WhatsApp introduces alphanumeric passwords for two-step verification
WhatsApp is rolling out upgrades to its account security and calling features, most notably allowing users to replace the six-digit two-step verification code with a stronger alphanumeric password. The change marks the first significant update to WhatsApp's two-step verification since it launched in 2017, and is aimed at making accounts harder to compromise, particularly for users who had been relying on weak or easily guessed pins.
The new passwords must be at least eight characters long and include one number and one letter, with special characters also permitted; the feature remains optional, though WhatsApp is encouraging anyone using a simple pin like "123456" to switch. Alongside this, the app now supports multiple passkeys on a single account for users spanning Android and iOS devices, managed via Account > Passkeys in settings. WhatsApp is also adding contextual information to calls from unsaved numbers, showing the caller's country and any shared group chats to help users spot potential scammers, though this feature is currently limited to Android.
- WhatsApp now lets users set a strong password instead of a six-digit 2FA code
- Passwords need 8+ characters with a number and letter
- New Android feature shows caller's country and shared groups to flag scams
New here? Start with this
WhatsApp's two-step verification is a security feature that adds an extra check on top of your phone number when setting up the app on a new device, meant to stop someone else hijacking your account. Since it launched in 2017, it has relied on a simple six-digit code chosen by the user, which many people set to something easy to guess, such as "123456".
Meta, which owns WhatsApp, is updating this system alongside other safety tools built into the app, as messaging platforms remain a common target for scammers and account takeovers. The changes give users the option of stronger login protections and more information about unfamiliar callers, reflecting a broader push across tech companies to reduce fraud without forcing every user to change how they use the app.
Read the full article at the source →
Originally published by Engadget as “WhatsApp is upgrading its 2FA settings”.