WhatsApp has introduced a series of new security features designed to make it harder for attackers to take over accounts and help users make better-informed decisions when receiving calls from unknown numbers.
The Meta-owned messaging platform announced the changes, including stronger two-step verification, expanded passkey support and additional information for calls from people who are not saved in a user’s contacts.
WhatsApp is replacing its traditional six-digit two-step verification PIN with a full password that can be longer and contain letters, numbers and special characters.
Two-step verification provides an additional layer of protection when someone attempts to register or transfer a WhatsApp account, even if they have obtained the user’s one-time verification code.
The move is intended to make account takeovers more difficult by giving users a stronger credential that is harder to guess than a short numerical PIN.
More information about unknown callers
WhatsApp is also giving users more context when they receive calls from numbers that are not saved in their contacts.
On Android, the incoming call screen can show information such as whether the caller’s number is from another country and whether the caller shares any WhatsApp groups with the recipient.
Read also: Microsoft employees reveal AI usage costs as internal spreadsheet tracks workplace spending
The company said the feature is designed to give users a moment to assess an unfamiliar call before answering, particularly as scammers often rely on urgency to pressure potential victims.
WhatsApp expands passkey support
The platform also announced that more than one billion people now use passkeys to access their WhatsApp accounts.
Passkeys allow users to authenticate using methods such as a fingerprint, Face ID or their device’s screen-lock credentials instead of relying on traditional passwords or verification codes.
WhatsApp will now allow users to add multiple passkeys to the same account, which could be useful for people who use both Android and iOS devices.
What the update means for users
The changes come as account takeovers, impersonation and social-engineering scams remain major risks on messaging platforms.
For WhatsApp users, the new tools shift security from relying mainly on a verification code to using several layers of protection:l such as stronger account credentials, passkeys and more information at the point of receiving an unfamiliar call.
The features are being rolled out gradually, meaning they may not be available to every user immediately.
Android users should also note that the additional caller information is currently limited to the Android platform.
WhatsApp is building security features into everyday interactions, rather than leaving protection entirely to users to configure after an account has already been compromised.
Get Newsletter Updates
Enjoying our column?
Subscribe to our specialised **Tech Pulse** feed to receive fresh reports and analyses directly in your inbox.
Folake Balogun is a technology journalist covering Africa’s digital economy, with a focus on startups, fintechs, venture capital, artificial intelligence, and emerging technologies. Her work explores the intersection of technology, business, and society, highlighting how innovation is reshaping industries and everyday life across Africa and global markets. She translates complex trends into insightful and impactful stories for a wider audience.
Comments
Start the conversation about this story.