WhatsApp strengthens account security with stronger 2FA and smarter caller ID

Two-step verification on WhatsApp previously relied on a six-digit PIN. Users now have the option to set an alphanumeric password with at least eight characters, including one number and one letter, and special characters are also allowed. The feature remains optional, but WhatsApp advised users who have used simple PINs such as "123456" to update them.

For people who use WhatsApp on multiple devices, the app now supports multiple passkeys on the same account. Passkeys allow users to sign in with Face ID or a fingerprint and are considered more secure than passwords. WhatsApp introduced passkey support in 2024. The new option to add more than one passkey is useful for those who switch between Android and iOS devices.

Android users will also see additional information when receiving calls from numbers that are not saved in their contacts. The incoming call screen will show the country of the caller and any group chats that they have in common with the user. Meta said this could make it easier to identify potential scammers.

The updates come as messaging apps including Signal and Telegram are also working to make account security more accessible amid increasingly sophisticated phishing and hacking attempts. In recent months, WhatsApp launched usernames for sharing profiles without revealing phone numbers and introduced a paid subscription plan with extra features.