Apps & Consumer
WhatsApp strengthens two-step verification and adds multiple passkeys
WhatsApp is rolling out stronger account-security features, including a longer alphanumeric two-step verification option, support for multiple passkeys per account, and more context on calls from unknown numbers.
WhatsApp announced Tuesday that it’s launching new security features to help users keep their accounts secure, including stronger two-step verification, the ability to add more than one passkey to an account, and added context on calls from unknown numbers. The Meta-owned app’s updates come as WhatsApp and other messaging apps, such as Signal and Telegram, work to make account security easier and more accessible for everyday users, as phishing and hacking attempts have grown more sophisticated.
Until now, WhatsApp’s two-step verification relied on a six-digit PIN as an extra layer of protection, preventing someone from taking over an account even if they obtained a user’s one-time passcode. Users can now choose a longer, alphanumeric password with special characters instead, making it harder to guess.
On passkeys, users can now add more than one to their account — useful, WhatsApp says, for people who use both iOS and Android. Passkeys, which WhatsApp added support for in 2024, are far stronger than passwords and let users log in with Face ID or a fingerprint, removing the need for username-and-password combinations that are vulnerable to phishing. Because logging in with a passkey requires physical access to the device storing a user’s half of the key, it’s harder for remote attackers to access accounts even past multi-factor authentication.
Separately, Android users will now see more information when receiving a call from a number not in their contacts, such as whether the number is from a different country and whether they have any groups in common with the caller.
The updates add to a string of features WhatsApp has rolled out in recent months: usernames, launched in late June to let people share profiles without revealing their phone number, and a Meta subscription plan launched in late May — WhatsApp Plus — that unlocks extras like profile customization, super reactions, and story insights, alongside similar “Plus” plans for Instagram and Facebook.
Why it matters
The update reflects a broader push across messaging apps to make strong account security more accessible to everyday users, as phishing and account-takeover attempts grow more sophisticated.