WhatsApp is rolling out new security features designed to make it harder for attackers to take over user accounts while giving users greater control over how they protect their profiles.
The Meta-owned messaging platform announced the updates on Tuesday, introducing stronger two-step verification, support for multiple passkeys and additional information about calls from unknown numbers.
The changes come as phishing, social engineering and account takeover attempts become increasingly sophisticated. WhatsApp is joining other messaging platforms, including Signal and Telegram, in making stronger authentication methods easier for everyday users.
WhatsApp makes two-step verification harder to crack
WhatsApp’s two-step verification has traditionally relied on a six-digit PIN as an additional layer of protection.
The PIN is designed to prevent someone from registering a user’s account on another device, even if they manage to obtain the user’s one-time verification code.
With the latest update, users can choose a longer alphanumeric password containing special characters instead of relying on a six-digit PIN.
The option gives users a significantly harder-to-guess credential, strengthening protection against attempts to gain control of an account.
For users who have not enabled two-step verification, the update also reinforces the importance of having an additional authentication layer beyond the one-time codes used when registering a WhatsApp account.
Users can now add multiple passkeys
WhatsApp is also expanding its support for passkeys, allowing users to add more than one passkey to the same account.
The feature is particularly useful for people who regularly use multiple devices or switch between operating systems.
For example, someone who uses both an iPhone and an Android phone can have passkeys associated with their account on both devices.
WhatsApp first introduced passkey support in 2024. Unlike conventional passwords, passkeys allow users to authenticate using security mechanisms already built into their devices, such as Face ID, fingerprints or device screen locks.
This reduces reliance on passwords, which can be stolen through phishing attacks or reused across different services.
Passkeys can also make remote account compromise more difficult because an attacker would generally need access to the device or credential where the passkey is stored.
WhatsApp adds more context to unknown calls
The company is also making it easier for Android users to understand who may be calling when the number is not saved in their contacts.
When receiving a call from an unknown number, users will now see additional information, including whether the number is associated with another country and whether they have groups in common with the caller.
The additional context could help users distinguish between legitimate calls and potentially suspicious ones.
This is particularly relevant as scammers increasingly use messaging platforms to initiate contact with potential victims.
Rather than simply displaying an unfamiliar phone number, WhatsApp is giving users more information that can help them decide whether answering the call makes sense.
WhatsApp expands security and privacy tools
The latest security features follow several other changes WhatsApp has introduced in recent months.
In June, WhatsApp began rolling out usernames, allowing people to connect with others without necessarily sharing their phone numbers.
The feature gives users another layer of privacy, particularly when communicating with people they do not already know personally.
WhatsApp has also been expanding its paid offerings. Meta introduced a WhatsApp subscription plan in May that provides additional features such as profile customisation, super reactions and story insights.
The latest security updates, however, are being positioned as part of WhatsApp’s broader effort to make account protection easier to use rather than as a premium feature.
Stronger security without making WhatsApp harder to use
The challenge for messaging platforms is that security tools are only effective when users actually enable and understand them.
A complex authentication system can protect an account technically but still leave users vulnerable if they avoid using it.
WhatsApp’s latest approach attempts to address that problem by combining stronger credentials with authentication methods that require less effort from users.
Multiple passkeys can make account access more convenient across devices, while stronger two-step verification gives users who prefer traditional credentials an option that is more resistant to guessing.
The added information around unknown calls similarly gives users more context at the moment they need to make a security decision.
As messaging platforms become increasingly important for personal communication, business transactions and financial interactions, protecting accounts is becoming as important as protecting the messages themselves.
WhatsApp’s latest updates reflect that shift, putting stronger authentication and greater scam awareness directly into the everyday messaging experience.
No comments:
Post a Comment