WhatsApp is rolling out new security tools designed to make it harder for hackers to take over user accounts, the Meta-owned messaging service announced Tuesday. The most significant change lets users replace their six-digit PIN with a full password, which can include numbers, letters, and special characters. The company also said that people can now register multiple passkeys across Android and iOS devices, allowing different unlock methods such as facial recognition on one device and a fingerprint on another.
The password upgrade applies to WhatsApp鈥檚 optional two-step verification process, which has required a six-digit PIN since early 2017. Under the new system, users who choose a password must create one that is at least eight characters long and includes at least one number and one letter, according to WhatsApp鈥檚 website. Those who prefer their existing PINs can keep them. To set a password, users go to Settings, then Account, then Password. The verification flow remains the same: after receiving a text message code, users enter their PIN or password to open the app.
Beyond login security, WhatsApp is adding more context for incoming calls from unknown numbers on Android devices. When someone outside a user鈥檚 contact list calls, the app will now display information such as whether the number originates from another country and whether the user shares any chat groups with the caller. This feature aims to give recipients a better sense of who is reaching out before they answer, which can help spot potential scams.
Cybersecurity expert Joseph Steinberg, author of Cybersecurity for Dummies and a lecturer at Columbia University, said the new caller information is a strong improvement for privacy, usability, and security. He noted that scammers often claim to belong to the same group as the victim, and the app鈥檚 new display will help users verify that claim instead of taking it at face value. Steinberg added that the overall security upgrades are beneficial, though he said it is unclear whether a specific incident prompted the changes. Regardless of the motivation, he said stronger security is better when it does not create side effects.
WhatsApp, launched in 2009, remains the world鈥檚 most widely used messaging app with more than 2 billion active users, ahead of Facebook Messenger, Snapchat, and Telegram. The new features follow other recent privacy tools, including a Scam Alert flag for suspicious messages and an option to create usernames that hide phone numbers. The company has not disclosed how many accounts are hacked each year, but the Federal Trade Commission estimates that US consumers lost $425 million last year to scams that originated on WhatsApp.
Security researchers say most account takeovers do not happen because attackers crack PINs or intercept text messages. Keepnet Labs, a cybersecurity platform, said the majority of hacks occur when users are tricked into giving away sensitive information, which then allows bad actors to gain access. The new password and passkey options add another layer of defense, but the company鈥檚 own guidance and industry analysis suggest that user awareness remains a key part of preventing account compromise.
More cybersecurity news from TechManNews.
