Raksha
How it worksFeaturesBlog
Download App
Tips & Tricks

How to Lock WhatsApp, GPay,
and Banking Apps on Android

Your phone's lock screen PIN protects everything at once — but if someone sees you enter it once, it's useless. Adding a separate fingerprint or PIN lock to individual apps gives you a critical second layer of security.

Last updated: June 2026 · 6 min read

Why this matters even if your phone is locked

A thief who sees you type your PIN at a metro station can unlock your phone. A family member who borrows your phone can open your messages. App-level locks use your fingerprint — much harder to observe and copy.

WhatsApp

WhatsApp has a built-in fingerprint lock. Once enabled, opening the app requires your fingerprint (or PIN as fallback). Messages in notifications are still visible until you set notification privacy too.

1

Open WhatsApp → tap the three-dot menu (⋮) → Settings

2

Go to Privacy → Fingerprint lock

3

Toggle on "Unlock with fingerprint"

4

Choose lock timing: Immediately, After 1 minute, or After 30 minutes

5

Optional: Set notification content to "Hide message content" — prevents messages showing in pull-down even when locked

Note: WhatsApp's fingerprint lock doesn't work on all Android versions. If you don't see the option, use an app lock (see below).

Google Pay (GPay)

GPay has a screen lock setting that requires authentication before any payment — even if the phone is already unlocked.

1

Open Google Pay → tap your profile photo (top right)

2

Go to Privacy & Security

3

Tap "Screen lock" and turn it on

4

Also enable "UPI PIN" — this is separate from the screen lock and required for transactions above ₹2,000

PhonePe

1

Open PhonePe → tap the profile icon (top left)

2

Go to Settings → Security

3

Enable "App Lock" — choose fingerprint or pattern

4

Also set a UPI PIN if not done already — required for every transaction

Bank Apps (SBI, HDFC, ICICI, Axis, Kotak)

Most Indian bank apps have their own in-app PIN or mPIN that's separate from your phone lock. If yours doesn't, use the OEM app lock feature (below).

SBI YONO

Login with MPIN (6-digit). Set under Profile → Login Settings → Set MPIN. Also enable "Biometric Login" for fingerprint.

HDFC Mobile Banking

App PIN set during first login. Re-enable under Settings → Security → App Lock. Fingerprint supported.

ICICI iMobile Pay

Login PIN set at first use. Biometric option under Profile → Security Settings → Enable Fingerprint.

Axis Mobile

MPIN required every time. Change under Menu → Security → Change MPIN. Fingerprint available.

Kotak Mobile Banking

App PIN set on install. Enable fingerprint under Settings → Security → Biometric Login.

Using Your Phone's Built-In App Lock

If an app doesn't have its own lock, many Indian OEM phones have a system-level app lock that works for any app.

Xiaomi / Redmi / POCO

Settings → Privacy Protection → App lock → enable → select apps. Uses fingerprint or MI Account password.

Realme / OPPO

Settings → Privacy → App encryption → enable → select apps. Uses fingerprint or PIN.

Vivo

Settings → Fingerprint, Face & Passcode → Privacy password → App lock → select apps.

Samsung One UI

Settings → Biometrics and security → Secure Folder (for hiding apps) or use the Samsung Galaxy Store's "Smart App Lock" from the Galaxy Store.

Stock Android / Motorola

No built-in app lock. Use the Digital Wellbeing screen time feature or a third-party app lock from the Play Store (Norton App Lock is reliable and free).

Checklist: What to Lock

🔐
WhatsApp — Personal messages, OTPs, family photos
🔐
GPay / PhonePe / Paytm — Direct UPI payments — a thief can send money before you realise
🔐
Your bank app — Fund transfers, account details, linked card numbers
🔐
Gmail / email — Password reset emails for everything else
🔐
DigiLocker / mAadhaar — Identity documents — Aadhaar, PAN, driving licence
🔐
Amazon / Flipkart — Saved cards and addresses — easy purchases without UPI

Related Guides

UPI Safety If Phone StolenAndroid Permissions ExplainedProtect Phone in CrowdsPhone Stolen? First 60 Minutes

Raksha · Privacy · Terms · Blog