WhatsApp strengthens account security with upgraded two-step verification and multiple passkeys
Meta-owned messaging platform replaces six-digit PIN with alphanumeric passwords and allows multiple biometric logins to combat sophisticated phishing attempts.
WhatsApp has announced a series of security upgrades designed to fortify user accounts against increasingly sophisticated phishing and hacking attempts. The Meta-owned platform is moving beyond its traditional six-digit PIN for two-step verification, allowing users to select a longer alphanumeric password that includes special characters. This change aims to make the secondary layer of protection significantly harder for bad actors to guess, even if they have obtained a user’s one-time passcode.
The update also expands the utility of passkeys, a feature WhatsApp introduced in 2024. Users can now add multiple passkeys to a single account, a development that is particularly useful for individuals who switch between iOS and Android devices. Passkeys enable login via biometric methods such as Face ID or fingerprint, removing the reliance on username and password combinations that are often susceptible to phishing. By requiring physical access to a device that stores part of the passkey, the system makes remote account takeover more difficult.
In a separate enhancement for Android users, the app will now provide contextual information for calls from unknown numbers. This includes details such as the caller’s country of origin and whether the caller shares any groups with the recipient. These features are intended to help users assess the legitimacy of incoming calls from contacts not already stored in their address books.
The latest security measures arrive as WhatsApp and competitors such as Signal and Telegram seek to make account security more accessible for everyday users. The updates follow a busy period for the platform, which introduced usernames in late June to allow profile sharing without disclosing phone numbers. In late May, Meta also launched a subscription plan for WhatsApp, offering features such as profile customisation, super reactions, and story insights alongside similar offerings for Instagram and Facebook.
While the specific timeline for the full rollout of these features to all users has not been explicitly detailed, the changes represent a significant shift in how the platform handles authentication. The move underscores a broader industry trend towards reducing dependency on traditional passwords in favour of more robust, biometric-driven security protocols.
