WhatsApp Rolls Out Stronger Two-Step Verification and Passkeys for Over One Billion Users

For years, WhatsApp relied on a basic six-digit PIN for two-step verification. This method helped protect accounts, but as phishing and hacking attempts grew more sophisticated, concerns mounted about its effectiveness.

Security experts and users alike pushed for better protection, especially as WhatsApp became one of the world's most popular messaging apps. The need for stronger authentication grew urgent as scams and account theft increased globally.

On August 25, 2026, several technology outlets reported a significant update to WhatsApp's security features. According to Engadget, WhatsApp began allowing users to set alphanumeric passwords instead of the traditional six-digit PIN for two-step verification. This change aimed to make accounts harder to compromise.

TechCrunch and BleepingComputer detailed the introduction of multiple passkeys per account. Users could now create unique passkeys for different devices or platforms, adding an extra layer of security. This was seen as a direct response to rising phishing threats and account takeover attempts.

Meta confirmed that over one billion users had already enabled passkeys, according to outlets like Cyber Security News and Business Line. This milestone marked a shift toward passwordless authentication, with passkeys using biometric or device-based verification instead of passwords alone.

Coverage from Digital Trends and The Next Web noted that WhatsApp also added new features to help users identify unknown callers, aiming to reduce scam calls. The rollout spanned both iOS and Android, with updates reaching users globally within days.

WhatsApp now supports stronger, alphanumeric two-step verification passwords and lets users set up multiple passkeys for their accounts. Over one billion users are using passkeys, according to recent company announcements. These changes are designed to make it much harder for attackers to gain unauthorized access, especially through phishing or intercepted codes.

The app has also improved information about calls from unknown numbers, helping users avoid potential scams. Security experts see these updates as a major step forward in protecting private conversations and account integrity.