WhatsApp, the widely used messaging application owned by Meta, has rolled out a suite of new security features designed to bolster user account protection. These updates include a significantly stronger two-step verification process and the capability to link multiple passkeys to a single account, alongside improved caller context for Android users.

The move comes as messaging platforms, including rivals like Signal and Telegram, are increasingly focusing on making account security more robust and user-friendly in the face of evolving and sophisticated phishing and hacking attempts. WhatsApp’s enhanced two-step verification now allows users to move beyond a simple six-digit PIN, offering the option to create a longer, alphanumeric password incorporating special characters, thereby making accounts substantially harder to compromise.

Further strengthening login security, users can now add more than one passkey to their WhatsApp account. This feature is particularly beneficial for individuals who utilize both iOS and Android devices. Passkeys, which WhatsApp began supporting in 2024, represent a significant leap beyond traditional passwords. They enable biometric logins via Face ID or fingerprint recognition, effectively eliminating the vulnerability of username and password combinations to phishing attacks. This method makes it exceedingly difficult for malicious actors to gain remote access, as it typically requires physical access to the device storing the user’s passkey.

In addition to these core security upgrades, Android users will now receive more contextual information when receiving calls from numbers not saved in their contacts. This includes details such as the caller’s country of origin and any shared groups, providing users with better insights before answering. These latest features are part of a continuous stream of updates from WhatsApp, which recently introduced usernames for profile sharing without disclosing phone numbers and a subscription plan offering advanced customization and interaction features.

Key Takeaways

• WhatsApp has significantly upgraded its account security with enhanced two-step verification and multi-device passkey support.
• The new two-step verification allows for stronger, alphanumeric PINs, while passkeys offer biometric login (Face ID/fingerprint) and superior phishing resistance.
• Additional features include improved caller context for Android users and align with WhatsApp's recent efforts to enhance user privacy and functionality.

Editor’s Analysis & Impact

This strategic update by WhatsApp, a dominant player in the global messaging landscape, sets a new benchmark for user security across the industry. It underscores a critical trend among major tech platforms to proactively combat increasingly sophisticated cyber threats like phishing, compelling competitors to innovate further in their security offerings. The strong emphasis on passkeys signals a broader industry shift away from traditional password-based authentication towards more secure, biometric-driven methods, which could accelerate mainstream adoption of such technologies, making digital interactions safer and more seamless for a wider audience. For Meta, this move reinforces WhatsApp’s commitment to user privacy and security, potentially boosting user trust and retention in an intensely competitive market. This proactive stance is crucial for maintaining its market leadership and user base.

Frequently Asked Questions

Q: What is the main improvement to WhatsApp's two-step verification?
A: Users can now create a longer, alphanumeric PIN that includes special characters, making it significantly harder to guess compared to the previous six-digit numeric PIN.

Q: How do passkeys enhance WhatsApp account security?
A: Passkeys allow users to log in using biometrics like Face ID or fingerprints, eliminating the need for traditional passwords. They are highly resistant to phishing attacks because an attacker would need physical access to the user's device.

Q: Can I use passkeys on multiple devices?
A: Yes, WhatsApp now supports adding more than one passkey to an account, which is particularly useful for users who access WhatsApp from both iOS and Android devices.