WhatsApp has done a lot in terms of data protection and security, but if you really want to protect yourself, there is still a lot you can do. We’ll show you what steps you can take.
WhatsApp is a phenomenon. It should be clear to most people that the app is not the first choice when it comes to data protection, even if the discussion about new terms and conditions and criticism of data transfer to the parent company Facebook has died down somewhat. Nevertheless, WhatsApp alternatives such as Signal or Threema are still popular and that is our tip to all users: stock up on privacy-friendly messengers.
But the WhatsApp problem remains: Just because Signal & Co. are gaining new users does not mean that these users are leaving WhatsApp. The problem is that WhatsApp has established itself as the SMS successor over the past few years. Many families use it, as do companies, sports clubs, schools and and and. There is a high probability that many users will not be able to leave WhatsApp completely because they are still stuck in one or more groups somewhere.
If this sounds familiar to you, then here are a few tips to help you use WhatsApp more securely and with as little data as possible. A new addition is the end-to-end encryption of your WhatsApp backups, which we will explain below.
WhatsApp security tips
Whenever there are security concerns or data protection with WhatsApp, end-to-end encryption is unpacked. WhatsApp recently did this again in a blog post about the planned data protection changes. It has to be said that encryption in WhatsApp is a really good thing, it’s always on for chats, including group chats, so users don’t have to worry about anything. But encryption alone does not cover everything, the following security tips are recommended:
- updates: There is no question that there are security gaps in apps that are fixed with updates, and WhatsApp is no different. Therefore, you should always use the latest WhatsApp versions. The app updates are a matter for the operating system, Android and iOS offer convenient automatic updates. For WhatsApp Web, a regular reload of the browser tab is sufficient if the web app indicates that an update has been loaded.
- Security Notices: In the WhatsApp settings in the “Account” area there is a “Security” submenu, but there is only one setting. If you activate “Show security notifications”, you will be informed when contacts have reinstalled WhatsApp or the phone number has changed. The aim of the exercise is to use the message to make people aware that the encryption has changed. It is conceivable that unauthorized persons have taken over the WhatsApp account of the contact. You can ask the contact if he or she has a new phone through other means, such as email or phone.
- Verify via QR code: If you meet a WhatsApp contact in real life, which can happen, you can verify a WhatsApp chat using a QR code. This works via the chat by tapping on the contact name. Then tap on “Encryption” in the contact information and scan the QR code from the other cell phone.
- Account Security: In the WhatsApp settings in the “Account” section, you should turn on “Two-Step Verification”. This protects the WhatsApp account with a six-digit PIN.
WhatsApp privacy tips
Readjusting data protection also works to a small extent in WhatsApp, but a few problems are homemade and difficult or impossible to avoid. A feature of WhatsApp, for example, is that it grabs the saved contact information and uploads it to its own servers. You can use this to conveniently reach your own contacts on WhatsApp, but you pump all the information unencrypted into the cloud, a home-made privacy drama. Adjustments can be made at the following points:
- Shared info: In the WhatsApp settings under “Account” it is best to go to the “Privacy” item. There you determine who can see which information about you, for example when you were last online. Avoid the “Everyone” setting there, the most restrictive here is “Nobody”, with groups you can only narrow it down to “Contacts” at first glance. You can also exclude all contacts using the “Exclude my contacts” function. Under “Status” select “Share only with” and then simply do not enter any contact. You can also check and turn off shared live locations there.
- Read Receipts: For some users, the read receipts are useful, for others they reveal too much. There is a separate setting under “Privacy”. The function is then disconnected in both directions, so you can no longer see read receipts from others.
- Screen lock: It also makes sense to set a screen lock on WhatsApp. It should switch on “immediately” if you are no longer active in the app. WhatsApp must then be unlocked again.
- Chats without contacts: WhatsApp only allows chats with saved contacts. But if you don’t want to add Hinz und Kunz, simply open the page https://wa.me/ in the browser on your mobile phone and add the phone number and country code there. A page will then open where you can start the chat. It will then open in WhatsApp.
- Self-Deleting Messages: A fairly new feature is self-deleting messages. They have to be switched on separately for each chat, which works via the chat partner’s contact information. Then simply turn on the “Self-deleting messages” function. Messages then automatically disappear from the chats after 7 days. Please note, however, that these messages can of course be backed up or archived via screenshot in the meantime.
- One-time view for photos and videos: Photos and videos sent usually remain in the chat and can be saved on friends’ devices if desired. But that can be prevented with the one-time view. To do this, select a photo or video and tap the small “1” in the caption field. Photos and videos sent in this way can only be viewed once. Important, but screenshots or screen recordings can not be prevented.
- Caution with backups: Chat backups can be stored via WhatsApp on Apple or Google in their clouds. This is convenient, for example when moving to a new mobile phone. But these WhatsApp backups are not encrypted by default – you have to activate this function first. To do this, go to the settings under “Chats | Chat backup | End-to-end encrypted backup” and then set a password.
Block users and report spam
What is also part of security: There is the option of blocking users in WhatsApp and you can also report spam.
- Block users: You can block other WhatsApp users either in the chat via “More options” (Android) or “Contact info” or via the settings in the “Account/Privacy” area. Look for the “Blocked Contacts” or “Blocked” menu item.
- Report spam: You can report spam, fake news or other stuff sent via WhatsApp as spam. This can also be done via the contact information via “Report contact”. The contact is then automatically blocked. You can only undo the blocking, but not the spam message to WhatsApp.
What does not work in WhatsApp
Let’s face it, no matter how much you want to, you can’t turn WhatsApp into a Signal or Threema, no matter what you set. The reason is simple, data analysis is the business model. You should still check out the settings for security and data protection shown above, that will help. But especially when it comes to data protection, the whole thing is limited to points that other users can see from you. You can’t really limit what WhatsApp or Facebook do in the background.
It is therefore worth using alternatives such as Signal or Threema with other business models. Feel free to tell your friends, family and other contacts about the benefits as well. The family chat, for example, is part of a secure messenger. The more users you convince of WhatsApp alternatives, the better. However, as long as WhatsApp’s popularity continues, you should heed the settings shown above for a little more protection.