tech news•Wed, August 26, 2026•4 min read

WhatsApp Just Solved Its Biggest Security Weakness

WhatsApp is rolling out major security updates, including a shift to robust alphanumeric passwords and expanded support for multiple passkeys. These changes aim to protect users from account takeovers by moving beyond basic six-digit PINs.

A New Standard for WhatsApp Security

Meta has officially launched a suite of significant security upgrades for WhatsApp, signaling a major move to harden the platform against increasingly sophisticated account takeover tactics. The updates center on replacing legacy security features with more resilient, modern alternatives.

The changes arrive as billions of users rely on the app for sensitive communications, making it an attractive target for bad actors. By upgrading two-step verification and expanding passkey functionality, Meta is looking to drastically reduce the risk of unauthorized access.

WhatsApp is updating its security architecture to defend against account takeovers.

Goodbye, Six-Digit PINs

For years, WhatsApp users have relied on a standard six-digit PIN as their secondary layer of security. However, Meta is now allowing users to upgrade this to a full, alphanumeric password. This new implementation allows for longer, complex strings including special characters, making brute-force attacks significantly more difficult.

Multi-Passkey Support and Unknown Callers

Passkeys—which allow users to sign in via biometric methods like Face ID or fingerprint—have already seen massive adoption, with over one billion users currently utilizing the technology. To further improve user experience, WhatsApp now allows multiple passkeys to be stored on a single account.

Cross-platform support: Easily manage access if you switch between iOS and Android.
Improved security: Removes reliance on phishable password/username combinations.
Enhanced privacy: New context indicators for calls from unknown numbers to help identify potential scams.

Passkeys remove the need to rely on username and password combinations, which are ordinarily susceptible to phishing attacks. Passkey logins make it harder for bad actors to remotely access your accounts.
— TechCrunch

Key Takeaways

WhatsApp has replaced the six-digit PIN with support for complex alphanumeric passwords.
Users can now add multiple passkeys to a single account, aiding those who use both iOS and Android devices.
More than one billion people are already using passkeys for authentication.
The app is introducing better context-based information for calls from unknown numbers.
These features are designed to mitigate risks from phishing and remote account takeover attempts.

FAQ

How do I set up a passkey on WhatsApp?

You can set up a passkey by navigating to Settings > Account > Passkeys in your WhatsApp app.

Can I have more than one passkey?

Yes, WhatsApp now supports adding multiple passkeys, which is particularly useful if you operate your account across both iOS and Android devices.

Does the alphanumeric password replace my PIN?

Yes, you can now use a longer, alphanumeric password as your two-step verification method instead of the traditional six-digit PIN.

What is the benefit of using an alphanumeric password over a PIN?

An alphanumeric password allows for greater length and the inclusion of special characters, making it significantly harder for hackers to guess or brute-force.