WhatsApp security has been strengthened with the introduction of several new features designed to help prevent accounts from being hacked. The Meta-owned messaging service announced two key additions: the ability to upgrade PINs to full passwords, and support for multiple passkeys across devices.
The app also confirmed that when users receive calls from someone outside their contact list, they will now be given more information and context about the caller, including whether the phone number originates from another country.
These measures follow a series of privacy-focused tools introduced in recent months, among them a Scam Alert feature that flags incoming scam messages. In late June, the company said it would allow people to create usernames so that their phone numbers would no longer be visible.
Launched in 2009, WhatsApp remains the world’s most widely used messaging app, with more than 2 billion active users. It is followed by Facebook Messenger, Snapchat and Telegram.
Choosing Passwords Over PINs
Since early 2017, WhatsApp users have relied on a six-digit PIN, either when installing the app on a new device or when verifying their account phone number. The company is now letting users upgrade those PINs to passwords, which can include numbers, letters and special characters.
Existing PINs can be kept if preferred. Those who opt for a password must ensure it is at least eight characters long and includes at least one number and one letter. To create one, users go to WhatsApp Settings, select Account, then Password.
A PIN or password forms part of the app’s optional two-step verification process. When people log in, they receive a text message code as the first step, then enter their PIN or password as the second step to open the app.
Multiple Passkeys and Caller Context
WhatsApp said users can now hold more than one passkey when using both Android and iOS devices. Some people use passkeys instead of PINs or passwords to log in or to register a new device. Passkeys rely on fingerprints, facial IDs and screen lock codes to keep the app secure and private. A user could, for example, unlock WhatsApp on an iPhone with facial recognition while using a fingerprint on an Android tablet. To add them, users navigate to Settings, then Account, then Passkeys.
The company also confirmed that people using Android phones can now receive more information about incoming calls from unknown numbers outside their contact list. Users will be able to see if a caller is from a different country and whether they share any chat groups in common.
According to cybersecurity expert Joseph Steinberg, author of Cybersecurity for Dummies and a lecturer at Columbia University, greater visibility over incoming callers benefits privacy, usability and security. He noted that if a caller claims to be in the same group, many people do not check whether the claim is genuine, and the feature will now confirm whether a shared group actually exists.
