How to deactivate your WhatsApp account (and stop others from doing it)
WhatsApp has no deactivate button for your own account: you can delete it yourself in the app (Settings > Account > Delete account), or, if your phone is lost or stolen, have your mobile provider block the SIM and then ask WhatsApp to deactivate the account. A deactivated account is deleted permanently after 30 days unless you register your number again before then.
This page explains what deactivation does, how it differs from deleting or logging out, how the 2023 "deactivate anyone's account by email" problem worked, and the settings that protect your own account against it.
What WhatsApp account deactivation means
WhatsApp account deactivation is a temporary, disabled state that ends in permanent deletion after 30 days if the number is not registered again. According to the WhatsApp Help Center article on account deactivation, three things are true during that window:
- Your contacts can still see your profile and can still send you messages.
- Messages sent to you are held as pending for up to 30 days.
- If you register again before deletion, you receive the pending messages on your new phone, stay in your groups and can restore your chat history.
Deactivation is therefore not a "pause" button. WhatsApp has no setting that hides your account for a while and brings it back unchanged. If you only want a break, the closest options are muting notifications, logging out of linked devices, or removing the app while keeping the account registered. If you want to leave for good, deletion is the direct route.
How to deactivate your WhatsApp account when your phone is lost or stolen
The safest way to deactivate WhatsApp on a lost or stolen phone is to block the SIM through your mobile provider first, then move your number to a new device. WhatsApp itself names blocking the SIM as the way to deactivate an account in this situation.
- Call your mobile provider and ask them to lock or block the SIM. Without a working SIM, nobody can receive the SMS or call that WhatsApp needs to register the number again.
- Get a replacement SIM or eSIM with the same number.
- Install WhatsApp on the new phone and verify your number. Only one phone can be registered to a number at a time, so the old phone is logged out.
- If you cannot get a replacement SIM quickly, contact WhatsApp support from the app or Help Center and follow its lost or stolen phone process. WhatsApp may ask for proof that the number is yours, such as a phone bill or contract.
- Change the password of any linked Google or iCloud account, and use your phone maker's find-my-device service to lock or erase the lost phone.
Act inside the 30-day window. After that, the account is deleted and pending messages are gone.
Deactivate vs delete vs log out
Deactivating, deleting and logging out are three different actions with different results, and picking the wrong one is the most common mistake.
| Action | How you start it | What happens |
|---|---|---|
| Delete account | In the app: Settings > Account > Delete account, then confirm with your number | Removes the account, your message history, group memberships and backup; cannot be undone |
| Deactivation (lost or stolen phone) | SIM block through your provider, or a request to WhatsApp support | Account disabled; deleted after 30 days unless you register again |
| Log out a linked device | Settings > Linked devices on your main phone | Only that computer or tablet loses access; the account stays active |
If you plan to delete your account, export or transfer any chats you want to keep first. Deletion also removes you from groups, and you cannot reverse it later.
Can someone else deactivate your WhatsApp account?
Someone else could deactivate a WhatsApp account in July 2023, and WhatsApp now says it verifies ownership before acting on such requests. ESET security advisor Jake Moore showed on Twitter that WhatsApp's lost-phone process accepted a deactivation request for any number, sent from any email address, without proving who owned it. ghacks reported the same behavior at the time. The account was logged out, and the owner had to register the number again to get back in.
The risk was a denial-of-service attack rather than a takeover: the attacker did not get your messages, but could knock you offline, and an account used only now and then could reach the 30-day deletion point unnoticed. After the reports, WhatsApp told Digit that requests now require verification that the account belongs to the person asking, for example a copy of a phone bill or contract, and that locking the SIM remains the best option for a lost phone.
How to protect your WhatsApp account from deactivation and takeover
The best protection for a WhatsApp account is to make re-registration on your number require something only you have. These settings are built into the app:
- Two-step verification: Settings > Account > Two-step verification. Set a PIN that WhatsApp asks for whenever the number is registered on a new phone, and add an email address so you can reset a forgotten PIN.
- Passkey: Settings > Account > Passkeys lets you sign in again with your phone's screen lock instead of an SMS code, where your platform supports it.
- Never share your six-digit code: no legitimate contact or support agent needs it. A message from a "friend" asking you to forward a code is the classic takeover trick.
- Protect the recovery email: use a strong, unique password and two-factor sign-in on the mailbox linked to two-step verification.
- Ask your carrier for a SIM PIN or port-out lock to make SIM swap fraud harder.
- Open WhatsApp regularly. If you are suddenly logged out, register again at once instead of waiting.
The same layered approach works across services: compare it with two-factor authentication on Instagram and Meta's passkey rollout on Facebook.
How to recover a deactivated WhatsApp account
You recover a deactivated WhatsApp account by registering your phone number in the app again within 30 days. Open WhatsApp, enter your number and confirm the SMS or voice code. If two-step verification is on, enter your PIN, or use the email reset link if you forgot it.
If you were logged out unexpectedly, someone may have requested deactivation or tried to register your number on another phone. Register again right away, then turn on two-step verification if it was off, check Settings > Linked devices for computers you do not recognize, and warn your contacts not to act on messages that seemed to come from you while you were locked out. If the code never arrives, confirm with your carrier that your SIM is still active and has not been swapped. While you are in your settings, it is also worth turning on WhatsApp's safety overview for unknown group chats.
FAQ
Can I temporarily deactivate WhatsApp and come back later?
Not with a built-in switch. Deactivation is meant for lost or stolen phones and turns into deletion after 30 days, so for a short break mute chats, turn off notifications or remove the app while keeping the account registered.
Will my contacts know my WhatsApp account is deactivated?
WhatsApp's Help Center does not mention any notice to contacts. Your profile stays visible and their messages are held as pending for up to 30 days, so they may only notice that their messages are not delivered.
Do I lose my chats if my account is deactivated?
Not if you register again within 30 days: you get pending messages, keep your groups and can restore your chat history from a backup. Once the account is deleted, the account and its pending messages are gone.
Related: what WhatsApp Web can and cannot do, protect a Discord account with a security key, factory reset an iPhone
Ahhh . . . the tranquil, azure waters of Berlengas Islands.
Find My Device may be giving me false promises; theoretically, the phone can easily, remotely be erased. If, however, I can’t sign in to my account, for whatever reason, I don’t know.
Do I remember a time when travel was all about not having technology, not having such worries, not having cameras [or three], not having anything but a few essentials in a duffle, a passport, and gone–fly away never to see a “screen” of any type or a door for the next four-six weeks.
https://android.com/find
Hi you all again after two weeks! I missed Ghacks really a lot! :D
This nonsense about “fake security” with digital services is a complete shame nowadays. It’s completely weird that an account and/or service can be deactivated as easy as the article says. However here I give you all another weird demonstration of this “fake security” designed by dumb people: Yahoo Mail password can be bypassed easily as hell too, using obviously their “false security” procedures they offer. Here we go:
1) 15 seconds of full access to the phone of the owner of the Yahoo Mail account is required.
2) Go to Yahoo Mail site and enter the owner’s email address, then just click on the link “I forgot my password” and “send a SMS code to phone number xxxx” (Yahoo needs one email registration and one phone number, because it’s required for the two step security).
3) You will receive the SMS code, copy the code, click next, change password, and that’s it all, you have gained full access to the poor Yahoo user mail account!
How do I have discovered this? Because in my holidays in Portugal my girlfriend forgot her password and I helped her to access her account. We both were so worried about the danger if someone steal our phones to read our SMS ! Nowadays the smartphones are a really danger themselves, just use all the blocking methods you can to prevent using by strangers! :S