WhatsApp two-step verification now supports alphanumeric passwords, allowing users to replace traditional six-digit PINs with longer credentials containing special characters.
The Meta-owned messaging service rolled out several protection tools on Tuesday, according to TechCrunch. These updates arrive as communication services respond to increasingly complex phishing methods across the digital sector.
Upgraded WhatsApp two-step verification
Previously, users relied strictly on a six-digit numerical code to secure their profiles against hijacking. The revised system lets account holders create complex passwords with numbers, letters, and symbols, making unauthorized access significantly harder to execute.
This extra layer works alongside one-time SMS passcodes to prevent hostile account takeovers. Consequently, the stronger WhatsApp two-step verification protects users even if someone intercepts their initial registration code or attempts credential stuffing attacks.
Support for Multiple Passkeys
In addition to password upgrades, the platform now allows people to store more than one passkey per account. This change benefits individuals who switch between iOS and Android mobile devices regularly, ensuring seamless access across different ecosystems.
WhatsApp first introduced passkey authentication in 2024 to enable biometric logins through fingerprint sensors or Face ID. Because passkeys store cryptographic keys locally on hardware, attackers cannot steal them through remote phishing tactics or intercept them over unsecured networks.
Caller Identification and Context
Android users will also receive more contextual information when unknown numbers call them. Specifically, the interface will show if the incoming phone number originates from a foreign country, giving users immediate clarity before they answer.
Furthermore, the screen will highlight any shared group chats between the user and the unidentified caller. This context helps users decide whether to answer or block suspicious contacts within apps, curbing unsolicited spam and fraudulent outreach.
Broader Security and Product Additions
These changes join several privacy updates released over recent months to create a multi-layered defense strategy. In late June, the company introduced usernames to let individuals connect without revealing personal phone numbers.
Meanwhile, the service launched a paid tier called WhatsApp Plus in late May, offering profile customization and story insights. Through these coordinated updates, WhatsApp continues to update its core cybersecurity defenses for millions of daily active conversations across global mobile networks.
