WhatsApp is bringing upgrades to its account security. The messaging app is replacing the familiar six-digit two-step verification PIN with a full alphanumeric or special-character password, giving users another layer of protection against account takeovers.
In a blog post, the company announced the change, where it revealed three new security features. Alongside the new account password, WhatsApp is also expanding passkey support and adding more information about unknown callers on Android.
Until now, WhatsApp’s two-step verification has relied on a six-digit PIN. The new system lets users create a longer password instead, with support for letters and numbers. WhatsApp says the change is designed to make the extra security layer harder to guess.
Users can find the option by heading to Settings and then to Account. If the feature has reached their account, they can set up the new password from the dedicated two-step verification settings.
The password requirement is also more flexible than the old PIN. According to the information currently available, users need to create a password with at least eight characters, including at least one letter and one number.
The idea is pretty simple: a six-digit numeric PIN has a relatively small number of possible combinations, and users can sometimes pick predictable numbers. A longer password gives attackers a much harder target.
However, the new password does not replace WhatsApp’s SMS verification code. Users will still need to verify their phone number using the one-time code sent by WhatsApp, with the account password providing an additional layer of protection.
WhatsApp is rolling out the account password feature gradually on Android and iOS, so it may not appear for everyone immediately. If you don’t see the option yet, you’ll likely have to wait for the rollout to reach your account.
Meanwhile, WhatsApp says more than 1 billion people now use passkeys to secure their accounts. The company is also adding extra context for calls from unknown numbers on Android, including information such as whether the caller is from another country or shares a group with you.
Be the first to comment