WhatsApp has become one of the most popular messaging apps, with over 2 billion users worldwide. However, with increased usage comes increased attention from hackers looking to access private conversations and personal data. Luckily, there are several ways to identify if your WhatsApp account has been compromised and steps you can take to secure it.
Signs Your WhatsApp May Be Hacked
Here are some common signs that your WhatsApp account may have been hacked:
- You notice messages being sent from your account that you did not send yourself
- Your contacts receive messages from your number that you did not send
- Your phone shows WhatsApp as being active when you are not using it
- Your phone runs slower than usual while WhatsApp is active
- Your account logs out suddenly and will not let you log back in
- Your profile information like your profile photo or About section have changed without you making the changes
- You notice unknown groups, contacts, or chats in your WhatsApp
If you notice any of these issues, it could indicate your account has been compromised. The next step would be to take action to secure your account.
Checking Your WhatsApp Web Sessions
One of the first things to check is your connected WhatsApp Web sessions. Hackers can gain access to your account by linking WhatsApp Web to your account without you knowing.
To check your currently linked sessions:
- Open WhatsApp on your phone
- Go into the Settings menu
- Select WhatsApp Web/Desktop
- Here you will see all computers and devices currently linked to your WhatsApp
- Carefully review the list and logout of any unknown or suspicious sessions
- Also logout of known devices if you think your account was hacked
This will disconnect any hackers from your account through WhatsApp Web. It’s a good idea to periodically review linked devices even if you don’t suspect hacking.
Enabling Two-Step Verification
Two-step verification adds an extra layer of security to your WhatsApp account by requiring a six digit PIN when logging in or registering your number to a new device.
To enable it:
- Open WhatsApp Settings
- Go to Account > Two-step verification
- Toggle on Enable
- Enter a six digit PIN and confirm
- Provide an email address to reset the PIN if you forget it
With two-step verification, even if a hacker gets your password they will not be able to log in without the PIN. Be sure not to share your PIN with anyone or store it where it could easily be accessed.
Updating Your Password
Changing your password periodically is always a good security practice. For WhatsApp:
- Go to WhatsApp Settings > Account
- Tap Change Password
- Enter your current password
- Enter and confirm your new password
Be sure your new password is strong and unique from passwords used on other accounts. Store it securely and do not share it with anyone.
Checking the Security Notifications
WhatsApp has a notifications feature that alerts you whenever a security code is changed or your account is registered on a new device.
To check past notifications:
- Go to WhatsApp Settings > Account
- Select Security notifications
This will show you a list of notifications including login attempts and changes. If you see any suspicious activity, take steps to secure your account.
Enabling Chat Backup Encryption
You can add an extra layer of security to your WhatsApp backup in Google Drive by enabling encryption:
- Open WhatsApp Settings
- Go to Chats > Chat Backup
- Tap End-to-end encrypted backup
- Tap Continue and follow the prompts to create a password
This will encrypt your backup so that only you can access it. Be sure to store the password somewhere secure in case you need to restore from the backup.
Restoring Your Account From a Backup
If your account has been hacked, after securing it you may want to restore your account from a backup to get a clean slate. Be sure this backup was created before the hack.
To restore on Android:
- Uninstall and reinstall WhatsApp
- When prompted, enter your phone number to send a verification code
- On the verification screen, tap Restore
- Follow the prompts to restore your chats and media from a backup
Restoring your account will overwrite any changes the hacker made.
Scanning Your Phone for Malware
Sometimes hackers can gain access to accounts by infecting devices with malware. It’s a good idea to scan your phone to remove any malicious software.
On Android you can:
- Use free antivirus apps like AVG or Avast
- Install anti-malware like Malwarebytes
- Use Google Play Protect to scan your device and apps
Your phone may also have a built-in scanner you can use. Removing malware can stop hackers spying through your phone.
Being Cautious of Third-Party WhatsApp Tools
Third party apps that offer additional WhatsApp features or tools can sometimes compromise security. Be very cautious about what tools you install.
Only download tools from the official WhatsApp site or reputable app stores. Popular tools like WhatsApp Plus should generally be avoided.
Avoiding Suspicious Links and Files
Hackers will sometimes send malicious links or files through WhatsApp to gain access or install malware. Never open files or click links unless you can verify the source.
Some signs a link may be suspicious include:
- From an unknown number
- Malformed or short URLs
- URLs that use a misleading link text
- Messages imploring you to click or offering something too good to be true
Stay on guard, even links from known contacts can be hacked. When in doubt, confirm with the sender before clicking.
Installing Updates Promptly
WhatsApp frequently releases updates to fix security issues and patch vulnerabilities. To stay secure it’s important to install updates for WhatsApp and your phone software promptly.
On Android you can enable automatic updates in the Google Play Store. On iOS updates install automatically.
Keeping your software up to date is key to preventing your device and WhatsApp from being hacked.
Using Caution with WhatsApp Web QR Codes
Scanning a WhatsApp Web QR code with your phone allows you to link devices. However, hackers can potentially access your QR code without you knowing.
Best practices include:
- Make sure no one can physically view your screen when scanning
- Don’t take screenshots of the QR code
- Scan codes in a secure environment you can control
- Frequently review linked devices and logout of unknown sessions
Following these tips will help ensure your WhatsApp Web pairing is secure.
Conclusion
Keeping your WhatsApp account secure takes some vigilance, but following these best practices can help you identify if your account is hacked and take steps to protect it.
Enable two-step verification, use strong unique passwords, avoid suspicious links and files, install software updates promptly, and regularly review your WhatsApp Web sessions and backup encryption. With a few precautionary measures, you can feel confident your private messages and data are safe.