WhatsApp Introduces Stronger Two-Step Verification, New Security Features

WhatsApp has introduced new account security features, including stronger two-step verification, additional information about calls from unknown numbers and expanded passkey support.

The company said the measures were aimed at helping users strengthen the security of their accounts and reduce the risk of unauthorised access.

WhatsApp said its two-step verification feature had been upgraded from a six-digit PIN to a full password, allowing users to create longer alphanumeric passwords with special characters.

According to the company, the additional security layer is designed to help prevent unauthorised persons from taking over an account, even if they gain access to a user’s one-time verification code.

The messaging platform also announced additional context for calls from unknown numbers.

It said Android users would now see more information about callers who were not saved in their contacts before deciding whether to answer a call.

The information could include whether the number was from another country and whether the caller shared any WhatsApp groups with the recipient.

WhatsApp said the feature was intended to give users more context when receiving calls from unfamiliar numbers and help them make informed decisions before answering.

The company also said more than one billion people had adopted passkeys for their WhatsApp accounts.

Passkeys allow users to verify and regain access to their accounts using biometric authentication, such as fingerprints or facial recognition, or their device screen lock code.

WhatsApp said users could now add more than one passkey to an account, particularly for those using both Android and iOS devices.

Users can access the feature through Settings > Account > Passkeys.

The company said it would continue to introduce security tools to help users maintain control of their accounts and protect their private conversations.

WhatsApp said its end-to-end encryption remained enabled by default to ensure that conversations could only be accessed by users and the people with whom they communicate.