WhatsApp’s Restricted Chat Feature Improves Privacy and Security

Key Takeaways

• WhatsApp is developing a new “Restricted Chat” privacy feature.
• This feature will prevent selected conversations from syncing to linked devices like WhatsApp Web, desktop clients, and secondary phones.
• It is currently in development for Android beta version 2.26.36.5 and is not yet available to testers.
• Restricted Chat enhances existing privacy controls by limiting the exposure of sensitive discussions to the primary mobile device only.

WhatsApp Enhances Privacy with New Restricted Chat Feature

WhatsApp is currently developing a new privacy control, dubbed “Restricted Chat,” designed to confine designated conversations exclusively to a user’s primary mobile device. This upcoming feature aims to bolster user privacy by preventing sensitive chats from synchronizing with linked devices, including WhatsApp Web, desktop applications, and any secondary mobile phones connected to the same account.

The capability was identified within Android beta version 2.26.36.5. However, it remains under active development and has not yet been activated for beta testers to evaluate. WhatsApp has not yet provided a public release timeline or confirmed when this feature will become available on stable Android, iOS, Web, or desktop platforms.

Restricted Chat appears to be an evolution of WhatsApp’s existing Advanced Chat Privacy settings, rather than a replacement for core security features like end-to-end encryption or the Chat Lock function. Users will be able to apply this optional control on a per-conversation basis, allowing them to secure only their most sensitive discussions while continuing to use linked devices for general communication.

How Restricted Chat Works

When a user enables Restricted Chat for a specific conversation, WhatsApp will ensure that this chat remains solely on the primary mobile phone. It will be explicitly excluded from the account’s linked-device synchronization process. Consequently, the protected conversation will not appear in WhatsApp Web interfaces, desktop clients, or any secondary mobile devices connected to the same WhatsApp account.

This mechanism establishes a tighter access perimeter for confidential discussions. While users can still link various devices such as laptops, tablets, browser sessions, or additional phones to their WhatsApp account, these linked endpoints will not receive the content of restricted conversations. This design is crucial because linked devices can significantly expand the potential points of access for messages. An unattended browser session, a shared workstation, or an unauthorized linked device could inadvertently expose conversations, even if the primary phone itself remains physically secure.

Restricted Chat is designed to mitigate such exposure by proactively preventing the protected chat from ever reaching these potentially less secure devices. It is also expected to maintain the existing controls offered by Advanced Chat Privacy.

Integration with Advanced Chat Privacy

WhatsApp initially rolled out Advanced Chat Privacy in April 2025, providing an additional layer of per-chat protection for conversations that require more stringent data sharing controls. For conversations designated as restricted, the following protections are anticipated to remain active:

• Participants will be unable to export the complete chat history using WhatsApp’s built-in export functionality.
• Media shared within the chat will not automatically save to a device’s gallery or camera roll.
• Messages within the conversation cannot be utilized with Meta AI features.
• The conversation will not synchronize to linked devices, including WhatsApp Web and secondary phones.

Furthermore, WhatsApp implements a system notification whenever a participant alters the Advanced Chat Privacy setting, making such privacy status changes transparent within the conversation itself.

Target Users and Limitations

This feature could prove particularly valuable for individuals and organizations handling highly sensitive information, such as journalists, incident responders, executives, legal teams, activists, and entities discussing credentials, breach specifics, threat intelligence, financial data, or other confidential material. It may also help limit exposure to unofficial or modified web clients that leverage linked-device access, some of which could potentially read synchronized conversations or feed message content to third-party automation or AI services. By withholding restricted chats from linked-device synchronization, WhatsApp reduces the data footprint accessible to software operating through these sessions.

However, it is crucial to understand that Restricted Chat should not be considered a foolproof anti-leak solution. It cannot entirely prevent a participant from manually copying text, physically photographing the screen, taking screenshots where supported, or sharing information through channels outside of WhatsApp. The primary benefit of this control lies in reducing convenient, bulk, and linked-device-based data extraction pathways.

Restricted Chat is currently an Android feature in its development phase. Installing WhatsApp beta version 2.26.36.5 will not activate this option, as it has not yet been enabled for testing. Users are advised to continue regularly reviewing and removing any unrecognized linked devices while awaiting an official rollout schedule from WhatsApp.

What You Should Do

• Regularly review and remove any unrecognized linked devices from your WhatsApp account.
• Keep your WhatsApp application updated to the latest stable version to receive security enhancements as they become available.
• Exercise caution when discussing highly sensitive information on any platform, even with advanced privacy features enabled.
• Be aware that even with Restricted Chat, manual data exfiltration (e.g., screenshots, physical copying) remains a possibility.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.