Your phone’s been acting weird lately. Maybe the battery drains faster than it used to. Maybe WhatsApp shows you were “online” at times you definitely weren’t using it. Maybe you noticed a notification about a new device being linked to your account that you didn’t set up.
These small signs are easy to brush off, but they’re exactly how people discover that someone has been reading their private messages without permission. WhatsApp uses end-to-end encryption, which means the messages themselves are secure while traveling between devices. But that doesn’t protect you if someone has physical access to your phone, linked a device behind your back, or installed monitoring software on your device. The encryption protects the pipe, not the endpoints. And the endpoints are where most breaches actually happen.
If you’ve got a nagging feeling that something’s off, here’s how to find out for sure and shut it down.
Check Your Linked Devices Right Now
This is the single fastest way to catch unauthorized access, and it takes about ten seconds. Open WhatsApp, tap Settings, then tap Linked Devices. You’ll see a list of every browser and desktop app currently connected to your WhatsApp account.
If you see a device you don’t recognize, someone may have scanned your WhatsApp QR code when your phone was unlocked and unattended. It only takes a few seconds to do, and once linked, that device receives a real-time copy of every message you send and receive.
Tap any device you don’t recognize and select “Log out.” Do this for anything you’re unsure about. Even if it was your own old laptop, it’s better to unlink and re-link later than to leave an unknown session active. Make it a habit to check this screen at least once a week. It’s the digital equivalent of checking if your front door is locked.
Turn On Two-Step Verification
If you haven’t done this yet, stop reading and do it right now. Two-step verification adds a six-digit PIN that’s required anytime your phone number is registered on a new device. Without this, someone who gets hold of your SIM card or intercepts your verification SMS could set up your WhatsApp on their phone and take over your account entirely.
Here’s how to enable it: go to Settings, then Account, then Two-Step Verification, and tap Enable. Create a six-digit PIN you’ll remember (but don’t use something obvious like your birthday), and add a recovery email address in case you ever forget it.
This single setting blocks one of the most common WhatsApp hijacking methods. It’s free, takes thirty seconds, and makes your account dramatically harder to compromise.
Activate Strict Account Settings
WhatsApp rolled out a powerful new feature in January 2026 called Strict Account Settings. Think of it as a lockdown mode for your account. When enabled, it automatically blocks attachments and media from unknown senders, silences calls from numbers not in your contacts, disables link previews, and locks your privacy settings to the most restrictive options.
To turn it on: go to Settings, then Privacy, then Advanced, and enable Strict Account Settings.
This feature was originally designed for journalists and public figures who face sophisticated cyber threats, but it’s useful for anyone who wants maximum protection. It does change how WhatsApp works in some ways, like limiting interactions with people not in your contacts, so it’s a trade-off between convenience and security. But if you suspect someone has been accessing your account or you just want the tightest possible setup, it’s worth enabling.
WhatsApp also mentioned that they’ve implemented Rust programming behind the scenes to help protect media files from spyware, adding another layer of defense that works automatically without you needing to do anything.
Use Advanced Chat Privacy for Sensitive Conversations
Beyond account-level settings, WhatsApp now offers chat-level privacy controls that let you protect specific conversations.
Advanced Chat Privacy is a setting you can enable on individual chats or groups. When it’s on, it blocks other participants from exporting the chat, auto-downloading media to their devices, and using messages for AI features. This is especially useful in group chats where you might not know everyone personally.
To enable it: tap the chat or group name at the top, then tap Advanced Chat Privacy and toggle it on.
This doesn’t prevent someone from manually taking screenshots, but it removes the easy, automated ways that content can leak outside of WhatsApp. For conversations involving personal information, finances, health details, or anything sensitive, it’s a smart layer to add.
Lock WhatsApp With Biometrics
If someone has physical access to your phone and it’s unlocked, they can open WhatsApp and read everything. Locking your phone isn’t always enough, especially if you share it with family members or leave it on a desk at work.
WhatsApp’s built-in Screen Lock feature requires Face ID, Touch ID, or fingerprint authentication to open the app, even if the phone itself is already unlocked.
Enable it by going to Settings, then Privacy, then Screen Lock, and toggling it on. You can set it to activate immediately, after one minute, or after thirty minutes of inactivity. Setting it to “immediately” gives you the most protection.
This one step eliminates the most common form of WhatsApp snooping: someone picking up your phone and opening the app while you’re not looking.
Warning Signs That Your WhatsApp May Be Compromised
Sometimes the breach isn’t obvious. Here are the signals that something might be wrong:
Battery draining unusually fast. Monitoring software running in the background consumes resources. If your phone’s battery life suddenly dropped without any change in your usage habits, it could indicate that something is running behind the scenes.
Unexpected data usage spikes. Spy apps need to transmit the data they collect, which uses mobile data. Check your data usage in your phone’s settings and look for apps consuming data that don’t match your actual usage patterns.
WhatsApp showing “online” when you weren’t using it. If a friend or partner mentions you were online at 3 AM and you were definitely asleep, someone may be accessing your account from a linked device.
Messages marked as read that you didn’t open. If the blue checkmarks appear on messages before you’ve actually read them, another device may be viewing your conversations.
Strange apps you didn’t install. Check your phone’s app list for anything you don’t recognize. Some monitoring tools disguise themselves with generic names or hide their icons entirely.
Your phone feels hot even when idle. Background processes from surveillance apps can cause your phone to heat up noticeably during periods when you’re not actively using it.
If you notice several of these signs together, take it seriously.
What to Do If You Think You’ve Been Compromised
If the warning signs point to a genuine breach, act fast and follow this sequence:
First, log out of all linked devices. Go to Settings, Linked Devices, and remove every single one. You can re-link your own devices afterward.
Second, enable two-step verification if you haven’t already. If it’s already on, change the PIN to something new.
Third, check your phone for unfamiliar apps. Go through your entire app list carefully. On Android, also check Settings, then Apps, and look for apps with no icon or generic names. On iPhone, check your storage list for anything you don’t recognize.
Fourth, update your phone’s operating system and WhatsApp to the latest versions. Updates patch security vulnerabilities that monitoring tools exploit.
Fifth, change the password on the email account linked to your WhatsApp. If someone compromised your WhatsApp, they may have access to your email too, and your email is what’s used for two-step verification recovery.
If you suspect stalkerware has been installed on your device, consider doing a full factory reset as a last resort. Back up your important photos and files first, then wipe the device completely. This removes virtually all monitoring software.
Privacy Is Not Paranoia
Wanting your private conversations to stay private isn’t extreme. It’s completely reasonable. WhatsApp gives you powerful tools to protect yourself, but most of them are turned off by default. Spending five minutes going through your privacy and security settings today can prevent weeks of stress later.
Check your Linked Devices. Enable two-step verification. Turn on Screen Lock. Consider activating Strict Account Settings. These aren’t complicated steps, and they make a meaningful difference.