WhatsApp is adding a new layer of protection against account takeovers to keep attackers from getting hold of a user's verification code. The update strengthens two-step verification, expands passkey support and adds more context around calls from unknown numbers.
WhatsApp is replacing its traditional six-digit two-step verification PIN with a stronger password option. Users can now create a longer, alphanumeric password that can also include special characters, making it considerably harder to guess than a simple numerical PIN.
Two-step verification acts as an additional barrier even if someone manages to obtain the one-time SMS code needed to sign into a WhatsApp account. That makes the change particularly useful against account-takeover attempts where attackers try to trick users into sharing their verification codes.
WhatsApp is also encouraging users who still rely on weaker PINs to upgrade their credentials rather than treating the six-digit code as sufficient protection.
WhatsApp is also expanding its support for passkeys. Users can now add more than one passkey to the same account, which should make the feature more practical for people who switch between devices or use both Android and iOS.
The company says more than one billion people are now using passkeys across WhatsApp, highlighting how quickly the passwordless sign-in method has gained traction.
Passkeys use the authentication system already built into a device, such as a fingerprint, face unlock or screen lock, instead of relying on a password that can be stolen or guessed.
The security update isn't limited to account sign-ins. WhatsApp is also adding additional context for calls from unknown callers, giving users more information before they decide whether to answer.
This will help users identify potentially suspicious interactions before engaging with them, particularly as scams increasingly rely on social engineering rather than technical exploits. Moreover, users won't have to turn to third-party caller identification services this way.
The new security features are rolling out as WhatsApp continues to strengthen account protections.
Overall, these changes give WhatsApp users more ways to secure their accounts while making common takeover methods harder to exploit. The move to stronger passwords and multiple passkeys is especially useful for users who want an extra layer of protection beyond the standard verification process.
Related Articles
