WhatsApp is upgrading two-step verification from a 6-digit PIN to a full password, adding context for unknown callers on Android, and revealing over 1 billion people now use passkeys.
WhatsApp is rolling out a set of new account security features, the company announced, aimed at making it harder for anyone but you to get into your account — and giving you more information before you pick up a call from a stranger.
Two-Step Verification Upgrades From a 6-Digit PIN to a Full Password
Two-step verification adds a layer of protection that helps prevent account takeover even if someone gets hold of your one-time passcode. Until now, that second layer was a 6-digit PIN. WhatsApp has now upgraded it to a full password — longer, alphanumeric, and able to include special characters, making it significantly harder to guess or brute-force than a simple numeric code.
More Context Before You Answer an Unknown Caller
Scam calls typically rely on urgency and a lack of information to pressure people into answering and acting quickly. WhatsApp’s answer: on Android, calls from numbers not saved in your contacts will now show additional context, including whether the number is registered in a different country and whether you have any groups in common with the caller. The idea is to give people a moment to evaluate a call before deciding whether to pick up.
More Than 1 Billion People Already Use Passkeys
Passkeys let you log back into WhatsApp using your fingerprint, Face ID, or screen lock — no codes or PINs required. According to WhatsApp, more than 1 billion people have already set one up. The platform is now also letting users add more than one passkey to a single account, useful for anyone who splits their time between an Android and an iOS device. The option is available under Settings > Account > Passkeys.
Why This Matters
Account takeovers and impersonation scams remain some of the most common ways bad actors exploit messaging platforms, and both of these upgrades target that risk from different angles -making the account itself harder to break into, and giving users better judgment tools for suspicious contact once someone’s already reaching them. WhatsApp said it will continue building tools aimed at keeping accounts secure and in users’ control.

Image credits: Meta