WhatsApp enhances security with stronger passwords, call protection, and passkeys

WhatsApp is significantly upgrading its security infrastructure with a suite of new features designed to protect user accounts and enhance privacy. The most notable change involves the two-step verification process, which will transition from a six-digit PIN to a more robust eight-character password.

This new password requirement mandates the inclusion of at least one letter and one number, with the option to use special characters. The update aims to provide a higher level of security against unauthorized access. Users with existing two-step verification enabled will be prompted to upgrade their PIN to the new password format. Additionally, linking an email address to the account is now strongly recommended for easier password recovery in case it is forgotten.

Further enhancing user safety, WhatsApp is introducing improved call protection features, particularly for calls from unknown numbers. On Android devices, the app will display more contextual information about incoming calls, such as whether the call originates from another country or the number of mutual contacts shared with the caller. This allows users to make more informed decisions about answering potentially suspicious calls.

In parallel, WhatsApp is expanding its support for passkeys, a modern authentication method that utilizes biometrics (fingerprint, facial recognition) or device-level security codes instead of traditional codes. The platform will allow users to store multiple passkeys for a single account, simplifying the experience for those who use WhatsApp across several devices. Passkeys can also be used to secure chat backups. Currently, over a billion users have already set up passkeys for their accounts.

These new security enhancements are being deployed incrementally to both Android and iOS users. While some users may already see these features in their apps, wider availability is expected over the next few weeks.