WhatsApp is adding stronger two-step verification, multiple passkeys and extra information about unknown callers as it looks to strengthen security for accounts on the platform.
WhatsApp is introducing new security features designed to make it harder for criminals to take over accounts, including stronger two-step verification and support for multiple passkeys.
The Meta-owned messaging app announced the changes on Tuesday (25.08.26) as phishing and hacking attempts become increasingly sophisticated.
WhatsApp’s two-step verification has traditionally required users to create a six-digit PIN.
The PIN provides an additional layer of protection if someone obtains a user’s one-time passcode.
Users can now choose a longer alphanumeric password containing special characters, making the additional security measure harder to guess.
WhatsApp is also allowing users to add more than one passkey to an account.
The company said this could be particularly useful for people who use both iPhones and Android devices.
Passkeys, which WhatsApp introduced in 2024, allow users to sign in using biometric authentication such as Face ID or a fingerprint.
Unlike traditional passwords, passkeys are designed to resist phishing because users do not need to enter a password that can be stolen.
An attacker would generally need physical access to a device storing the user’s credentials to gain access through a passkey.
The latest update also gives Android users more information when receiving calls from unknown numbers.
Users will be able to see whether the caller’s number is registered in another country and whether they share any WhatsApp groups with the caller.
The additional context could help people decide whether to answer an unfamiliar call or ignore it.
The changes come as WhatsApp and rival messaging services such as Signal and Telegram look to make security features easier for everyday users.
WhatsApp has introduced several other changes in recent months.
In June, the company launched usernames, allowing users to share their WhatsApp profile without revealing their phone number.
Meta also introduced a subscription service for WhatsApp in May, offering features including profile customisation, enhanced reactions and insights into Status posts.
The service was launched alongside similar Plus subscriptions for Instagram and Facebook.
WhatsApp’s latest security measures reflect a wider shift towards authentication methods that do not rely on passwords or easily guessed PINs.
By allowing stronger verification and multiple passkeys, the company is aiming to make account protection less dependent on users recognising phishing attempts or remembering complex credentials.
WhatsApp tightens account security with new features
