WhatsApp announced on August 25, 2026, that it is rolling out several new security features, including stronger two-step verification, support for multiple passkeys, and additional context for calls from unknown numbers.
The most notable change upgrades the app’s two-step verification system. Previously, users were limited to a six-digit PIN as an extra layer of protection against account takeovers. Now, users can set a longer, alphanumeric password that includes special characters, making it harder for bad actors to guess.
WhatsApp is also expanding its passkey support, which the Meta-owned app first introduced in 2024. Users can now add more than one passkey to a single account — a change the company says will be useful for people who switch between iOS and Android devices. Passkeys allow users to log in via Face ID or a fingerprint, eliminating the need for traditional username and password combinations, which are more vulnerable to phishing attacks. Because a passkey requires physical access to the device where it is stored, it may reduce the risk of remote account access by attackers.
For Android users, WhatsApp is adding contextual information to incoming calls from numbers not saved in contacts. This includes whether the number originates from a different country and whether the caller shares any group chats with the recipient.
The updates come as WhatsApp and other messaging platforms, including Signal and Telegram, work to make account security more accessible to everyday users amid increasingly sophisticated phishing and hacking attempts.
The new security features follow a series of recent updates from WhatsApp. The app launched usernames in late June 2026, allowing users to share their profiles without revealing their phone number. In late May 2026, Meta introduced WhatsApp Plus, a paid subscription plan offering extras such as profile customization, super reactions, and story insights — launched alongside similar “Plus” tiers for Instagram and Facebook.
Source: TechCrunch