WhatsApp is rolling out significant security updates, including enhanced two-step verification with alphanumeric passwords and multi-passkey support to combat sophisticated phishing attacks.

  • Users can now opt for complex alphanumeric passwords instead of simple 6-digit PINs.
  • Support for multiple passkeys allows seamless use across iOS and Android.
  • Enhanced call context for unknown numbers provides better protection against spam.

In a decisive move to bolster user privacy, WhatsApp announced on Tuesday the launch of several high-level security features. These updates are designed to protect users from increasingly sophisticated phishing and hacking attempts that have become prevalent in the modern digital landscape.

Enhanced Two-Step Verification

Traditionally, WhatsApp’s two-step verification relied on a standard six-digit PIN. While effective, such numeric codes can sometimes be vulnerable to brute-force or guessing attacks. Under the new update, users gain the flexibility to implement a longer, alphanumeric password incorporating special characters. This significantly raises the barrier for attackers attempting to hijack accounts.

Read Also:OpenAI Disbands Team That Assessed AI Model Risk Levels

The Evolution of Passkeys

Building upon the passkey support introduced earlier in 2024, WhatsApp is now allowing users to link multiple passkeys to a single account. This is a game-changer for multi-device users who transition between iOS and Android ecosystems. Unlike traditional passwords, passkeys utilize biometric authentication such as Face ID or fingerprint scanning, making remote unauthorized access nearly impossible without physical possession of the device.

Moving from knowledge-based authentication to possession-based biometrics is the gold standard for modern digital security.

Transparency in Incoming Calls

For Android users, WhatsApp is introducing improved context for calls from unknown numbers. The app will now display additional metadata, such as the country of origin for the caller and whether the user shares any mutual groups with the person calling. This layer of information is crucial in helping users identify and ignore potential scam calls.

Why This Matters

BozokMedia analysis shows that as messaging platforms become central to both personal and professional communication, they become primary targets for state-sponsored and criminal hacking groups. By integrating these robust authentication layers, WhatsApp is setting a higher industry standard, forcing competitors like Telegram and Signal to keep pace in the security arms race.

Historical Context

This rollout follows a series of strategic updates from Meta. In late June, WhatsApp introduced usernames to allow profile sharing without revealing phone numbers, and in May, it launched the 'WhatsApp Plus' subscription model, which offers enhanced customization and insights.

Did You Know?: Passkeys are considered more secure than passwords because they are cryptographically tied to your specific device, preventing phishing.

Frequently Asked Questions

1. Will my existing 6-digit PIN still work?
Yes, the new alphanumeric option is an upgrade that users can choose to implement for higher security.

2. How do passkeys help prevent hacking?
Passkeys require biometric verification on your actual device, meaning a hacker cannot log in remotely even if they steal your password.