WhatsApp has a fingerprint lock built in. Before you install anything, turn that on, because it is free, it is first-party, and for a lot of people it is the whole answer.
Settings, then Privacy, then look for the lock option near the bottom. Turn it on and pick how quickly it re-locks. Immediately is the only setting worth using; the longer timeouts exist to stop you being annoyed, and being annoyed is the point.
Where the built-in lock stops
It locks WhatsApp. That is the whole scope, and it leaves four gaps that people find out about the hard way.
Photos are not in WhatsApp. Media you receive lands in your gallery. Someone who cannot open WhatsApp can still open Photos and scroll. Locking the messaging app while leaving the gallery open protects the conversation and not the content.
Notification previews still arrive. A locked app still pushes notifications, and on most phones the preview shows the sender and the first line on the lock screen. That is a separate setting in a separate place, and almost nobody changes both.
It is one app. If WhatsApp is worth locking, your gallery, your banking app and your email probably are too. Doing that one app at a time, in four different settings screens, is how it ends up half done.
Biometric only, on some devices. Depending on your phone and Android version, the built-in lock may not offer a PIN fallback. Wet hands, a cracked sensor, a bandaged finger. Check whether yours does before you rely on it.

What a system-wide app lock adds
Secure Folder puts the same gate in front of any app you pick. WhatsApp, gallery, banking, email, social, anything installed. One list, one setup, one unlock method.
Open a locked app from your home screen and you get a lock screen. Unlock with fingerprint, face, PIN, pattern or password, whichever your phone already uses, so there is no new secret to remember. Protection comes back on its own after a restart, which is where a surprising number of lock apps quietly fail.
It also closes the notification gap. Turn on notification privacy and messages from locked apps are replaced with a blank alert, so the shade shows that something arrived without showing what it was or who sent it.
And because WhatsApp media ends up in your gallery, you can move the specific photos and videos you care about into an encrypted vault rather than trusting the gallery lock alone. There is a separate guide on hiding individual photos that covers how that works.
How an app lock actually works, and what that means
Android has no official “lock this app” API for third-party apps. Every app locker on the Play Store works one of two ways, and it is worth knowing which, because it explains the permissions.
The first is usage access, where the app polls which app is in the foreground. The second is an accessibility service, which receives a window-change event the moment a new app appears. The second is faster, which is why most lockers ask for it. Secure Folder uses both, so if one is unavailable the other still works.
This is also the honest limit of the whole category. An app lock is a barrier against a person holding your unlocked phone. It is not a barrier against someone with time, intent and access to Settings, because Settings is where the protection lives and a determined person can go there and switch it off. Optional device-admin protection makes that harder by requiring your PIN before the app can be removed, and the app blocks its own App Info screen, but a device owner can still revoke admin access or reset the phone.
Anyone who tells you their app lock is unbreakable is selling something. It raises the cost of a casual look from zero to genuinely inconvenient, and that is the actual job.
A sensible setup, in order
- Turn on WhatsApp’s own lock. It costs nothing and it is one more layer.
- Set a phone screen lock if you have not. Everything else assumes it.
- Lock the gallery as well as WhatsApp. Media does not stay inside the app it arrived in.
- Turn on notification privacy, or the lock screen leaks what the app lock just protected.
- Move genuinely private photos into an encrypted vault rather than relying on the gallery lock.
Common questions
Does an app lock stop WhatsApp notifications?
Not by itself. Locking an app does not stop it posting notifications, so the preview can still show the sender and message text. Notification privacy is a separate setting that replaces the content with a blank alert.
Can I lock WhatsApp with a PIN instead of a fingerprint?
With Secure Folder, yes. It accepts fingerprint, face, PIN, pattern or password, whichever your phone is already set up with. WhatsApp’s own built-in lock may be biometric only depending on your device.
Does the app lock work after restarting the phone?
Yes. Protection resumes on its own after a reboot, without opening the app first.
Will an app lock protect my WhatsApp backup?
No. A backup in Google Drive is outside the phone and outside anything an app lock can reach. WhatsApp has its own end-to-end encrypted backup option, which is where that particular problem is solved.
Is it free?
Yes, supported by ads. No account and no sign-up, and app locking works with no internet connection.