A locked Android phone may not be as locked as it seems. A reported WhatsApp behavior suggests that someone with physical access to a locked Android device could potentially reach the phone's photo gallery while answering an incoming WhatsApp video call, though the issue doesn't appear to affect every handset, with results reportedly varying by ...
A locked Android phone may not be as locked as it seems. A reported WhatsApp behavior suggests that someone with physical access to a locked Android device could potentially reach the phone’s photo gallery while answering an incoming WhatsApp video call, though the issue doesn’t appear to affect every handset, with results reportedly varying by manufacturer.
According to the reports, tests on multiple devices found that a Google Pixel 6 Pro and an Oppo K13 allowed access to the full gallery straight from the lock screen, while a Samsung Galaxy S25 Ultra reportedly required a PIN or biometric authentication before showing any photos. Notably, the Oppo and Samsung devices were both running Android 16, which suggests the difference may come down to each manufacturer’s own software implementation rather than the Android version itself.
The reported method doesn’t involve malware, hacking tools, or a remote attack – it simply requires someone to have physical access to the phone while an incoming WhatsApp video call comes in. From there, the reported sequence goes like this: the person answers the call without unlocking the device, then opens WhatsApp’s effects interface, which offers filters, backgrounds, and other options. A Meta AI image option can reportedly lead to an Edit Photo button, and on affected devices, tapping it may open the phone’s gallery without asking for authentication. The rest of the phone stays locked, but that unrestricted gallery access could still expose personal photos, screenshots, scanned documents, and other sensitive images.
The differing results across devices suggest the behavior may depend on how individual manufacturers handle lock-screen restrictions. Android phone makers customize the operating system through software layers such as ColorOS, One UI, and Pixel software, so two phones running the same Android version can behave differently when apps are accessed from the lock screen.
iPhones don’t appear to have the same exposure, since WhatsApp calls there rely on Apple’s CallKit framework. When an iPhone is locked, incoming WhatsApp calls come through Apple’s own system calling interface rather than WhatsApp’s full in-call interface, which keeps users from reaching that same effects panel before unlocking the device.
Anyone concerned about this behavior can restrict WhatsApp’s photo permissions for extra protection: go to Settings > Apps > WhatsApp > Permissions > Photos and videos, then choose Select photos and videos, Limited access, or the equivalent option instead of granting access to the entire library, and pick only the images WhatsApp actually needs.
There’s currently no universal fix mentioned in the reports, and since the behavior varies by manufacturer, users should check their own device’s lock-screen behavior and avoid giving WhatsApp unrestricted access to their full photo library where possible.
Apple AirPods Pro 3
Robert Haba is the founder and editor-in-chief of Droid Tools. A lifelong gadget enthusiast with over a decade following the Android ecosystem, he built this publication to cut through the noise and give readers honest, real-world coverage of the tech they actually use.
Unreleased code in Google Photos v8.0 points to an upgraded Ask Photos interface capable of performing multi-step tasks like editing and album creation.
Google Photos may add a dedicated RAW images section to Collections to help users find, edit, and manage space-heavy RAW photos.
Google Messages pinned chats are receiving an updated layout with large contact photos in beta, alongside a new floating search button.
Google is rolling out gradient icon redesigns to Phone and Contacts apps, with subtle gradients and cleaner edges across mobile and web platforms.
The next story loads as you reach the end. You can also load it using the button.
Comments & Discussions
Join the conversation! We use Disqus to handle comments. Click the button below to load the comment section.