In This Guide Show
In India, WhatsApp isn't just an app – it's the family group, the office, the society committee, the kirana store, and sometimes the bank sending you OTP alerts. Which also means your phone number is in the hands of a lot of people you've never met.
Most of us installed WhatsApp years ago and never opened the privacy settings. So let's do it now, together. Grab your phone – this takes about 10 minutes.
Small note: WhatsApp moves menus around every few months, and Android and iPhone look slightly different. If a setting isn't exactly where I say, use the search icon inside Settings and type its name.
Start Here: The Built-In Privacy Checkup
WhatsApp now has a guided tool. Go to Settings → Privacy → Privacy checkup (on iPhone, Settings is at the bottom right; on Android, it's in the three-dot menu at the top right).
It walks you through the main options in a few screens. It's a good start, but it doesn't cover everything, so use the checklist below too.
☐ 1. Last Seen and Online
Where: Settings → Privacy → Last seen and online
By default, many people have this on Everyone. That means any random number that saves you can see when you were last active.
What I recommend: set Last Seen to My contacts (or My contacts except… if there's a nosy relative – no judgement). Then, below it, set Who can see when I'm online to Same as last seen.
The tradeoff: if you hide your Last Seen, you can't see other people's either. Fair deal, I think.
☐ 2. Profile Photo, About and Status
Where: Settings → Privacy → Profile photo / About / Status
Your profile photo is visible to anyone who has your number if it's set to Everyone. Scammers use profile photos to impersonate people – "Hi beta, this is my new number, send ₹5,000 urgently" is a very real scam, often using a photo copied from someone's WhatsApp DP.
What I recommend:
- Profile photo: My contacts.
- About: My contacts.
- Status: My contacts, or exclude people you don't want viewing your updates.
☐ 3. Read Receipts (the Blue Ticks)
Where: Settings → Privacy → Read receipts
Turning this off means people won't see blue ticks when you read their message. Honestly, this one is a personal choice, not a security thing. Some people find it reduces the pressure of replying instantly.
Two things to know:
- If you turn it off, you also can't see when others read your messages.
- In group chats, read receipts are always sent, whatever you choose here.
☐ 4. Who Can Add You to Groups
Where: Settings → Privacy → Groups
This is the one I wish more people changed. If it's set to Everyone, any stranger with your number can add you to a group – crypto "tips", fake job offers, stock market "signals", random sales groups.
What I recommend: set it to My contacts or My contacts except…. If someone outside your contacts tries to add you, you'll get an invite instead, which you can ignore.
☐ 5. Silence Unknown Callers
Where: Settings → Privacy → Calls → Silence unknown callers
WhatsApp calls from international numbers you don't know are a common scam route. Turning this on means calls from numbers not in your contacts won't ring – they'll just appear in your call list and notifications.
The tradeoff: if a delivery person or a new client calls on WhatsApp, you'll miss the ring. For most people, it's worth it.
☐ 6. Protect IP Address in Calls
Where: Settings → Privacy → Advanced → Protect IP address in calls
When this is on, WhatsApp relays your calls through its servers so the other person can't easily figure out your IP address (which can hint at your general location). Call quality might drop slightly. I keep it on.
While you're in Advanced, also look at:
- Disable link previews – stops your phone from fetching previews for links, which can reveal your IP to the website.
- Block unknown account messages – limits floods of messages from unknown accounts (WhatsApp may only enforce this when volumes are unusually high).
☐ 7. Default Message Timer (Disappearing Messages)
Where: Settings → Privacy → Default message timer
You can set all new one-on-one chats to disappear after 24 hours, 7 days, or 90 days. You can also turn it on for specific chats by tapping the contact name → Disappearing messages.
When it makes sense: chats where you share sensitive stuff – documents, addresses, bank details with family.
Be aware:
- People can still screenshot or forward before messages disappear.
- Media you've saved to your gallery stays there.
- It's not great for chats where you need records – like with a landlord or client. Keep those normal.
For really sensitive photos, use View once (the little "1" icon when sending media).
☐ 8. Two-Step Verification (Do This One Today)
Where: Settings → Account → Two-step verification → Turn on
If you do just one thing from this list, make it this.
