WhatsApp rolls out new security features and passkey upgrades

WhatsApp is rolling out significant security upgrades to combat account takeovers and scams. A major change involves replacing the traditional six-digit two-step verification PIN with a more robust alphanumeric password. This new password must be at least eight characters long and include a combination of letters, numbers, and potentially special characters.

Additionally, the platform is expanding its passkey support. More than one billion users have already adopted passkeys, which allow for biometric authentication such as fingerprints or facial recognition. The update now enables users to register multiple passkeys per account, facilitating seamless transitions between different devices, including both Android and iOS.

To help users identify potential fraud, WhatsApp is also introducing enhanced caller context for unknown numbers on Android. This feature provides information such as the caller's country of origin and whether the user shares any WhatsApp groups with the person calling. Furthermore, a limited rollout of an AI-driven ‘Scam Alert’ feature is testing the ability to identify suspicious message patterns locally on devices to protect users from phishing and fraud.