These special phone and app features can help protect you from spyware

Spyware attacks targeting journalists, human rights advocates, and political dissenters have become alarmingly commonplace. In early 2025, WhatsApp alerted approximately 90 users, many of whom were journalists and civil society activists in Europe, about being targeted by Israeli spyware firm Paragon Solutions. A few months later, Apple informed a separate group of iOS users that two of them, both journalists, had been infected with Paragon’s Graphite spyware via a zero-click exploit, meaning they were compromised without needing to click on any links. These incidents are part of a larger trend. For over 15 years, security experts have documented numerous instances of government-sponsored hackers successfully breaching the devices of journalists, human rights defenders, critics, and political adversaries. These sophisticated and costly tools allow attackers to infiltrate and install spyware primarily on smartphones, which contain extensive personal data about individuals' daily lives. Spyware grants its operators nearly complete access to the target's device and data. This means government agents can record phone calls, capture text messages, access photos, and even activate the device’s camera and microphone to overhear conversations. Additionally, spyware often tracks a person’s real-time location. In light of these threats, major tech companies are stepping up their defenses. Apple, Google, and Meta are rolling out opt-in features aimed at countering targeted spyware attacks. While these enhancements may limit some standard functionalities, many users find them manageable and worthwhile given the enhanced protection they offer. Tech giants, along with security researchers and experts, strongly encourage users who may be at risk of government surveillance to activate these features. Even if you don’t believe you are a target, utilizing these security measures can help safeguard your data from unauthorized access. No security system is foolproof, and it demands ongoing vigilance to keep vulnerabilities at bay. Spyware creators are constantly developing new methods to infiltrate devices, while software developers respond with updates and countermeasures. This cycle underscores the importance of utilizing available security features. Runa Sandvik, a security researcher with over a decade of experience in protecting vulnerable communities, emphasized, “These features are free, easy to enable, and represent our best defense against advanced spyware. If they interfere with your tasks, you can easily disable them, making it a low-risk decision to try them out.” Here’s a brief overview of these protective features and how to activate them: Apple's Lockdown Mode is available across all Apple devices, including iPhones. When activated, this mode restricts certain functionalities in exchange for enhanced security. Notably, evidence shows that Lockdown Mode has thwarted spyware attacks, including one involving the notorious NSO Group’s Pegasus software. Since its introduction, Apple claims there have been no successful breaches of devices with Lockdown Mode enabled. To activate this feature, navigate to Settings, then Privacy & Security, and select Lockdown Mode, which will require a device restart. Google's Advanced Protection Program, launched in 2017, bolsters the security of Google accounts against various cyber threats. To enable this feature, visit its official page and select “Get Started.” This process will require logging into your Google account and adding a physical security key or software passkey as an additional verification method. Android’s Advanced Protection Mode, inspired by Apple’s Lockdown Mode, offers similar defenses for Android users. To activate this feature, go to Settings, then Security and Privacy, followed by Advanced Protection, and select Device Protection. WhatsApp, with over 3 billion users, has also faced significant threats from government hacking attempts. The demand for exploit tools capable of targeting WhatsApp is so high that they can fetch millions of dollars. In response to previous attacks, WhatsApp introduced Strict Account Settings, an opt-in feature that enhances privacy and security controls based on the operating system. To activate this feature, access your primary device, go to Settings, then Privacy, and turn on the Advanced settings.