The most common WhatsApp hijack in India goes like this: someone messages you pretending to be a friend or WhatsApp support, says "I sent you a code by mistake, please forward it." That's your registration OTP. Once they have it, they can log into your account on their phone.
Two-step verification adds a 6-digit PIN that's required when your number is registered on a new phone. So even if someone gets the SMS code, they also need your PIN.
Steps:
- 1. Tap Turn on.
- 2. Enter a 6-digit PIN you'll remember (not your birthday, not 123456).
- 3. Add an email address – this is how you reset the PIN if you forget it.
- 4. Done. WhatsApp will occasionally ask for the PIN so you don't forget it.
And please: never share any WhatsApp code with anyone, even if they claim to be WhatsApp. WhatsApp doesn't ask for it.
You may also see options for Passkeys and Email address under Settings → Account. A passkey lets you verify with your fingerprint or face instead of an SMS code. Worth setting up if your phone supports it.
☐ 9. Linked Devices – Check Who's Logged In
Where: Settings (or the three-dot menu on Android) → Linked devices
This is the most-ignored setting I know. WhatsApp Web and the desktop app stay logged in for a long time. If you once logged in on an office PC, a cyber café computer, or a friend's laptop, it might still be connected.
What to do:
- 1. Open Linked devices.
- 2. You'll see each device with "Last active" info.
- 3. Tap any device you don't recognise or no longer use → Log out.
Make it a habit to check this every month or so. It takes 20 seconds.
☐ 10. App Lock and Chat Lock
Where: Settings → Privacy → App lock (Android) / Screen lock (iPhone)
This makes WhatsApp ask for your fingerprint or face ID when you open it. Handy if family members or kids borrow your phone.
For individual chats, long-press a chat → Lock chat. Locked chats move into a separate folder that needs your fingerprint or a secret code. Good for private conversations you don't want visible on the main screen.
☐ 11. Security Notifications
Where: Settings → Account → Security notifications
Turn this on. It tells you when a contact's security code changes – which happens normally when someone reinstalls WhatsApp or changes phones, but it's good to know.
☐ 12. End-to-End Encrypted Backup
Where: Settings → Chats → Chat backup → End-to-end encrypted backup
Your messages are encrypted on WhatsApp, but backups to Google Drive or iCloud aren't end-to-end encrypted unless you turn this on. You'll protect the backup with a password or a 64-digit key.
Big warning: if you lose that password or key, WhatsApp can't recover your backup. Write it down somewhere safe (not in a WhatsApp chat to yourself!).
A Few Habits That Matter More Than Settings
Settings help, but most WhatsApp problems I hear about come from habits:
- Don't tap random links, especially "KYC update", "electricity bill pending", or "you've won" messages. Banks and electricity boards don't usually ask you to act through a random WhatsApp link.
- Verify "new number" messages by calling the old number.
- Report and block spam numbers – long-press the chat → Block → Report.
- Don't download unofficial WhatsApp mods (GB WhatsApp and similar). They aren't from WhatsApp, can get your account banned, and you have no idea what they do with your data.
The 2-Minute Version
If you're in a hurry:
- 1. Two-step verification → On.
- 2. Groups → My contacts.
- 3. Linked devices → log out anything unfamiliar.
- 4. Profile photo and Last seen → My contacts.
- 5. Silence unknown callers → On.
Then come back for the rest on a weekend.
FAQ
If I hide my Last Seen, can people still see I'm online? Only if you've set "Who can see when I'm online" to Everyone. Set it to "Same as last seen".
Can someone read my WhatsApp messages from WhatsApp Web without me knowing? If they have an active linked device, yes. That's why checking Linked devices regularly matters.
Does disappearing messages delete media from my gallery? No. If media was saved to your gallery, it stays there.
What should I do if my WhatsApp gets hacked? Reinstall WhatsApp and verify your number again to kick the other device out, then turn on two-step verification right away. If you can't get back in, contact WhatsApp support from the app's Help section.
2 thoughts on “WhatsApp Privacy Settings Checklist: The Ones Most People Still Leave Open”