● Covered by 6 sources · 6 reportsMedium impact6 neutral
WhatsApp Enhances Account Security with Stronger 2FA and Multiple Passkeys
Key points
- Two-step verification now supports alphanumeric passwords with special characters.
- Users can add multiple passkeys to one account for cross-device use.
- New caller context for unknown numbers is available on Android.
- These updates aim to protect against phishing and hacking attempts.
Enhanced Two-Step Verification
WhatsApp has upgraded its two-step verification (2SV) feature, moving beyond the previous six-digit PINs. Users can now opt for a stronger, alphanumeric password that can include special characters. This change makes the 2SV password harder to guess, providing an additional layer of protection against unauthorized account access, even if a one-time passcode is compromised.
The six-digit PIN has been in use for 2SV since its introduction in 2017. The new password option requires at least eight characters, including one number and one letter, and allows for special characters. WhatsApp encourages users with simple PINs, such as "123456," to update to a stronger password.
Multiple Passkey Support
The messaging app now allows users to add more than one passkey to their account. This feature is particularly beneficial for individuals who use WhatsApp on both iOS and Android devices, as it enables them to manage secure logins across different platforms. Passkeys, which WhatsApp began supporting in 2024, offer a more secure login method than traditional passwords, utilizing biometric authentication like Face ID or fingerprints.
Over one billion people currently use passkeys to log into their WhatsApp accounts. Users can manage their passkeys by navigating to Settings > Account > Passkeys within the app.
Context for Unknown Calls on Android
WhatsApp has also introduced an additional security feature for Android users: more context for calls from unknown numbers. When receiving a call from a non-contact, users will now see additional information, such as the caller's country of origin or whether they are members of the same WhatsApp groups. This aims to provide users with more information before deciding to answer, helping to protect against scam attempts.
Broader Security Improvements
These updates are part of WhatsApp's ongoing efforts to enhance account security and make it more accessible for everyday users. The changes address the increasing sophistication of phishing and hacking attempts, providing stronger defenses against account takeovers. The company previously rolled out passkey support for Android in October 2023 and for iOS in early 2024.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
CVE CVE-2026-5823110.0 CRITICALHow outlets covered it
WhatsApp now supports multiple passkeys for a single account, allowing users to sign in across iOS and Android devices using phishing-resistant methods. The platform also upgraded its two-step verification from a six-digit PIN to a full password option and introduced more context for calls from unknown numbers on Android, aiming to improve account security and user awareness.
WhatsApp is upgrading its two-step verification from six-digit numerical PINs to full alphanumeric passwords that include special characters. This change enhances account security by making verification codes harder to guess, protecting user accounts even if one-time passcodes are compromised.
WhatsApp has introduced new security features, including stronger two-step verification with alphanumeric PINs and the ability to add multiple passkeys to an account. These updates aim to improve user account security against phishing and hacking attempts, making it easier for users to protect their accounts.
WhatsApp now allows users to set alphanumeric passwords for two-step verification, replacing the previous six-digit PINs. This change enhances account security and includes support for multiple passkeys across different devices, along with new caller information for unknown numbers on Android.
WhatsApp has introduced new account security features, including support for multiple passkeys across devices and an upgrade to two-step verification allowing alphanumeric passwords. These updates aim to strengthen user account protection against unauthorized access and scam attempts.
WhatsApp has introduced new security features, allowing users to add multiple passkeys and upgrading two-step verification from a six-digit PIN to a full password. These changes aim to improve account protection and user convenience across different devices.