WhatsApp is introducing stronger security measures aimed at making it more difficult for criminals to take control of user accounts.
The messaging platform is replacing its traditional six-digit two-step verification PIN with a longer password that can include letters, numbers and special characters.
Users are being encouraged to choose long and unique passwords rather than predictable combinations such as birthdays, names or commonly used sequences like “123456.”
WhatsApp Adds Support for Multiple Passkeys
WhatsApp is also expanding support for passkeys, allowing users to add multiple passkeys to a single account.
Passkeys can let users sign in using biometric authentication, such as a fingerprint or Face ID, or through their device’s screen-lock code. This reduces reliance on traditional verification codes and PINs.
Users can check whether passkey support is available on their account by opening:
Settings > Account > Passkeys
If the option is available, users can follow the on-screen instructions to set up additional protection.
Android Users Get More Information About Unknown Callers
WhatsApp is also introducing additional information for Android users receiving calls from numbers that are not saved in their contacts.
The app may show whether an incoming caller is calling from another country and whether the caller and recipient are members of any of the same WhatsApp groups.
The information could help users make a more informed decision about whether to answer an unfamiliar call.
Linked Devices Remain a Security Risk
Despite the new security protections, users can still fall victim to scams involving WhatsApp’s Linked Devices feature.
Criminals may attempt to trick users into linking a malicious browser or device to their WhatsApp account. If successful, an attacker could potentially gain access without knowing the user’s account password.
Users should regularly review the devices connected to their WhatsApp account by going to:
Settings > Linked Devices
Any unfamiliar device should be removed immediately.
Security experts also recommend avoiding unsolicited WhatsApp QR codes and never entering linking codes provided by strangers.
Users should be particularly careful if someone claiming to be from WhatsApp support asks them to scan a QR code or approve a device-linking request as part of an alleged account recovery or technical support process.
How to Improve WhatsApp Account Security
Users can take several steps to strengthen their accounts:
- Enable the stronger two-step verification password.
- Set up passkeys if the feature is available.
- Use a long and unique password.
- Regularly review Linked Devices.
- Remove any device that is not recognised.
- Never approve unexpected device-linking requests.
- Avoid scanning unsolicited WhatsApp QR codes.
- Never share verification or linking codes with strangers.
The new security features add another layer of protection for WhatsApp users, but they do not eliminate the risks associated with social-engineering scams.
Remaining cautious and regularly checking account settings can help users reduce the chances of falling victim to account takeover attempts.
Also read: WhatsApp Username Feature Raises Impersonation and Scam Concerns
