Why Are Indian Rules Requiring 'WhatsApp Web' Users to Log Out Every Six Hours?
Synopsis
Key Takeaways
- Users must log out of WhatsApp Web every six hours.
- SIM binding is now mandatory for messaging services.
- Compliance reports are required from platforms within four months.
- Concerns over privacy and user convenience have been raised.
- The new regulations aim to combat cyber fraud effectively.
New Delhi, Dec 1 (NationPress) The Department of Telecommunications (DoT) has put forth a new rule that mandates messaging services, including WhatsApp, to automatically log out users every six hours.
This directive, issued last week, specifies that the subscriber identity module (SIM) used during registration must be linked to web-based platforms like WhatsApp, Telegram, Signal, Arattai, Snapchat, Sharechat, and others.
As the service must stay associated with the SIM in the user’s device, WhatsApp Web and similar platforms will be required to log users out every six hours once this rule comes into effect.
According to the DoT circular, within 90 days, users will lose access to these applications unless the original SIM card is inserted in the device. Each web-based platform must produce a compliance report within four months.
This change is likely to disrupt the convenient multi-device experience that many users have enjoyed by keeping WhatsApp Web active throughout their workday. The government believes this measure is essential to curb the misuse of messaging applications, as cyber fraudsters have exploited WhatsApp without having the SIM present, frequently operating from outside India.
Implementing mandatory SIM binding allows for tracking activities back to a physical subscriber.
The new regulations stem from the Telecommunication Cybersecurity Amendment Rules, 2025, which introduced the concept of a Telecommunication Identifier User Entity.
The amended rules require platforms to access the International Mobile Subscriber Identity (IMSI) stored on the SIM, forcing global services like WhatsApp to redesign certain aspects of their systems for users in India.
Tech companies have expressed concerns that continuous SIM checks and mandatory six-hour logouts will infringe on user privacy, disrupt multi-device convenience, and complicate access for travelers, while telecom operators have supported the initiative.