WhatsApp has rolled out new account security measures, including stronger two-step verification and additional information about calls from unknown numbers, as the messaging platform steps up efforts to protect users from account takeovers and scams.
The new features are designed to give users stronger protection when securing their accounts and more context before responding to calls from people they do not know.
One of the major changes is an upgrade to WhatsApp’s two-step verification system.
Previously, the feature required users to create a six-digit PIN as an additional layer of protection. WhatsApp said users can now use a full password that can be longer and contain a combination of letters, numbers and special characters.
The company said the stronger password is intended to make accounts more difficult to compromise, particularly in cases where an attacker has obtained a user’s one-time verification code.
WhatsApp is also adding more information to calls from people who are not saved in a user’s contacts.
On Android, users will be able to see whether an unknown caller is using a number from another country and whether they share any WhatsApp groups with the caller.
According to the company, the additional information could help users assess unfamiliar calls before deciding whether to answer, particularly as scammers often use unexpected calls and a sense of urgency to manipulate victims.
The platform is also expanding its use of passkeys, which allow users to access or verify their WhatsApp accounts using existing device security features such as a fingerprint, Face ID or screen-lock code.
WhatsApp said more than one billion people have already set up passkeys, describing the technology as a faster and more secure alternative to codes and PINs.
Users who access WhatsApp on both Android and iOS devices can now add multiple passkeys to the same account, making it easier to authenticate across their devices.
The company said the latest measures form part of its broader efforts to strengthen account security and give users greater control over who can access their accounts.
