. WhatsApp and Meta do not run lotteries.
Investment and Crypto Groups
Being added to groups promoting guaranteed returns on investments. These are scam schemes. Leave and block immediately.
Deepfake Video Calls
Scammers using AI-generated video to impersonate someone you know during a video call, typically to request money. If something feels off about a video call, hang up and call the person directly.
Use our AI Scam Checker to verify suspicious messages, links, or phone numbers you receive on WhatsApp.
Back Up and Export Your Data
Chat Backup
- Go to Settings > Chats > Chat Backup
- Tap Back Up to create a backup to Google Drive (Android) or iCloud (iPhone)
- Enable End-to-End Encrypted Backup and set a password or 64-digit encryption key
Critical privacy warning: If you do not enable end-to-end encrypted backup, your message history is not protected by WhatsApp's encryption once it reaches the cloud. This means the cloud provider (Google or Apple), anyone with legal access to your cloud account, or anyone who compromises it can read your backed-up messages. Always enable encrypted backup to keep your conversations private.
Export Individual Chats
- Open the chat you want to export
- Tap the contact or group name at the top
- Scroll down and select Export Chat
- Choose whether to include media
- Save or share the exported file
Request Account Info
- Go to Settings > Account > Request Account Info
- Tap Request Report
- WhatsApp will prepare a report of your account settings and data (this takes about 3 days)
- Download the report from the same page when ready
How to Delete Your WhatsApp Account
Before deleting:
- Export any chats you want to keep
- Download your account info report
- Inform important contacts you are leaving
- If you use WhatsApp Business, handle any pending customer conversations
To delete your account:
- Go to Settings > Account > Delete My Account
- Enter your phone number in full international format
- Select a reason for leaving
- Tap Delete My Account
What happens after deletion:
- Your account is removed from WhatsApp immediately
- Your profile, messages, and media are deleted from your phone
- You are removed from all groups
- Your chat history is deleted and cannot be recovered
- Messages you previously sent remain visible to the recipients
- Backed-up data on Google Drive or iCloud is not automatically deleted — you must manually remove it
- Your phone number becomes available for re-registration after some time
After deleting WhatsApp, use our GCR Data Shield to check whether your phone number appears on data broker sites. Phone numbers linked to messaging apps are frequently collected and sold by data brokers.